Edit tour

Windows Analysis Report
ReviewDoc_Commission Dept Ec.pdf

Overview

General Information

Sample name:	ReviewDoc_Commission Dept Ec.pdf
Analysis ID:	1545781
MD5:	421d8d7c5f5b9fa59629da00303b723e
SHA1:	f741ff4158157cc11fc45cfd4fbe7a59b300496b
SHA256:	8fe117a3ac2644e34374454e9d0bf905098bd75735214119d9b1a51db54433c2
Infos:

Detection

Score:	23
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

AI detected landing page (webpage, office document or email)

Connects to many different domains

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Javascript checks online IP of machine

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6088 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ReviewDoc_Commission Dept Ec.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6892 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7032 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2344 --field-trial-handle=1612,i,14224133217588503997,5544407300561384709,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,6797166912141607368,17721715161204195292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor

HTTP Parser: Base64 decoded: 1730333373.000000

Source: https://cdn.metadata.io/site-insights.js

HTTP Parser: (function () { /** * @type {string} key for the visitor id cookie. */ const visitoridkey = "metadata_visitor_id"; /** * @type {string} key for the session id cookie. */ const sessionidkey = "metadata_session_id"; /** * @type {string} ip address of the client. */ let ip; /** * account configuration object. */ const config = { invalid: true }; /** * options object. */ const opts = { /** * @type {string} base url for the cdn. */ cdnbaseurl: "https://cdn.metadata.io/pixel/config", /** * @type {string} base url for the api. */ baseurl: "https://api-gw.metadata.io", /** * @type {string} account id. */ accountid: null }; /** * get the value of a cookie. * @param {string} key - the key of the cookie. * @returns {string|null} the value of the cookie, or null if not found. */ const getcookievalue = (key) => { const cookie = document.cookie.split("; ").find(function (cookie) { ...

Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="author".. found
Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="author".. found
Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="author".. found

Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="copyright".. found
Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="copyright".. found
Source: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49941 version: TLS 1.2

Source: unknown

Network traffic detected: DNS query count 31

Source: Joe Sandbox View	IP Address: 104.16.80.73 104.16.80.73
Source: Joe Sandbox View	IP Address: 104.16.102.112 104.16.102.112
Source: Joe Sandbox View	IP Address: 151.101.193.140 151.101.193.140
Source: Joe Sandbox View	IP Address: 18.244.18.32 18.244.18.32

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10

Source: global traffic	HTTP traffic detected: GET /design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1Host: www.canva.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/779f535dfc7e9155.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/856bac30504ecac8dbd38dbee61de1f1.svg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/e5aa5e318fd5dfa0.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/79679fd80f393deb.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/0af438d079413358.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/images/856bac30504ecac8dbd38dbee61de1f1.svg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/d423b058a335b47b.en.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/4bb9c51951d1d716.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/79679fd80f393deb.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/images/543d7829999d351b301ced5ed3c1f087.jpg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/306ff5855d28408f.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/e5aa5e318fd5dfa0.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /static/lib/sentry/7.16.0.min.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/0af438d079413358.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/d423b058a335b47b.en.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /api/1765394/envelope/?sentry_key=a8d71e6acf7a4a609f7c96cced259391&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/4bb9c51951d1d716.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/images/543d7829999d351b301ced5ed3c1f087.jpg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/306ff5855d28408f.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/59362c63d8046de9.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/907eef8a4baa25c2.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/f66980af75ea6dd8.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/40f0ce866d9a0621.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/64de167a16d42d85.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2359b9fab9478cec.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /chunk-batch/778ac51ce098c575.strings.js+899bf0e7605d8095.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/1d5da80170c7d950.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/f0398d1166314304.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/72e88e1e9b45a34c.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/748178ca07be7fb4.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/ef72ef9d495f3a56.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /web/7db610c71177e514.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/64de167a16d42d85.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /chunk-batch/778ac51ce098c575.strings.js+899bf0e7605d8095.js HTTP/1.1Host: chunk-composing.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/2359b9fab9478cec.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/6f9b607367582042.strings.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/1d5da80170c7d950.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/72e88e1e9b45a34c.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/ef72ef9d495f3a56.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/f4d98df598273a74.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/images/42153edee14c6bb2affb2bdb5c065004.jpg HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/748178ca07be7fb4.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /web/7db610c71177e514.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveX-Canva-Brand: BAAAAAAAAAAX-Canva-App: loginsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Canva-Build-Sha: 391016dX-Canva-User: UAAAAAAAAAAX-Canva-Analytics: AAMAA1dFQgA=sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Canva-Request: recordanalyticseventbatchsec-ch-ua-platform-version: "10.0.0"X-Canva-Locale: enX-Canva-Build-Name: 20241028-21sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3DeditorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /web/f0398d1166314304.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/6f9b607367582042.strings.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /web/f4d98df598273a74.js HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8daf6abd5a378c58 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /_ajax/csrf3/ae HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
Source: global traffic	HTTP traffic detected: GET /web/images/42153edee14c6bb2affb2bdb5c065004.jpg HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /.well-known/web-identity HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: application/jsonSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: webidentityUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_9z5lu86h/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1Host: tag.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1730333380691; TapAd_DID=a358bd6e-7f17-4d74-a7e5-b2e3df4e4039
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018 HTTP/1.1Host: collector-22324.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/config/1721.json HTTP/1.1Host: cdn.metadata.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site-insights.js HTTP/1.1Host: cdn.metadata.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixels/t2_9z5lu86h/config HTTP/1.1Host: pixel-config.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nzp6PX5vgrgHHuF&MD=4kCgrPSy HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=homepage_visit&_fv=1&_nsi=1&_ss=1&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765753&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&up.custom_country_code=US&tfd=10127&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; _ga=GA1.1.726425897.1730333381
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765772&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10136&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765789&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=1&tfd=10137&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_1730333867657108&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10151&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/config/1721.json HTTP/1.1Host: cdn.metadata.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765789&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=1&tfd=10137&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765772&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10136&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=homepage_visit&_fv=1&_nsi=1&_ss=1&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765753&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&up.custom_country_code=US&tfd=10127&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_1730333867657108&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10151&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=39vTGXSqjvv%2BQLToUzTVicDKkZAxwDqCDWtVgVqM8uDCshTeLpSGb90n38d56ZdQidQnqpzhxOny6S0tsqiDBXSzza7HB3v7J3SsJTyT5%2Fh47Vj2R1Rs%2BGgxiYyPLQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=39vTGXSqjvv%2BQLToUzTVicDKkZAxwDqCDWtVgVqM8uDCshTeLpSGb90n38d56ZdQidQnqpzhxOny6S0tsqiDBXSzza7HB3v7J3SsJTyT5%2Fh47Vj2R1Rs%2BGgxiYyPLQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /signals/plugins/microdata.js?v=2.9.174 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOrGsQIIosWxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQh4sZl94q4U73G44eFpjHPE5U8Ic3ftAYI&pscrd=CIXy3_Goga_47AEiEwihx6CVqreJAxUc7xEIHctHFMkyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQIIosWxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQiyvf63DEZUK54qCn-1eOS4lWqMKF75gIU&pscrd=CKGbprrP_7LT4gEiEwj1naGVqreJAxWO2xEIHcYVCSgyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgjVyrECCLnBsQIIscOxAgiKxbECCMLJsQIIo8WxAiIBAUABShVldmVudC1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQitTIT9IZiZ-0__nnPRQb3zVcPDG4xYvRw&pscrd=CNHH4I2ZhaToUyITCJ6trZWqt4kDFXT0EQgdAMMZwDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly93d3cuY2FudmEuY29tLw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/plugins/microdata.js?v=2.9.174 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlWJWsCEuETXWic_ztveyhtA96OPMn6VNrzkeUvRS1gwfxey5sxrwYXJTKk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUlWJWsCEuETXWic_ztveyhtA96OPMn6VNrzkeUvRS1gwfxey5sxrwYXJTKk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOrGsQIIosWxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIXy3_Goga_47AEiEwihx6CVqreJAxUc7xEIHctHFMkyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dNR_KM1XSreJWreBAKVdijGMjxh1XaIivikpZz6UaqdmktAz7&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQjzu-WIYknL2dvEMSrAGPQh0N98Zr1W7Ec&random=1594017397 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQIIosWxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CKGbprrP_7LT4gEiEwj1naGVqreJAxWO2xEIHcYVCSgyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dUXS7c1WCT67REvqGVqYGFYskQ22RD5bHLnjueHgUdW3oV5xJ&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQhPcS7h9D3Hb3ZpFJtA-jiMtTg43qN4kwQ&random=1303141392 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkQ3u4DM3EnOAgEdxVNDcQCvI8Y620wJy5eodpSZG2QGbg2zke3wcgOqRFS
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkQ3u4DM3EnOAgEdxVNDcQCvI8Y620wJy5eodpSZG2QGbg2zke3wcgOqRFS
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnUZTB5gSlovNaywDoK2OIBBGUPvjnrQEYt_5n8Pts1w9TOyCSdFvq3dxmL
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgjVyrECCLnBsQIIscOxAgiKxbECCMLJsQIIo8WxAiIBAUABShVldmVudC1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CNHH4I2ZhaToUyITCJ6trZWqt4kDFXT0EQgdAMMZwDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly93d3cuY2FudmEuY29tLw&is_vtc=1&cid=CAQSKQCa7L7dMXWvAfijAsnfsez-mzpOtm_9wa-VMNDfme1nk6vI7FqLyeP0&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQj2pLrAqa5o2kEHQozcc8Ert2zz3msVaHs&random=3292660383 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnb1nFCvkD3b8nTaFMRphjLK5yUhIPChq1EAIJIC0d5syqkGeSXh-7dBYqO
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOrGsQIIosWxAiIBATgBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIXy3_Goga_47AEiEwihx6CVqreJAxUc7xEIHctHFMkyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dNR_KM1XSreJWreBAKVdijGMjxh1XaIivikpZz6UaqdmktAz7&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQjzu-WIYknL2dvEMSrAGPQh0N98Zr1W7Ec&random=1594017397 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgjCybECCOvGsQIIosWxAiIBATgBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CKGbprrP_7LT4gEiEwj1naGVqreJAxWO2xEIHcYVCSgyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6Fmh0dHBzOi8vd3d3LmNhbnZhLmNvbS8&is_vtc=1&cid=CAQSKQCa7L7dUXS7c1WCT67REvqGVqYGFYskQ22RD5bHLnjueHgUdW3oV5xJ&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQhPcS7h9D3Hb3ZpFJtA-jiMtTg43qN4kwQ&random=1303141392 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l3l1l1&ec_mode=c&uip=173.254.250.0&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&pscdl=noapi&tag_exp=101533421~101823848~101878899~101878944~101925629&s3p=1&ct_cookie_present=false&crd=CLHBsQIIsMGxAgjVyrECCLnBsQIIscOxAgiKxbECCMLJsQIIo8WxAiIBAUABShVldmVudC1zb3VyY2UsIHRyaWdnZXJiBAoCAgM&pscrd=CNHH4I2ZhaToUyITCJ6trZWqt4kDFXT0EQgdAMMZwDICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoWaHR0cHM6Ly93d3cuY2FudmEuY29tLw&is_vtc=1&cid=CAQSKQCa7L7dMXWvAfijAsnfsez-mzpOtm_9wa-VMNDfme1nk6vI7FqLyeP0&eitems=ChEI8LKHuQYQmOH9pu2gr8bHARIdACdojQj2pLrAqa5o2kEHQozcc8Ert2zz3msVaHs&random=3292660383 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=AEA&sst.tft=1730333377374&sst.sp=1&sst.em_event=1&sst.ude=0&_s=5&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_17303338676570&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=4&tfd=15154&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.canva.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-source;event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; FPLC=1BMa1baIhCsvMjpvcFluU4NODTn8e%2FPCv4BbTwPLERcrcCt8GbXQDC10xoOhHNMV3r0Y%2BMhQAFC0lcz8g9OA0h%2BnioXxWQQguAom4v1rjhMjHWKHWzDVQLMWkc7FjA%3D%3D
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1730333386529&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; FPLC=1BMa1baIhCsvMjpvcFluU4NODTn8e%2FPCv4BbTwPLERcrcCt8GbXQDC10xoOhHNMV3r0Y%2BMhQAFC0lcz8g9OA0h%2BnioXxWQQguAom4v1rjhMjHWKHWzDVQLMWkc7FjA%3D%3D; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=AEA&sst.tft=1730333377374&sst.sp=1&sst.em_event=1&sst.ude=0&_s=5&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_17303338676570&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=4&tfd=15154&richsstsse HTTP/1.1Host: ct.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=s8ir0D9OOkfs5kMMuQtO32mQx2O594I7ylLm0735OjYEx3%2BQmC2g9lrsX2dJAx8jAkk%2FSd2EFQLOaozU9THLdXzlsyVaq%2Fs1VLNKdDrJe6JpBWLAIgjFKK2mX8URFw%3D%3D
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=178102659 HTTP/1.1Host: p.tvpixel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386523&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=2&o=4126&fbp=fb.1.1730333382444.70339655874471045&cs_est=true&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_1730333867657135&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386523&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=2&o=4126&fbp=fb.1.1730333382444.70339655874471045&cs_est=true&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_1730333867657135&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=616819332 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1730333386529&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/b77b429f87fd6ea1.runtime.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/favicon-1.ico HTTP/1.1Host: static.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=s8ir0D9OOkfs5kMMuQtO32mQx2O594I7ylLm0735OjYEx3%2BQmC2g9lrsX2dJAx8jAkk%2FSd2EFQLOaozU9THLdXzlsyVaq%2Fs1VLNKdDrJe6JpBWLAIgjFKK2mX8URFw%3D%3D
Source: global traffic	HTTP traffic detected: GET /web/b20dcbcd86b70481.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/bf0ba24cc4da588d.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/e39ac07f2eb3ad4a.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/4ce1876078c17bba.ltr.css HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/26a8c4e333fb3663.vendor.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=178102659 HTTP/1.1Host: p.tvpixel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sp=64678496-46d2-485f-8a8c-f88eb4f9ed27
Source: global traffic	HTTP traffic detected: GET /p/action/56000504.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386523&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=2&o=4126&fbp=fb.1.1730333382444.70339655874471045&cs_est=true&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_1730333867657135&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=18D0b87b9c9ad004e8a7d911730333388; XID=18D0b87b9c9ad004e8a7d911730333388
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10137834&gtmcb=616819332 HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBMzKImcCEErv7YRQP_ejQsqNpmEYa8wFEgEBAQEcJGcsZ9xS0iMA_eMAAA&S=AQAAAj48O8ZpyHnmZerMMWJxOeY
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386523&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=2&o=4126&fbp=fb.1.1730333382444.70339655874471045&cs_est=true&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_1730333867657135&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/0ede3f01a65ed2a0.js HTTP/1.1Host: static.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.canva.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/56000504.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=56000504&tm=gtm002&Ver=2&mid=61c9a7d1-a72d-4c63-8460-bf66dab9a7cf&bo=1&sid=71320160971c11efb215ad890dfc9246&vid=71321780971c11efa14da7b109b1f6dc&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Login%20to%20your%20Canva%20account&p=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&r=&lt=15794&evt=pageLoad&sv=1&cdb=AQAQ&rn=678986 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=18D0b87b9c9ad004e8a7d911730333388
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA5YR0drYAU%2BKJeXXYzBIbXcJbjxaYxB2sFKcRr1B7QNfPc1cKxv6xBk%2Fk0GXAvRvNIuCnrigNUhCVcl7yNYC9khswKmtl%2B6Kc%2FuGQlkfOhZkg%2Be%2BbXwWoL1BkA%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=g%3Adb6aacc6-bbbc-7f66-021a-f4c55d8b03c8%7Ce%3Aundefined%7Cc%3A1730333387698%7Cl%3A1730333387698; _uetsid=71320160971c11efb215ad890dfc9246; _uetvid=71321780971c11efa14da7b109b1f6dc
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA5YR0drYAU%2BKJeXXYzBIbXcJbjxaYxB2sFKcRr1B7QNfPc1cKxv6xBk%2Fk0GXAvRvNIuCnrigNUhCVcl7yNYC9khswKmtl%2B6Kc%2FuGQlkfOhZkg%2Be%2BbXwWoL1BkA%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=g%3Adb6aacc6-bbbc-7f66-021a-f4c55d8b03c8%7Ce%3Aundefined%7Cc%3A1730333387698%7Cl%3A1730333387698; _uetsid=71320160971c11efb215ad890dfc9246; _uetvid=71321780971c11efa14da7b109b1f6dc
Source: global traffic	HTTP traffic detected: GET /_online?1730333408061 HTTP/1.1Host: www.canva.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3DeditorAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA
Source: global traffic	HTTP traffic detected: GET /_online?1730333408061 HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA5YR0drYAU%2BKJeXXYzBIbXcJbjxaYxB2sFKcRr1B7QNfPc1cKxv6xBk%2Fk0GXAvRvNIuCnrigNUhCVcl7yNYC9khswKmtl%2B6Kc%2FuGQlkfOhZkg%2Be%2BbXwWoL1BkA%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=g%3Adb6aacc6-bbbc-7f66-021a-f4c55d8b03c8%7Ce%3Aundefined%7Cc%3A1730333387698%7Cl%3A1730333387698; _uetsid=71320160971c11efb215ad890dfc9246; _uetvid=71321780971c11efa14da7b109b1f6dc
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA5YR0drYAU%2BKJeXXYzBIbXcJbjxaYxB2sFKcRr1B7QNfPc1cKxv6xBk%2Fk0GXAvRvNIuCnrigNUhCVcl7yNYC9khswKmtl%2B6Kc%2FuGQlkfOhZkg%2Be%2BbXwWoL1BkA%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=g%3Adb6aacc6-bbbc-7f66-021a-f4c55d8b03c8%7Ce%3Aundefined%7Cc%3A1730333387698%7Cl%3A1730333387698; _uetsid=71320160971c11efb215ad890dfc9246; _uetvid=71321780971c11efa14da7b109b1f6dc
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nzp6PX5vgrgHHuF&MD=4kCgrPSy HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_ajax/ae/createBatch HTTP/1.1Host: www.canva.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","newSession":"yes"}; gtm_custom_user_engagement_lock_4=yes; gtm_fpc_engagement_event={"url":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor","ts":1730333379179,"utm_s":-1,"utm_m":-1}; Metadata_visitor_id=m2wjth3ootsx5szwcef; Metadata_session_id=m2wjth3okh385spd9l7; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; _fbp=fb.1.1730333382444.70339655874471045; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; FPLC=ol7uA5YR0drYAU%2BKJeXXYzBIbXcJbjxaYxB2sFKcRr1B7QNfPc1cKxv6xBk%2Fk0GXAvRvNIuCnrigNUhCVcl7yNYC9khswKmtl%2B6Kc%2FuGQlkfOhZkg%2Be%2BbXwWoL1BkA%3D%3D; ab.storage.deviceId.320f7332-8571-45d7-b342-c54192dae547=g%3Adb6aacc6-bbbc-7f66-021a-f4c55d8b03c8%7Ce%3Aundefined%7Cc%3A1730333387698%7Cl%3A1730333387698; _uetsid=71320160971c11efb215ad890dfc9246; _uetvid=71321780971c11efa14da7b109b1f6dc

Source: chromecache_311.5.dr, chromecache_287.5.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_311.5.dr, chromecache_287.5.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_260.5.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_260.5.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_242.5.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.canva.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: o13855.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: chunk-composing.canva.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.metadata.io
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: tag.tapad.com
Source: global traffic	DNS traffic detected: DNS query: collector-22324.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: pixel-config.reddit.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ct.canva.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: p.tvpixel.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: sdk.iad-01.braze.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: telemetry.canva.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com

Source: unknown

HTTP traffic detected: POST /api/1765394/envelope/?sentry_key=a8d71e6acf7a4a609f7c96cced259391&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1Host: o13855.ingest.sentry.ioConnection: keep-aliveContent-Length: 465sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.canva.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.canva.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:09:40 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6aedd8992e6c-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6aedd8992e6cx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c564ddTFUnyRWb45dSmVAK4s7D5eUbgGA14GOoNyGO84QJQGLpMzzc4gelHXviRFJEdpLUN6LllEoTCn%2BBlmE1mGpVxryx3DzoMjBCUYh5mP7WZUEl5etnYVHTUI9TQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:09:43 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6aff08e283a1-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6aff08e283a1x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QnWC3dGz8%2B%2BHuEUTGdlqYrKNLYdpI%2Bisb%2BtQLOBslR9snFDSLnDBwPhYRyL4iRNp87wcLsa5aLwuGuVsHf%2B2MD5i5Jgw6uZC9Qg62nRBAXnP%2BCQFqxUMIasbl%2Fwdwmg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:09:50 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6b2a1a7d0bfb-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6b2a1a7d0bfbx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6SXQQzxCWzxB%2BO33Ma7gTuMZ5Z%2BHuCmec28bHgb8t7v9wEYN8DsTLY3xyVwRb3Yb2Yenr6OXIzbdBLi9cuEA1sTyQGu0TzvvhtJgpE8uMupC0eJRW9nar1BGMtM8ZQs%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:09:55 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6b486fe0e7a6-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6b486fe0e7a6x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pDIq0d8ex0ii2UhuLDZRPspl7J%2Fz8zwtGD2rRTlDfmAWGhpwsgOSLs%2F%2BCCsUr9VEuS50DojC1R35JkWD506iSTEMBZjY5qNP33mg23Tr9ey7qYkzSfYQbOemoXQzHUU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:10:10 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6ba58aaeeb37-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6ba58aaeeb37x-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mxHTtC2uY3MV5RYsCNsjJ4na%2FB7B9mTpYXozneH%2FOttoL2kYdxcY2cyyYqoNeSikfP2bqWlQ%2Fb6xn8vr4ugHS6qPqd7biNTipooETWQ7%2F5LucpOyzj%2FaYQXMpuFqgTQ%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 31 Oct 2024 00:10:33 GMTContent-Type: text/javascript;charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8daf6c36dd002ccf-DFWCF-Cache-Status: DYNAMICCache-Control: no-cache, no-storeExpires: Thu, 01 Jan 1970 00:00:00 GMTStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadVary: OriginPragma: No-cacheaccept-ch: Sec-CH-UA-Platform-Versioncontent-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com;referrer-policy: strict-origin-when-cross-originx-content-type-options: nosniffx-frame-options: denyx-request-id: 8daf6c36dd002ccfx-xss-protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KY6Rp8VyEVeZfMbre2WqHskfT%2Fxh1zKzI5pvrmKj3Oks2jjBSRjUr%2F334zeBhzc0X%2BhSwgiYEGIKGIk%2B9fVkUjkuH99%2BpL%2BqtVXTuVz9ZKQTTHjx8DCIVD04KCfCDAM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_268.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_261.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1
Source: chromecache_313.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=2
Source: chromecache_334.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=72
Source: chromecache_245.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=78
Source: chromecache_334.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=128
Source: chromecache_245.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=258
Source: chromecache_298.5.dr, chromecache_267.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=
Source: chromecache_243.5.dr, chromecache_256.5.dr, chromecache_267.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1
Source: chromecache_298.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=2
Source: chromecache_261.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4a
Source: chromecache_313.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4a
Source: chromecache_334.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1
Source: chromecache_245.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=787587494;gtm=45j91e4at1
Source: chromecache_334.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1
Source: chromecache_245.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v8
Source: chromecache_298.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4
Source: chromecache_267.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=900737779;gtm=45j91e4a
Source: chromecache_256.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4a
Source: chromecache_243.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1666986526;gtm=45j91e4a
Source: chromecache_267.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1956043246;gtm=45j91e4a
Source: chromecache_298.5.dr	String found in binary or memory: https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at
Source: chromecache_287.5.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_247.5.dr	String found in binary or memory: https://alcdn.msauth.net/lib/1.3.1/js/msal.min.js
Source: chromecache_339.5.dr, chromecache_251.5.dr	String found in binary or memory: https://api-gw.metadata.io
Source: chromecache_339.5.dr, chromecache_251.5.dr	String found in binary or memory: https://api.ipify.org?format=json
Source: chromecache_247.5.dr, chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://b.bdstatic.com/searchbox/icms/searchbox/js/swan-2.0.21.js
Source: chromecache_311.5.dr, chromecache_329.5.dr, chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_339.5.dr, chromecache_251.5.dr	String found in binary or memory: https://cdn.metadata.io/pixel/config
Source: 7c98a7a8-6271-4dcd-af23-824a846fd803.tmp.3.dr, 3e11396d-ea59-4a5a-8890-f1fbe49c318c.tmp.3.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_265.5.dr, chromecache_272.5.dr	String found in binary or memory: https://chunk-composing.canva.com/chunk-batch-sm/9
Source: chromecache_353.5.dr, chromecache_242.5.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_353.5.dr, chromecache_242.5.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://ethn.io/$
Source: chromecache_266.5.dr, chromecache_341.5.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_315.5.dr, chromecache_307.5.dr	String found in binary or memory: https://hm.baidu.com
Source: chromecache_315.5.dr, chromecache_307.5.dr	String found in binary or memory: https://logx.optimizely.com/v1/events
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_283.5.dr, chromecache_268.5.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_311.5.dr, chromecache_329.5.dr, chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=
Source: chromecache_247.5.dr	String found in binary or memory: https://qqq.gtimg.cn/miniprogram/webview_jssdk/qqjssdk-1.0.0.js
Source: chromecache_247.5.dr, chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://res.wx.qq.com/open/js/jweixin-1.4.0.js
Source: chromecache_247.5.dr	String found in binary or memory: https://s3.pstatp.com/toutiao/tmajssdk/jssdk.js
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_311.5.dr, chromecache_287.5.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_311.5.dr, chromecache_329.5.dr, chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_247.5.dr, chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.canva.com/
Source: chromecache_312.5.dr, chromecache_286.5.dr	String found in binary or memory: https://www.canva.com/help/get-in-touch/contact-support
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/mandatory-collection-notice
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.canva.com/ko_kr/policies/terms-of-use
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.canva.com/policies/
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.canva.com/policies/privacy-policy/
Source: chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://www.google.com
Source: chromecache_351.5.dr, chromecache_240.5.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=$
Source: chromecache_311.5.dr, chromecache_329.5.dr, chromecache_287.5.dr, chromecache_326.5.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_267.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1223498435&fst=1730333383218&cv
Source: chromecache_298.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=153901850&fst=1730333382237&cv=
Source: chromecache_313.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=1987379564&fst=1730333383552&cv
Source: chromecache_261.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=2100046632&fst=1730333382412&cv
Source: chromecache_334.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=83622355&fst=1730333382253&cv=1
Source: chromecache_245.5.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/804757079/?random=843471526&fst=1730333383096&cv=
Source: chromecache_326.5.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_315.5.dr, chromecache_307.5.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_311.5.dr, chromecache_287.5.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_274.5.dr, chromecache_317.5.dr	String found in binary or memory: https://www.redditstatic.com/ads/49267bce/pixel.js
Source: chromecache_329.5.dr, chromecache_326.5.dr	String found in binary or memory: https://www.redditstatic.com/ads/pixel.js
Source: chromecache_311.5.dr, chromecache_287.5.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49941 version: TLS 1.2

Source: classification engine

Classification label: sus23.winPDF@32/248@119/38

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 20-09-31-484.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ReviewDoc_Commission Dept Ec.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2344 --field-trial-handle=1612,i,14224133217588503997,5544407300561384709,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,6797166912141607368,17721715161204195292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2344 --field-trial-handle=1612,i,14224133217588503997,5544407300561384709,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,6797166912141607368,17721715161204195292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: ReviewDoc_Commission Dept Ec.pdf	Initial sample: PDF keyword /JS count = 0
Source: ReviewDoc_Commission Dept Ec.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: ReviewDoc_Commission Dept Ec.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: ReviewDoc_Commission Dept Ec.pdf

Initial sample: PDF keyword obj count = 66

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: PDF document	LLM: Page contains button: 'Kindly Scan the Qrcode with your phone camera to review the Document and sign on your mobile phone' Source: 'PDF document'
Source: PDF document	LLM: PDF document contains QR code

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://www.redditstatic.com/ads/pixel.js	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	0%	URL Reputation	safe
https://connect.facebook.net/en_US/fbevents.js	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
https://api.ipify.org/?format=json	0%	URL Reputation	safe
https://static.canva.com/web/40f0ce866d9a0621.ltr.css	0%	Virustotal		Browse
https://res.wx.qq.com/open/js/jweixin-1.4.0.js	1%	Virustotal		Browse
https://www.canva.com/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
p.tvpixel.com	99.83.205.94	true	false	unknown
www.canva.com	104.16.102.112	true	false	unknown
adservice.google.com	142.250.186.130	true	false	unknown
collectoru.us.tvsquared.com	3.137.102.166	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.246.144.89	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
d1w725hft9421a.cloudfront.net	18.66.102.102	true	false	unknown
ct.canva.com	216.239.32.21	true	false	unknown
static.canva.com	104.16.103.112	true	false	unknown
tag.tapad.com	35.186.225.155	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
google.com	142.250.186.142	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
o13855.ingest.sentry.io	34.120.195.249	true	false	unknown
ad.doubleclick.net	142.250.186.102	true	false	unknown
chunk-composing.canva.com	104.16.103.112	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.193.140	true	false	unknown
telemetry.canva.com	104.16.102.112	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
googleads.g.doubleclick.net	216.58.206.66	true	false	unknown
sb.scorecardresearch.com	18.244.18.32	true	false	unknown
api.ipify.org	172.67.74.152	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
collector-22324.us.tvsquared.com	unknown	unknown	false	unknown
sdk.iad-01.braze.com	unknown	unknown	false	unknown
pixel-config.reddit.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.redditstatic.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
cdn.metadata.io	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe URL Reputation: safe	unknown
https://static.canva.com/web/40f0ce866d9a0621.ltr.css	false	0%, Virustotal, Browse	unknown
https://www.redditstatic.com/ads/pixel.js	false	URL Reputation: safe	unknown
https://static.canva.com/web/f66980af75ea6dd8.ltr.css	false		unknown
https://o13855.ingest.sentry.io/api/1765394/envelope/?sentry_key=a8d71e6acf7a4a609f7c96cced259391&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0	false		unknown
https://static.canva.com/web/e5aa5e318fd5dfa0.strings.js	false		unknown
https://alb.reddit.com/rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc=	false		unknown
https://static.canva.com/web/79679fd80f393deb.runtime.js	false		unknown
https://static.canva.com/static/images/favicon-1.ico	false		unknown
https://static.canva.com/web/b20dcbcd86b70481.vendor.js	false		unknown
https://connect.facebook.net/en_US/fbevents.js	false	URL Reputation: safe	unknown
https://static.canva.com/web/e39ac07f2eb3ad4a.js	false		unknown
https://www.canva.com/_ajax/csrf3/ae	false		unknown
https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=FGET	false		unknown
https://static.canva.com/web/4ce1876078c17bba.ltr.css	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		unknown
https://static.canva.com/web/907eef8a4baa25c2.ltr.css	false		unknown
https://static.canva.com/web/748178ca07be7fb4.js	false		unknown
https://www.facebook.com/tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=GET	false		unknown
https://p.tvpixel.com/i?aid=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&e=pv&p=web&tv=1x1&url=www.canva.com&refr=&uid=undefined&gtmcb=178102659	false		unknown
https://www.canva.com/_online?1730333408061	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/h/b/jsd/r/8daf6abd5a378c58	false		unknown
https://www.facebook.com/tr/?id=844585682227065&ev=PageView&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386523&cd[product_variant]=web-2&cd[country]=US&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=2&o=4126&fbp=fb.1.1730333382444.70339655874471045&cs_est=true&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_1730333867657135&tm=1&rqm=GET	false		unknown
https://static.canva.com/web/images/543d7829999d351b301ced5ed3c1f087.jpg	false		unknown
https://sb.scorecardresearch.com/p?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946	false		unknown
https://www.canva.com/cdn-cgi/rum?	false		unknown
https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry	false		unknown
https://www.canva.com/_ajax/ae/createBatch	false		unknown
https://static.canva.com/web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2	false		unknown
https://www.facebook.com/tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=GET	false		unknown
https://connect.facebook.net/signals/plugins/microdata.js?v=2.9.174	false		unknown
https://www.canva.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?	false		unknown
https://static.canva.com/web/images/856bac30504ecac8dbd38dbee61de1f1.svg	false		unknown
https://static.canva.com/web/779f535dfc7e9155.ltr.css	false		unknown
https://a.nel.cloudflare.com/report/v4?s=rYOOGgAPAFaP70RYDb3QVE9ocAYv7DevcuapodMOVUwpTaa1cNBhw8SqnEiPXdqn5ayCRE%2B01vL20q%2F7l0w4MfMhYcHxOeWqLhg1hfFRsHVg%2F34cojKws6AlAejeL6%2FjVaY%3D	false		unknown
https://www.google.com/.well-known/web-identity	false		unknown
https://tag.tapad.com/accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=FGET	false		unknown
https://alb.reddit.com/rp.gif?ts=1730333386529&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc=	false		unknown
https://static.canva.com/web/4bb9c51951d1d716.vendor.js	false		unknown
https://connect.facebook.net/signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		unknown
https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor	false		unknown
https://static.canva.com/web/0af438d079413358.vendor.js	false		unknown
https://static.canva.com/web/0ede3f01a65ed2a0.js	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=FGET	false		unknown
https://static.canva.com/web/2359b9fab9478cec.js	false		unknown
https://pixel-config.reddit.com/pixels/t2_9z5lu86h/config	false		unknown
https://static.canva.com/web/images/42153edee14c6bb2affb2bdb5c065004.jpg	false		unknown
https://static.canva.com/web/306ff5855d28408f.js	false		unknown
https://static.canva.com/web/b77b429f87fd6ea1.runtime.js	false		unknown
https://static.canva.com/web/59362c63d8046de9.ltr.css	false		unknown
https://api.ipify.org/?format=json	false	URL Reputation: safe	unknown
https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946	false		unknown
https://static.canva.com/web/26a8c4e333fb3663.vendor.js	false		unknown
https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10137834&gtmcb=616819332	false		unknown
https://static.canva.com/static/lib/sentry/7.16.0.min.js	false		unknown
https://static.canva.com/web/64de167a16d42d85.js	false		unknown
https://www.facebook.com/tr/?id=844585682227065&ev=Microdata&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333386525&cd[DataLayer]=%5B%5D&cd[Meta]=%7B%22title%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22meta%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[OpenGraph]=%7B%22og%3Asite_name%22%3A%22Canva%22%2C%22og%3Atitle%22%3A%22Login%20to%20your%20Canva%20account%22%2C%22og%3Aimage%22%3A%22https%3A%2F%2Fstatic.canva.com%2Fstatic%2Fimages%2Ffb_cover-1.jpg%22%2C%22og%3Atype%22%3A%22website%22%2C%22og%3Adescription%22%3A%22Login%20to%20access%20and%20create%20your%20next%20design.%22%7D&cd[Schema.org]=%5B%5D&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=3&o=4126&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&es=automatic&tm=3&rqm=GET	false		unknown
https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_311.5.dr, chromecache_287.5.dr	false	URL Reputation: safe	unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1956043246;gtm=45j91e4a	chromecache_267.5.dr	false		unknown
https://res.wx.qq.com/open/js/jweixin-1.4.0.js	chromecache_247.5.dr, chromecache_351.5.dr, chromecache_240.5.dr	false	1%, Virustotal, Browse	unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4	chromecache_298.5.dr	false		unknown
https://www.canva.com/	chromecache_247.5.dr, chromecache_351.5.dr, chromecache_240.5.dr	false	0%, Virustotal, Browse	unknown
https://www.redditstatic.com/ads/49267bce/pixel.js	chromecache_274.5.dr, chromecache_317.5.dr	false		unknown
https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment	chromecache_283.5.dr, chromecache_268.5.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_287.5.dr, chromecache_326.5.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_311.5.dr, chromecache_287.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at	chromecache_298.5.dr	false		unknown
https://www.canva.com/ko_kr/policies/terms-of-use	chromecache_351.5.dr, chromecache_240.5.dr	false		unknown
https://www.canva.com/policies/	chromecache_351.5.dr, chromecache_240.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4a	chromecache_261.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=	chromecache_298.5.dr, chromecache_267.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4a	chromecache_313.5.dr	false		unknown
https://www.google.com/recaptcha/enterprise.js?render=$	chromecache_351.5.dr, chromecache_240.5.dr	false		unknown
https://www.canva.com/policies/privacy-policy/	chromecache_351.5.dr, chromecache_240.5.dr	false		unknown
https://api.ipify.org?format=json	chromecache_339.5.dr, chromecache_251.5.dr	false		unknown
https://px.ads.linkedin.com/collect/?pid=	chromecache_329.5.dr, chromecache_326.5.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_311.5.dr, chromecache_329.5.dr, chromecache_287.5.dr, chromecache_326.5.dr	false	URL Reputation: safe	unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1	chromecache_261.5.dr	false		unknown
https://connect.facebook.net/	chromecache_353.5.dr, chromecache_242.5.dr	false	URL Reputation: safe	unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=900737779;gtm=45j91e4a	chromecache_267.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=2	chromecache_313.5.dr	false		unknown
https://api-gw.metadata.io	chromecache_339.5.dr, chromecache_251.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v8	chromecache_245.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=78	chromecache_245.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=72	chromecache_334.5.dr	false		unknown
https://cdn.metadata.io/pixel/config	chromecache_339.5.dr, chromecache_251.5.dr	false		unknown
https://www.canva.com/help/get-in-touch/contact-support	chromecache_312.5.dr, chromecache_286.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=2	chromecache_298.5.dr	false		unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1	chromecache_243.5.dr, chromecache_256.5.dr, chromecache_267.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4a	chromecache_256.5.dr	false		unknown
https://www.canva.com/ko_kr/policies/mandatory-collection-notice	chromecache_351.5.dr, chromecache_240.5.dr	false		unknown
https://developers.google.com/identity/gsi/web/guides/fedcm-migration	chromecache_283.5.dr, chromecache_268.5.dr	false	URL Reputation: safe	unknown
https://meet.google.com	chromecache_283.5.dr, chromecache_268.5.dr	false	URL Reputation: safe	unknown
https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1	chromecache_334.5.dr	false		unknown
https://github.com/getsentry/sentry-javascript	chromecache_266.5.dr, chromecache_341.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1	chromecache_334.5.dr	false		unknown
https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1666986526;gtm=45j91e4a	chromecache_243.5.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
3.137.102.166	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.102.112	www.canva.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.244.18.32	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
18.244.18.38	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	google.com	United States	15169	GOOGLEUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
54.246.144.89	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.67.74.152	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
142.250.186.130	adservice.google.com	United States	15169	GOOGLEUS	false
18.66.102.102	d1w725hft9421a.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.186.225.155	tag.tapad.com	United States	15169	GOOGLEUS	false
150.171.28.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.136.10.62	unknown	United States	16509	AMAZON-02US	false
99.83.205.94	p.tvpixel.com	United States	16509	AMAZON-02US	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.64	unknown	United States	3	MIT-GATEWAYSUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.239.32.21	ct.canva.com	United States	15169	GOOGLEUS	false
216.58.206.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.16.103.112	static.canva.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
75.2.57.54	unknown	United States	16509	AMAZON-02US	false
34.120.195.249	o13855.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545781
Start date and time:	2024-10-31 01:09:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ReviewDoc_Commission Dept Ec.pdf
Detection:	SUS
Classification:	sus23.winPDF@32/248@119/38
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 142.250.185.238, 64.233.166.84, 184.28.88.176, 34.104.35.123, 34.193.227.236, 54.144.73.197, 18.207.85.246, 107.22.247.231, 93.184.221.240, 172.64.41.3, 162.159.61.3, 74.125.133.84, 108.177.15.84, 142.250.110.84, 142.250.184.200, 142.250.185.232, 2.23.197.184, 216.58.212.162, 95.101.148.135, 2.19.126.149, 2.19.126.143, 88.221.110.136, 88.221.110.227, 172.64.148.188, 104.18.39.68, 13.107.42.14, 104.18.41.41, 172.64.146.215, 142.250.185.131
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, www.googleadservices.com, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, wu.azureedge.net, acroipm2.adobe.com, l-0005.l-msedge.net, clients2.google.com, ssl-delivery.adobe.com.edgekey.net, www.googletagmanager.com, a122.dscd.akamai.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, p13n.adobe.io, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, sdk.iad-01.braze.com.cd
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
20:09:42	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Screenshot	https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Screenshot	https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Screenshot	https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Screenshot	https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
104.16.102.112	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGToNVcKHA/ima6IpDnsKIyJhI-wn-WQA/view?utm_content=DAGToNVcKHA&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse
	36.msi	Get hash	malicious	Numando	Browse
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse
151.101.193.140	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse
	http://molatoriism.icu	Get hash	malicious	HTMLPhisher	Browse
	Safe & Sound shared new proposal with you...eml	Get hash	malicious	Unknown	Browse
	https://odoorussia.wordpress.com/document/	Get hash	malicious	Unknown	Browse
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse
	https://bdvonline-personas-139.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://gdocs.last2003.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://hy.markkasmick.click/cx/tbSgVco_akr35UznLBgMmL_dGwr4A9B_vyg2WwEB0w1LRjKjQMyEnB89mCfTRy8oqnbpdFunqinBhx0TsHvSJdUHnbksc3kdcKecoDvVHa5LAm46atMmRo3D2CHoEu2bmOqt4Ic8O_7AE7Igwgbi5c8zmZf6Fqp_XqcjREPr7609oL7vKm8FfjGLhMetr2oxtpR3ywH4BUElgc7EI7usxj8CJYEUMktwlb7YUzPvYQ7P1PilEV0LqiXI5sm6QVF4ZGl5TIXhnQLOG0kl6WQ0miiZysBfhaNojnPTUvisUUkwOp2fYTxkXEIhZ7ESJ7qXYLxQbmy4RJVeZZZ3RY5rX8W5t8cudSM9Zx7UaxgLH56aOv81v4QfUnzroT9v7LR3jPEjzYXr2LwuykYQnzvV6boWlogU4jkPE6MocRRlRoC6uUx2e1Wseo8MqGWTT2uXo4HbQDneiMF84sQ34*3TnbAxXWu8xLbb_mAOQxUTA3T5TUUZKeU3ziolM8TSVV5Y5LQTFGtNArddwJKdWCb_cLYMxUJpZ3cqM_A	Get hash	malicious	Unknown	Browse
18.244.18.32	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	JVLkkfzSKW.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	http://www.thegioimoicau.com/	Get hash	malicious	Unknown	Browse
	https://us-west-2.protection.sophos.com/?d=site.pro&u=aHR0cHM6Ly9jbGF1ZGlha3J1ZWdlci5zaXRlLnByby8=&i=NThlN2NjYzYyOTljZjkxNGY4YmM1Njkz&t=QTRyTlRXbysvd3IyNERLT1pJYVNuNlAvU0FLMVAyb2pCN053UGFJSWtBST0=&h=dd65eaa7298b4ffebbd13b01dcbd3434&s=AVNPUEhUT0NFTkNSWVBUSVYfWTd0VrJEAZ1PFPx8UNdDDkWk4HVuGeVZrBnJzV7Ifg	Get hash	malicious	Unknown	Browse
	http://www.bollywoodhungama.com	Get hash	malicious	Unknown	Browse
	https://finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/index.php	Get hash	malicious	HTMLPhisher	Browse
104.16.80.73	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	https://myworkspacec1d73.myclickfunnels.com/onlinereview--9cb35?preview=true	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse
	https://e.trustifi.com/#/fff2a6/655144/3ac50c/e93bb8/594e42/41c163/f1cd98/92ee40/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/848a7a/9632d0/879ea4/bcfc0d/744595/93daa1/f34456/a15015/3ddaed/fad545/1fd970/328bf8/9bb3f0/c514cd/df7a51/88456c/c9366d/790245/fb6752/33794d/6e0d28/60381b/a98a06/87eaef/01f4e4/642891/927008/b3d84b/be88ef/6f56ca/922d7f/c2017a/2b28ce/5f100a/ab5cfe/ca732f/ba9f64/6c13c0/db448e/12afff/ea859a/0054d0/06ab25/ddf455/c36939/fe771f/592f7f/fd9f55/51d733/4f5c46/02cddd/dbef71/7c02e0/b3eaba/7eac45/4a8768/a7dd16/2174e0/de559c/dacc2a/571f0f/f5f216/44ee34/abbbf4/b6cd49/d82da6/795ff3/bc1fdf/8febc7/4b7488/0cb4fb/7ef03b/a191c5/4d2316/483906/0c1e88	Get hash	malicious	Unknown	Browse
	https://myworkspacec1d73.myclickfunnels.com/onlinereview--9097d?preview=true	Get hash	malicious	Unknown	Browse
	https://8i.eryonficket.com/g60ff/#aGVzc2dyb3VwaW52QGhlc3MuY29t	Get hash	malicious	Unknown	Browse
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp%2Fwe4uproducts.com/cbb/lld/jjg/5BVvnI7cfJ4HfuhWZvVda7dK/am9yZGFuLmJsYWNrQGxlYXJmaWVsZC5jb20=	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse
	Douglas County Government.pdf	Get hash	malicious	Unknown	Browse
	https://app.creatopy.com/share/d/qvnqyxdo8o7m	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
collectoru.us.tvsquared.com	https://mcafeeinc-mkt-prod2-t.adobe-campaign.com/r/?id=hf505ba5a,7e223f22,7e22536b&e=cDE9JmFmZmlkPTAmY3VsdHVyZT1FTi1VUyZ0az1OUEdkMGVLcjd3SG1jVnF2cHQ2RFpYY3FIbHZlc3lGV1hZN3R5a0ZDTGJWX210NUlTX09UaTEwa291MG15NkZqMCZ0cD02NSZhdD14dXVlczNIRXpPbk45bE5wZzFoMnlFSEpTNnlSSnQxMk4xSzA3N2pHR083QTRYdVdQTzNlNXZmLVdKcUFQQzZYMCZwMj0wMjQvXzAgX29sX2lzX1NlbmRMaW5rX0tleUNhcmRfRE0zMzY4MDkwJnAzPURNMzM2ODA5MA&s=JTMn_G5VW0V9WjEy6_Fw8uIaCQd67lmwdVLQnjaD0bA	Get hash	malicious	Unknown	Browse	13.59.149.20
	http://mxi.fr/json/upload/dkjxff.php?lfitf5p	Get hash	malicious	Unknown	Browse	3.20.77.1
	http://sycuan.com/	Get hash	malicious	Unknown	Browse	13.59.149.20
	CHDLSHtWbSRCfzJMtDO.ps1	Get hash	malicious	Unknown	Browse	13.59.149.20
	https://ahchoadeegu.homes?u=k8pp605&o=c9ewtnr&t=8845	Get hash	malicious	Unknown	Browse	3.138.129.130
	https://bankllist.us	Get hash	malicious	Unknown	Browse	3.16.110.205
	https://www.canva.com/design/DAGRChe-uPY/zThfQNyw1NZS6UhHxViCVA/edit?utm_content=DAGRChe-uPY&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	Unknown	Browse	18.116.132.215
	https://url.za.m.mimecastprotect.com/s/0BCLC2RJJxsopvqJcnfRC5V8Fi?domain=form.asana.com	Get hash	malicious	Unknown	Browse	18.116.132.215
	lista-fantacalcio-aggiornata-pdf.pdf	Get hash	malicious	Unknown	Browse	3.130.53.173
	http://partmopspot.info/?utm_campaign=y0rsMyowMImIDv9DTSX69oig88PrjKrJ9agQ3DpV-9I1&t=back4	Get hash	malicious	Unknown	Browse	3.19.98.239
static.cloudflareinsights.com	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://www.mediafire.com/file/oyfycncwen0a3ue/DSP_Plan_Set.zip/file	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://myworkspacec1d73.myclickfunnels.com/onlinereview--9cb35?preview=true	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.16.80.73
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse	104.16.79.73
	https://e.trustifi.com/#/fff2a6/655144/3ac50c/e93bb8/594e42/41c163/f1cd98/92ee40/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/848a7a/9632d0/879ea4/bcfc0d/744595/93daa1/f34456/a15015/3ddaed/fad545/1fd970/328bf8/9bb3f0/c514cd/df7a51/88456c/c9366d/790245/fb6752/33794d/6e0d28/60381b/a98a06/87eaef/01f4e4/642891/927008/b3d84b/be88ef/6f56ca/922d7f/c2017a/2b28ce/5f100a/ab5cfe/ca732f/ba9f64/6c13c0/db448e/12afff/ea859a/0054d0/06ab25/ddf455/c36939/fe771f/592f7f/fd9f55/51d733/4f5c46/02cddd/dbef71/7c02e0/b3eaba/7eac45/4a8768/a7dd16/2174e0/de559c/dacc2a/571f0f/f5f216/44ee34/abbbf4/b6cd49/d82da6/795ff3/bc1fdf/8febc7/4b7488/0cb4fb/7ef03b/a191c5/4d2316/483906/0c1e88	Get hash	malicious	Unknown	Browse	104.16.80.73
	https://myworkspacec1d73.myclickfunnels.com/onlinereview--9097d?preview=true	Get hash	malicious	Unknown	Browse	104.16.79.73
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	104.16.79.73
	8m9f0jVE2G.exe	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://8i.eryonficket.com/g60ff/#aGVzc2dyb3VwaW52QGhlc3MuY29t	Get hash	malicious	Unknown	Browse	104.16.80.73
	https://www.google.co.uk/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp%2Ffairwaygilbert.com%2Fnew%2FdtMyxOyre1WJ8xvj5DnN7kDa/Y2hyaXMuaGF3a2luc0BwZXJyeWhvbWVzLmNvbQ==	Get hash	malicious	Tycoon2FA	Browse	104.16.79.73
p.tvpixel.com	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	99.83.205.94
	https://wetransfer.com/downloads/bd15c1f671ae60c5a56e558eb8cc43bf20241030150256/3b30cd5b9ce1ffb29d79c9118153941c20241030150256/70baef?t_exp=1730559776&t_lsid=6bd545a9-d09b-4abd-a317-124dbe9fe64d&t_network=email&t_rid=YXV0aDB8NjZlYWI0YTExODhmYzc1OGMzMmNiODIx&t_s=download_link&t_ts=1730300576&utm_campaign=TRN_TDL_01&utm	Get hash	malicious	HTMLPhisher	Browse	99.83.205.94
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	75.2.57.54
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	99.83.205.94
	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	99.83.205.94
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	99.83.205.94
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	75.2.57.54
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	99.83.205.94
	https://bronze-cat-cocoa.glitch.me/Onlineaccessprofile.HTML	Get hash	malicious	HTMLPhisher	Browse	99.83.205.94
	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	75.2.57.54
www.canva.com	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.102.112
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.canva.com/design/DAGUUU-VdiI/DdL4Z-_loK4X7NMMbGGnJg/view?utm_content=DAGUUU-VdiI&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.canva.com/design/DAGToNVcKHA/ima6IpDnsKIyJhI-wn-WQA/view?utm_content=DAGToNVcKHA&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	104.16.102.112
	https://www.canva.com/design/DAGSL2lLp_4/lQGTdiRa89y3fkgkaFc-uQ/edit?utm_content=DAGSL2lLp_4&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HTMLPhisher	Browse	104.16.102.112
	https://www.canva.com/design/DAGRqw6QeQQ/AG-qT9TQjDBH3od1kVX5UA/edit?utm_content=DAGRqw6QeQQ&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutton	Get hash	malicious	HtmlDropper	Browse	104.16.103.112
	https://www.google.com/url?rct=j&sa=t&url=https://www.wistv.com/2024/09/18/how-register-vote-sc/&ct=ga&cd=CAEYACoUMTE1ODk5MTgyNjc5Mjk4MDkxNDYyHGQ3YWE0YjIyZjk5ZTBkYTg6Y29tOmVuOlVTOlI&usg=AOvVaw2u71nyB5_za_kch4LRgAMu	Get hash	malicious	Unknown	Browse	104.16.103.112
	https://www.google.com/url?rct=j&sa=t&url=https://www.wistv.com/2024/09/18/how-register-vote-sc/&ct=ga&cd=CAEYAyoTNDI3NTE2NDk3MjQxMjk2MDMxNTIaZjdkMjBhNTQwODRiMzY2OTpjb206ZW46VVM&usg=AOvVaw2u71nyB5_za_kch4LRgAMu	Get hash	malicious	Unknown	Browse	104.16.103.112

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	Arquivo_4593167.msi	Get hash	malicious	AteraAgent	Browse	13.35.58.7
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	18.244.18.38
	Paiement.eml	Get hash	malicious	HTMLPhisher	Browse	76.76.21.98
	zte.elf	Get hash	malicious	Unknown	Browse	34.249.145.219
	https:/click.mailchimp.com/track/click/30010842/docsend.com?p=eyJzIjoiT2RaN0hwNHlyY2E3VXl5TWcwMlA2eFpHVlN3IiwidiI6MSwicCI6IntcInVcIjozMDAxMDg0MixcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2RvY3NlbmQuY29tXFxcL3ZpZXdcXFwvZzZnYzZjazdtNHlkYTRpa1wiLFwiaWRcIjpcImNhZDg3NzI1Y2UzMjRiMzI4Yzk1ZGVkYWUyMzc4ZTZjXCIsXCJ1cmxfaWRzXCI6W1wiYzE5ZWU5NGJiMzA5YmZhOGQ2MDU3OGI1Mjk5NTFmOWE4NDQ0ODNhYVwiXX0ifQ#steven.davis@tu.edu	Get hash	malicious	HTMLPhisher	Browse	18.239.36.13
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse	18.245.31.89
	https://app.pandadoc.com/document/v2?token=abf6587d58630a40e08d0ad15de8202e2e9c4af5	Get hash	malicious	Unknown	Browse	99.86.8.175
	(No subject) (100).eml	Get hash	malicious	Tycoon2FA	Browse	108.138.217.58
	https://www.canva.com/design/DAGVD7_HMvQ/PFkDB3TDx6Ru4nNALhSqqQ/view?utm_content=DAGVD7_HMvQ&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	18.245.187.2
	Reminders for Msp-partner_ Server Alert.eml	Get hash	malicious	HTMLPhisher	Browse	54.73.203.83
FASTLYUS	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	Arquivo_4593167.msi	Get hash	malicious	AteraAgent	Browse	199.232.210.172
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	V6QED2Q1WBYVOPE	Get hash	malicious	Unknown	Browse	151.101.67.6
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
CLOUDFLARENETUS	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	104.21.32.196
	https://webdemo.biz/	Get hash	malicious	NetSupport RAT, CAPTCHA Scam	Browse	104.26.0.231
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	http://hprus.conegutsud.com.pe/4zgrHK17910PyfC1508dysnmxbczx27005OLWUIBMTRFCEVBH25578NWDJ17331m12#2mzdvgfkgua042eh8kky7aanhr5dggelvb8fjk5yz6jna8o8e5	Get hash	malicious	Phisher	Browse	188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
	SecuriteInfo.com.Trojan.PWS.Lumma.749.31391.1681.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	104.21.33.140
	5lg7zd.elf	Get hash	malicious	Unknown	Browse	188.114.97.3
CLOUDFLARENETUS	HLZwUhcJ28.exe	Get hash	malicious	LummaC	Browse	104.21.32.196
	https://webdemo.biz/	Get hash	malicious	NetSupport RAT, CAPTCHA Scam	Browse	104.26.0.231
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	http://hprus.conegutsud.com.pe/4zgrHK17910PyfC1508dysnmxbczx27005OLWUIBMTRFCEVBH25578NWDJ17331m12#2mzdvgfkgua042eh8kky7aanhr5dggelvb8fjk5yz6jna8o8e5	Get hash	malicious	Phisher	Browse	188.114.96.3
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
	file.exe	Get hash	malicious	Unknown	Browse	104.26.0.100
	SecuriteInfo.com.Trojan.PWS.Lumma.749.31391.1681.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	104.21.33.140
	5lg7zd.elf	Get hash	malicious	Unknown	Browse	188.114.97.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 20.12.23.50
	http://hprus.conegutsud.com.pe/4zgrHK17910PyfC1508dysnmxbczx27005OLWUIBMTRFCEVBH25578NWDJ17331m12#2mzdvgfkgua042eh8kky7aanhr5dggelvb8fjk5yz6jna8o8e5	Get hash	malicious	Phisher	Browse	184.28.90.27 20.12.23.50
	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	Paiement.eml	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50
	https://pub-6838e3dd185d4df89d3bb3eabe6469a4.r2.dev/index.html#	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	https:/click.mailchimp.com/track/click/30010842/docsend.com?p=eyJzIjoiT2RaN0hwNHlyY2E3VXl5TWcwMlA2eFpHVlN3IiwidiI6MSwicCI6IntcInVcIjozMDAxMDg0MixcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2RvY3NlbmQuY29tXFxcL3ZpZXdcXFwvZzZnYzZjazdtNHlkYTRpa1wiLFwiaWRcIjpcImNhZDg3NzI1Y2UzMjRiMzI4Yzk1ZGVkYWUyMzc4ZTZjXCIsXCJ1cmxfaWRzXCI6W1wiYzE5ZWU5NGJiMzA5YmZhOGQ2MDU3OGI1Mjk5NTFmOWE4NDQ0ODNhYVwiXX0ifQ#steven.davis@tu.edu	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	184.28.90.27 20.12.23.50
	https://jksvb.jnkpavers.com/?tZbf66=Tyw6/shhfkanxgsdff/&c=E,1,NSDuZCxGQc6fw5XDGugSpFh6vhsurKgNKuRtQYEvQblaeko7ktmOqkToectUm_5S_qV7IGwrOynGYnQ5TFSCJymAV2tc5TeuFegn96UyDZPOEKOyHYw,&typo=1	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse	184.28.90.27 20.12.23.50
	Access Audits -System #6878.msg	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.143436406291499
Encrypted:	false
SSDEEP:	6:6F1q2PRN2nKuAl9OmbnIFUt8vFuZmw+vFCkwORN2nKuAl9OmbjLJ:6zvaHAahFUt8v4/+vg5JHAaSJ
MD5:	C62B4337021518FA0EFC447D0B3252F4
SHA1:	2C2677FBBBE82995D7693E26170B456FC596E02B
SHA-256:	8F944E0A748FBFB47A57975D86361776B0EEFFD7360758CCE41BB098D89E127E
SHA-512:	683536119BBF30D17F80095CCBC3C4436610CC3E1BE8F4D51074FAEACAC1B784F5F3AF7DAE4C7FEF72D30150AD17C5439693BAF9E66C04F8D2A939F73A00BE70
Malicious:	false
Reputation:	low
Preview:	2024/10/30-20:09:29.995 1a80 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-20:09:29.997 1a80 Recovering log #3.2024/10/30-20:09:29.997 1a80 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.143436406291499
Encrypted:	false
SSDEEP:	6:6F1q2PRN2nKuAl9OmbnIFUt8vFuZmw+vFCkwORN2nKuAl9OmbjLJ:6zvaHAahFUt8v4/+vg5JHAaSJ
MD5:	C62B4337021518FA0EFC447D0B3252F4
SHA1:	2C2677FBBBE82995D7693E26170B456FC596E02B
SHA-256:	8F944E0A748FBFB47A57975D86361776B0EEFFD7360758CCE41BB098D89E127E
SHA-512:	683536119BBF30D17F80095CCBC3C4436610CC3E1BE8F4D51074FAEACAC1B784F5F3AF7DAE4C7FEF72D30150AD17C5439693BAF9E66C04F8D2A939F73A00BE70
Malicious:	false
Reputation:	low
Preview:	2024/10/30-20:09:29.995 1a80 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-20:09:29.997 1a80 Recovering log #3.2024/10/30-20:09:29.997 1a80 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.125383946242878
Encrypted:	false
SSDEEP:	6:6FfT+q2PRN2nKuAl9Ombzo2jMGIFUt8vFLdWZmw+vF3VkwORN2nKuAl9Ombzo2jz:6p+vaHAa8uFUt8vhdW/+vxV5JHAa8RJ
MD5:	8ED6F15733432C88F83F934D5E9E74DD
SHA1:	14A17834B8E15C01BFC4775CA305F96896490501
SHA-256:	A8D60A41570DB505146EC10243004F4104AE3EDACB565F1FB3C5989CE8008814
SHA-512:	006B192774AFCDE26024E204567EA1426CDC238C00F41F2230892028B5B9EB8CB75CF0EAAFD2C99CBBECA37E76FEF2115D5B641610A7AC13928A06B92865818E
Malicious:	false
Reputation:	low
Preview:	2024/10/30-20:09:29.788 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-20:09:29.792 1bec Recovering log #3.2024/10/30-20:09:29.793 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	334
Entropy (8bit):	5.125383946242878
Encrypted:	false
SSDEEP:	6:6FfT+q2PRN2nKuAl9Ombzo2jMGIFUt8vFLdWZmw+vF3VkwORN2nKuAl9Ombzo2jz:6p+vaHAa8uFUt8vhdW/+vxV5JHAa8RJ
MD5:	8ED6F15733432C88F83F934D5E9E74DD
SHA1:	14A17834B8E15C01BFC4775CA305F96896490501
SHA-256:	A8D60A41570DB505146EC10243004F4104AE3EDACB565F1FB3C5989CE8008814
SHA-512:	006B192774AFCDE26024E204567EA1426CDC238C00F41F2230892028B5B9EB8CB75CF0EAAFD2C99CBBECA37E76FEF2115D5B641610A7AC13928A06B92865818E
Malicious:	false
Reputation:	low
Preview:	2024/10/30-20:09:29.788 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-20:09:29.792 1bec Recovering log #3.2024/10/30-20:09:29.793 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3e11396d-ea59-4a5a-8890-f1fbe49c318c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7c98a7a8-6271-4dcd-af23-824a846fd803.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	403
Entropy (8bit):	4.978947790739379
Encrypted:	false
SSDEEP:	12:YHO8sqMUsBdOg2Hp02Zcaq3QYiubrP7E4T3y:YXs5dMHpe3QYhbz7nby
MD5:	C94C9A423B7A510111A50BA731939586
SHA1:	C386574DDE4B5CB37812792F8EDB409F0294E6EF
SHA-256:	62B7B8D6DD4F498473D20120EE2AE2D147012029C76C1B09FEC4A513D0FDC8DA
SHA-512:	50F8819C8EB208DBAE50BEBE36DD95496D8FE578BE4D667EAE63C20C15BE111A4C19E99FF74C893FD48243D12558E1E0BAD6E58B5E76AAB4D289025C3FDB7D2A
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374893375603173","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":235353},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF7099ed.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	403
Entropy (8bit):	4.953858338552356
Encrypted:	false
SSDEEP:	12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby
MD5:	4C313FE514B5F4E7E89329630909F8DC
SHA1:	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56
SHA-256:	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
SHA-512:	1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13341145152835463","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":144284},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.16","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4099
Entropy (8bit):	5.229459614854501
Encrypted:	false
SSDEEP:	96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xe39DD67n:OLT0bTIeYa51Ogu/0OZARBT8kN8839Dw
MD5:	B380A483D374ABE1DF6AAF295D2B9E8D
SHA1:	73E5A9D44E42CCC9F2AD636B2AD601A067862491
SHA-256:	6F8789354ECA4E498949F85085D324395DB23FC9C581AF89549ADF4986007D9E
SHA-512:	B8DBF350E6100D7351D5FF1418A432D35F9BC06EA3515BDC22A601724AE3B56BD05EECF4BAA9F74E10406C32464046681BF268CA65617CD608873E8B335ADFD9
Malicious:	false
Preview:	*...#................version.1..namespace-e...o................next-map-id.1.Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/.0y.S_r................next-map-id.2.Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/.16.X:r................next-map-id.3.Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/.2.P.@o................next-map-id.4.Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/.346.+^...............Pnamespace-1d95df23_a38f_44a8_b732_4e62dd896a16-https://rna-resource.acrobat.com/....^...............Pnamespace-09c119c2_97bc_4467_8f67_f92472c9e5dc-https://rna-resource.acrobat.com/..?&a...............Snamespace-2a884c18_b39c_4e3d_942f_252e530ca4bd-https://rna-v2-resource.acrobat.com/_...a...............Snamespace-2e78bfda_7188_4688_a4aa_1ff81b6e5eaa-https://rna-v2-resource.acrobat.com/...o................next-map-id.5.Pnamespace-07af9ee9_2076_4f12_94b5_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.061847980828819
Encrypted:	false
SSDEEP:	6:6FgN+q2PRN2nKuAl9OmbzNMxIFUt8vFJWZmw+vFeiVkwORN2nKuAl9OmbzNMFLJ:66N+vaHAa8jFUt8vLW/+v/V5JHAa84J
MD5:	AEB33EE5E688417D30212DB7D091B757
SHA1:	B1B14A72E7A0F9E8D60591642E49A79D479266A1
SHA-256:	212F389BD665BE73167D4E2F0F03AFF937EA42525318D9D0EB98F3001CCB349F
SHA-512:	CC83198CB0410B0616451B8BBD2652A7DCFF19DD5578C590797003354E83596B04B986F341C8FD875BEDD6F3E46AD2BE97DD1D8A9DADBD0EF8BD82F836D5AD4F
Malicious:	false
Preview:	2024/10/30-20:09:30.039 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-20:09:30.040 1bec Recovering log #3.2024/10/30-20:09:30.043 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.061847980828819
Encrypted:	false
SSDEEP:	6:6FgN+q2PRN2nKuAl9OmbzNMxIFUt8vFJWZmw+vFeiVkwORN2nKuAl9OmbzNMFLJ:66N+vaHAa8jFUt8vLW/+v/V5JHAa84J
MD5:	AEB33EE5E688417D30212DB7D091B757
SHA1:	B1B14A72E7A0F9E8D60591642E49A79D479266A1
SHA-256:	212F389BD665BE73167D4E2F0F03AFF937EA42525318D9D0EB98F3001CCB349F
SHA-512:	CC83198CB0410B0616451B8BBD2652A7DCFF19DD5578C590797003354E83596B04B986F341C8FD875BEDD6F3E46AD2BE97DD1D8A9DADBD0EF8BD82F836D5AD4F
Malicious:	false
Preview:	2024/10/30-20:09:30.039 1bec Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-20:09:30.040 1bec Recovering log #3.2024/10/30-20:09:30.043 1bec Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241031000933Z-164.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	2.732322666243652
Encrypted:	false
SSDEEP:	192:eH9ii3w1imzNSiti+eNt4U6T3nVybiii4wU1iiiiiihruaFiiKoA9:u9xitiDDG3VyQ
MD5:	3B40887F40BA77683834B71877813C0F
SHA1:	CD5529240F6665774731CA2B6A5240ADAFA6EB84
SHA-256:	747CF6BDAA7D7D60F2F2797F5A1A6210E7FE14858B8F2E228C365B8BB41FB7E0
SHA-512:	2AA79B5CCBD27338567CA2F82FCF81FC8D0BF707814C004A38338BE2B3F1ABA6348F016DEFA9B39B0310BE3A863F4BB548AAA668085C05BE130E27553FFB8D43
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	57344
Entropy (8bit):	3.291927920232006
Encrypted:	false
SSDEEP:	192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP
MD5:	A4D5FECEFE05F21D6F81ACF4D9A788CF
SHA1:	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C
SHA-256:	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
SHA-512:	FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	16928
Entropy (8bit):	1.214014673345545
Encrypted:	false
SSDEEP:	24:7+tJ0lqLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+W:7MJKqLmFTIF3XmHjBoGGR+jMz+LhJ
MD5:	445E2D5A418D93DE49C0F11327365B59
SHA1:	514B9DEC6FB6C8674786A2C6DE2ECE4CB29716B7
SHA-256:	A491F0A48817FDFC96CC438B5E4622351BBE3513814A24B35C755CA81958DC60
SHA-512:	D8FA72B70760AF1C63B40C8615FFBEED999DA9D49344A3F2101F6CE7DC451E8E4BBA4F476012FE91D5AC1A254989F76EE033F79B95A66E35B2F07C63A8425D55
Malicious:	false
Preview:	.... .c.....(...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7316164014423836
Encrypted:	false
SSDEEP:	3:kkFklts+GM1fllXlE/HT8kytzllltNNX8RolJuRdxLlGB9lQRYwpDdt:kKV+iT8dl7NMa8RdWBwRd
MD5:	94C9CB44ACBF1AACD34511012610034E
SHA1:	621ADEB5BDCF50D531BDEA395A6768F6CA6871A9
SHA-256:	F6849AE81D5A189202553C869189A7ACB1EE1C08E984720A9FFE80867FE0DF97
SHA-512:	EE9FB4E9A56589CAB7D4ADC02AD6E35FBD2CA1CF79FB04CC983FE33B14AA5F63D737201BC3AFAEFD6BA6694C039B9006D6ACE1F6E79BC0F66AEC1BC3132B430B
Malicious:	false
Preview:	p...... ........^../)+..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.141785112603811
Encrypted:	false
SSDEEP:	6:kKBN9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:KDnLNkPlE99SNxAhUe/3
MD5:	F16D30FEA9EE2748FC95DA0943BD00A0
SHA1:	0CC5016A980FB55D1A7082A5B334AAB13C75A9AB
SHA-256:	102AB46976A9AAB543C8BEF98CAD4ED9795B01EFFF77AA80132CBFD8C98B73DD
SHA-512:	06302B5F7E7522B10E817D424D413211B4EC13F7C40FADC25D569F74FAB4D70590AC3B4661A63BF44380A92C387F0629488A889645B5F68CBBBEBE9AF4D4DF5E
Malicious:	false
Preview:	p...... ........h..A)+..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.357181175695081
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJM3g98kUwPeUkwRe9:YvXKXiZNWRuUhUOVxOGMbLUkee9
MD5:	B4A927C37EEE99C9033D322030D5AA10
SHA1:	5AEBF5867F2E86A69BB6B3246D015CB996704575
SHA-256:	940C0A5F779AB9DB8B4DB898A1DB522F66249B75AF7395E829E924FE05F65ACE
SHA-512:	960068831F44E770A18ED00BB641D5706AF15C6C149C98B2D9608315107137E71875650197EE0AE01FF107E6FF8067D4425825A8BF45C6BF5BF157C2658E9724
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.307356755414612
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfBoTfXpnrPeUkwRe9:YvXKXiZNWRuUhUOVxOGWTfXcUkee9
MD5:	81A73B87E0A14D569DD8E025D1561930
SHA1:	1F1FE6E5CAB096C9DFDD0879201C551CBEDE407C
SHA-256:	67D30B1677601A9A80257753B71DC134CE62498548134FE7D3D846A2534D595B
SHA-512:	25E675033D8F9F8F69E00DC7185CC2C0AE31C861E8D890271A72CA2CCAD0BE141F54D3B44F6C6B2C9211470CA9913BAEA88D354F058EC6FF9E7466C5EFF9F9E8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.285309355413972
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfBD2G6UpnrPeUkwRe9:YvXKXiZNWRuUhUOVxOGR22cUkee9
MD5:	C1154F9980050941A1D01F0410228D1D
SHA1:	5FE11991DB22CE5710E0A2552386BCCAD619A8A0
SHA-256:	09126391C65923D7A08D439A581A579697CD1E92717ADA747CBDD24680984CE2
SHA-512:	BE218A286660F7E27AF6440CD642F4BF749694899776074BAB5D611C34D202692471565B39B1170B4FD6AAA9A6233021E981D08398CCC57C3232C935A34A96DC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.345344444765126
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfPmwrPeUkwRe9:YvXKXiZNWRuUhUOVxOGH56Ukee9
MD5:	D5B6DEEFC55609105F813BF7B1133A31
SHA1:	9359B7B24689F8C80602E1DEB77B88AB741FA0B4
SHA-256:	4A0FD8B008230B74F12C842F3F80F25BB4E02B5C849FD88514C6BFB8706540CB
SHA-512:	AE5F4D7A91150139432BC3F88A1B54E2D3310E9E0189DCD139509F8705A2EF3A1D4D910C055FAC652F72705FD770D73FEB06B617C95A511C689DAA2BB1ADF885
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.656224530485175
Encrypted:	false
SSDEEP:	24:Yv6X1UOVZpLgEscLf7nnl0RCmK8czOCCSlS:YvKUOXhgGzaAh8cv/8
MD5:	968D2110484CA7B1613620FDB5D43FBB
SHA1:	38B84AF22E7C4DF0333AB1458220969664C57C35
SHA-256:	8521AC0C35C375D6A362E82BC3714B60845F028997C3433D079D9E04A3A4E027
SHA-512:	620CFCF078415193A6B7FC51AF99D4F0BDF404975D8B145FCA0D278DAFC30554ECAD885991A0DEB385FB8C22BEF4062388026F906608F100F94D48E14C051104
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.645988686191313
Encrypted:	false
SSDEEP:	24:Yv6X1UOVVVLgEF0c7sbnl0RCmK8czOCYHflEpwiV2S:YvKUO7Fg6sGAh8cvYHWpw8
MD5:	17C07DEE3BF99BD55CEBB9B4BDE194CA
SHA1:	10E89F01C1693392ACA095C4B10EF013F4EF0257
SHA-256:	77F7E6B51E12C33FB9DA5FA18B53FD8A41C84E411D696E59BD49FFB16EAA1083
SHA-512:	507A8C39268E2B7015F2BC7D7FEDAF4E7F8FE62B02FCC9088A762C7BFE7864F0215F9586A604697D644832A53BF72FA2BFA6F8BFB75FAA74F8D7AA3316F699A8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.295938508212602
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfQ1rPeUkwRe9:YvXKXiZNWRuUhUOVxOGY16Ukee9
MD5:	448B963E85479518878AA02C5D292B5C
SHA1:	FD8DB9D5BE3C37B03B9A8E6C2F6B281C1DBCD580
SHA-256:	F3D3E32CFC1863B9F3912879217D4C57E01B926AF77FB32118A62189368CFCF0
SHA-512:	CE874A6918FF98045D57F2F3015C97444E179129A069F54C854E4C6D99F78DB920A315C24FB135D118D168BE6496D2F553486EBE83C3AB8976725240D05EFA55
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.640514839207943
Encrypted:	false
SSDEEP:	24:Yv6X1UOV02LgEF7cciAXs0nl0RCmK8czOCAPtciB2S:YvKUOKogc8hAh8cvAf
MD5:	362B87F55E3F5B7FC75A12D8738C3FDA
SHA1:	5C9EF4DE6FB7AB6C838D5476858A5D0479962327
SHA-256:	13567E0B379A7DDA86F59778D59F78ECC796604FE61EB8FCB3FA8E6131B20553
SHA-512:	2600BE403B737B37D178C407FAD0E5B5D037773EB79B458CB7AA0ED3DD5EE73216DFBA2868358805A907909CB5A3573B80C51F772375834611189F70AB1DCAB0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.691817271377354
Encrypted:	false
SSDEEP:	24:Yv6X1UOVEKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK52S:YvKUOWEgqprtrS5OZjSlwTmAfSKL
MD5:	E353637D1BAFEDA9636FD98B41084036
SHA1:	713EAC65A41845797FDE7CF0F061BA823B171474
SHA-256:	7A5FFD2C61BC0E63EF94EB868E7C8992259D648836C277182815C1383870D7B9
SHA-512:	FEAB561198CF82D0B8F40B44F3188A7617A9011722276EC9245D430B922A2A4320344E7C446D6F644FAC086B368E458C259388C4687779F4AC73D6F2E30700EC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.2986730889406894
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfYdPeUkwRe9:YvXKXiZNWRuUhUOVxOGg8Ukee9
MD5:	A0BC66E04F78AEB63F83B86EF79171F8
SHA1:	6D965664F74757198035EEF92E0393997836C245
SHA-256:	E95E1C4D4D28149CA95954F67F781BA333A4E8997CA472F557F2ED4758B37065
SHA-512:	74D2EA9A7A13E4E7F7B2D7621283D36C5042F7A0F56E1790F4EB6D7D6ACCAE58311FD464DF6D06E650D26C55F0549850ECDA1D8FCD41CD8BEE83AD76D7EABC05
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.767694196867712
Encrypted:	false
SSDEEP:	24:Yv6X1UOVrrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNuS:YvKUOdHgDv3W2aYQfgB5OUupHrQ9FJL
MD5:	8F3ED495C36982B1EF2D3B43129676A4
SHA1:	6BB13F28C1C8CBD6B92C3FD816DFE0ECC98109B8
SHA-256:	683C978562F388B103E602AABB7FD4FF431871B2B1D342920F2565783C410F86
SHA-512:	99BCADA83F8D8B0CB64436F518D743A71AD3702F750C2ABF85DB47D81649F74EBA9AB7D7022E407114083711F7CA2A9AA8073A910B01D63A5DE12BE4E3C1EEFF
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.282229306278191
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfbPtdPeUkwRe9:YvXKXiZNWRuUhUOVxOGDV8Ukee9
MD5:	170317C6DE61B689C15D33FF61108F64
SHA1:	5B13C11F1C54D05D57822819E201EBCAB936E210
SHA-256:	81A8A16BB7F46D22B243677101151896D5D1AEE21254356926395B74279B68CE
SHA-512:	C3F63B510E9A8B60862137C0E7985AE5F1703C886D7FFF17E4BF212F4769F45597D7BA3CA0997D49C8B1B6EF85156173ECB531118C34AECD2185397B5F841AA6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.2864322282484935
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJf21rPeUkwRe9:YvXKXiZNWRuUhUOVxOG+16Ukee9
MD5:	5A906B3FE6127C797C581422A35A00A5
SHA1:	7956CDEDA1E6763161CE644F69DD245F3092EC52
SHA-256:	97EAA1D3B8382989B62EA9330E03AD7E3CC1415EE7D466D72E4B52FE42D0AEA5
SHA-512:	7C6726A434D2E3C849723B0D9AB80486BD201AE90C995131DE1C11D4C6662EF1383B3232C830591F40907317FB43A8ED3853D7C12DDB3823FA95AFF29A4704A6
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.624369417993145
Encrypted:	false
SSDEEP:	24:Yv6X1UOVpamXayLgE7cMCBNaqnl0RCmK8czOC/BSlS:YvKUOHBgACBOAh8cvM8
MD5:	1FCE6B3CFCEA4FD7BB1930B2CDCEDA49
SHA1:	777DD9E9EFF0BE685C5F7C51972E8025692FB776
SHA-256:	CAF9E14F90A044026663C8566EFEBC568D2AB08091A2AC723B54F5D13ECEBA85
SHA-512:	C4111131EDAECE9A3D10EBEC0B1DCC80F885A0222A15C0D51A22B41392AC0443EEFE579D2288DF2A94757327B7BC1F05895F21839B15E8CB4335658497DFC41D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.259767445759982
Encrypted:	false
SSDEEP:	6:YEQXJ2HXPjWoEN5IRR4UhUR0YzWVxxoAvJfshHHrPeUkwRe9:YvXKXiZNWRuUhUOVxOGUUUkee9
MD5:	FDBCECEABBB67B1B27C871FB79CB0835
SHA1:	AE2A2E634E31363643D083ECC06B06C5F09596AF
SHA-256:	1030EBB1647F60A7978FDD8594A4B8CD5E08690C661D85A7C73D9CD5C39461E3
SHA-512:	F1D3DC418E830662DCAEB4060A4690278E8193576CC326B050C22AB7222BF569951F0263B5E420C3CBE6D9EE1F68C410147B6FA7DF094EF210B3EFD4F9F27AC0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.359433758842373
Encrypted:	false
SSDEEP:	12:YvXKXiZNWRuUhUOVxOGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWiS:Yv6X1UOVy168CgEXX5kcIfANhlS
MD5:	7767E0F7FE07E8ECA6CC21B3107D6483
SHA1:	8CBECA166EE789A3489E1D403EFE66A2BAFF576D
SHA-256:	7CC74C63051A36D17B707A228E6E64586265D4A9D30A611D80CD8662673A60BA
SHA-512:	776A8DAB751DA3586B0A8EB4AB36F6CD1539800BF42252346BC17744DF2137AF96FEB827ADDAC62B6AB5A9B802D85F4CB88813BA59D170606C6F961C3C62D800
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"8dbd1a3d-630a-416f-a5ba-946ac0c20632","sophiaUUID":"5E8BF9F5-1E3B-447C-A619-6054B1C06D0A"},"encodingScheme":true,"expirationDTS":1730507030715,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1730333375748}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.11369790048141
Encrypted:	false
SSDEEP:	24:YfIhi3ab928XJOaChaya1KCoEJ1ckfJL85xr4ISZTwjdhyj0SQ/g42TCk5H12LSK:YN3N8Xu2sGJ1ckxgw0cuB810ZPja89N
MD5:	37202AE893D8653CB80B541F309A7921
SHA1:	5C99E9535BB18AEFC3515A0C0F929D75F8768012
SHA-256:	2ED5454318026CEC41EBD4D619675877FBD7024D9636F28E179080517D2C4F7A
SHA-512:	D6A1A55B3A0EF0D361372771222967C53B759A88DCD7A9D611583D385765975C85725E01402BDC0FD44D3F7188E193FFCF9A759C6A3D7661E98383A699841B30
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"1d7829350094713df4b210fb2a304662","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1730333375000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"ad9b8bd580e108ea194a76cd0a759634","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1730333375000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"6f604069a9b8a03ecfcebfb3325b0205","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1730333375000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"07db2f971bf3ae09712734df03f63f81","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1730333375000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"c621a55d0af40a7508baa4c395fe7a5b","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1730333375000},{"id":"Edit_InApp_Aug2020","info":{"dg":"8f4729a4bfe60b6933346346a25bbde5","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9879051297015217
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs67Y9QmQ6Qe4WRIcLESiAiegWRF:TVl2GL7ms67YXtr4WKcI8UWj
MD5:	1AB2C481CEE9BF7D12F589FDE3DECF3D
SHA1:	83AE0AB6EBA03E9CCE12CACA1856DA1BB46A5CFE
SHA-256:	B864C1D6BA72931716B34E6167DC0A40E693529677E3C816F29502DD5FC69396
SHA-512:	F133E471495970727B24FEA68E471A4320BE9651120EB1F16ED0FF88A8058C3B9A733F53117AEF97F0A55C1C2B0E18E3B2A465F77C006D8D7739F2A85CA345FB
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3440615293008706
Encrypted:	false
SSDEEP:	24:7+toASY9QmQ6Qe4WR7cLESiAi0mY9QNqLBx/XYKQvGJF7ursfn:7MolYXtr4WFcI8KYEqll2GL7msf
MD5:	39A0F8F34CFBE4ED898D4E6B5DA7401E
SHA1:	3E9E0200B9A337DCB08190BCB66BFE9FE65CA41E
SHA-256:	EC4F0A52D0D7DE625C1EB5CDAD7AA1CC39B162EA3D0C1D52EF8B0676FFCDFE94
SHA-512:	255F65CCF8D30C3C316BD218EBC7BA9BAE7120CB75D4FDA9BDA5E8FA40A9CFF4C416E3117CAC267DF289DB51F30EB8F8F28E0AAD8BCC6705891ADBD4C8B7DF20
Malicious:	false
Preview:	.... .c..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSIf8e98.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5162684137903053
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K84Oqlr:Qw946cPbiOxDlbYnuRKV
MD5:	57C60A6B09C4B53E94D2980B9F4263C3
SHA1:	352C69C4AB715E9FE18D45E06E9E455E24443227
SHA-256:	4E8C089ABE512D5B6C17FCE63AD0912F1C5C640D2C0146AFF982A797E6302FF3
SHA-512:	8652FBF1B012C29F6116D9699FEEC9848E6DEE9C709C2FCBC7442810B23F45F9D8689ED7BB083894137232B960BA623531993D4478642C537593F2B27DDE017E
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.0./.1.0./.2.0.2.4. . .2.0.:.0.9.:.3.7. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 20-09-31-484.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.353642815103214
Encrypted:	false
SSDEEP:	384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL
MD5:	91F06491552FC977E9E8AF47786EE7C1
SHA1:	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC
SHA-256:	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
SHA-512:	A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082
Malicious:	false
Preview:	SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:072+0200 ThreadID=6404 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=ec4bacf2-5410-40d4-850b-5ac338f864f3.1696585143072 Timestamp=2023-10-06T11:39:03:073+0200 ThreadID=6404 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.3395401682766375
Encrypted:	false
SSDEEP:	384:2nhmGoetT2Td+u5SYy3+AVER1yXxIJFbbsBPlBlgeDI3h8oPBUUDUNUZgmQiuDTC:s8p
MD5:	01FCA3CA5EF3F13947B3A3FA2032A9F9
SHA1:	1FE825BF8D9CE64B37B8E4511218F00AA5052B7A
SHA-256:	A6715DFB5D64B74A3865053C2C39248999023775459531EB75779B735A775396
SHA-512:	7D4CEC0DB1FA5DBA3B458651CF9F983E8A318D97315E7AAB31433418C4F1FB294D6BD2347DDBF238187FD18AD1A9368AC6A65029985EC5CFF6EB7BAF7641209F
Malicious:	false
Preview:	SessionID=da27294d-ccdc-403a-bb5c-3f4ce37a96f2.1730333371499 Timestamp=2024-10-30T20:09:31:499-0400 ThreadID=6884 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=da27294d-ccdc-403a-bb5c-3f4ce37a96f2.1730333371499 Timestamp=2024-10-30T20:09:31:501-0400 ThreadID=6884 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=da27294d-ccdc-403a-bb5c-3f4ce37a96f2.1730333371499 Timestamp=2024-10-30T20:09:31:501-0400 ThreadID=6884 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=da27294d-ccdc-403a-bb5c-3f4ce37a96f2.1730333371499 Timestamp=2024-10-30T20:09:31:501-0400 ThreadID=6884 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=da27294d-ccdc-403a-bb5c-3f4ce37a96f2.1730333371499 Timestamp=2024-10-30T20:09:31:502-0400 ThreadID=6884 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.4175459808250634
Encrypted:	false
SSDEEP:	192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcbvkWWSPiNCVB8LklCLkCB6/SZcbtW:fhWlA/TVpKfG
MD5:	CEEAE8D8EB06AFAC2C2C72042F87C3A8
SHA1:	BB234151D1D9C27B6ABF1A95EF217291F5DC061C
SHA-256:	2C665BB23BC0E48F84B08A2A7B58DA02A30B2EAB83AA86C911AF9D2201F2F392
SHA-512:	323C1FCD0A54B5A5804EDE5B4BEE1B0992169DE817AA8B7D7F0C7AB0BEA6EE89B5DE83C8BB9C5C9E5365B464F27C76EC21F4BDB023EFE82E0A9A108117EF80D7
Malicious:	false
Preview:	06-10-2023 10:08:42:.---2---..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 10:08:42:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 10:08:42:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\53b80535-51d7-444e-b7b2-173411ad3bf0.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/xaWL07oXGZGwYIGNPJwdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:JaWLxXGZGwZGM3mlind9i4ufFXpAXkru
MD5:	0A347312E361322436D1AF1D5145D2AB
SHA1:	1D6C06A274705F8A295F62AD90CF8CA27555C226
SHA-256:	094501B3CA4E93F626ABFCAE800645C533B61409DC3D1D233F4D053CE6A124D7
SHA-512:	9856C231513B47DD996488DF19EEE44DBB320E55432984C0C041EF568B6EC5C05F5340831132890D1D162E0505CA243D579582EDB9157CF722A86EC8CE2FEAFE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\7cfb768e-9853-4c70-aad3-0d0506a60b49.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\8973efcb-5174-4693-93fc-1a019c6582bf.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZ7wYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs03WLaGZw
MD5:	8B9FA2EC5118087D19CFDB20DA7C4C26
SHA1:	E32D6A1829B18717EF1455B73E88D36E0410EF93
SHA-256:	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
SHA-512:	662F8664CC3F4E8356D5F5794074642DB65565D40AC9FEA323E16E84EBD4F961701460A1310CC863D1AB38849E84E2142382F5DB88A0E53F97FF66248230F7B9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\fb81efc7-fcd0-4666-83f2-6138eacf6a1c.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 23:09:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9728761291054555
Encrypted:	false
SSDEEP:	48:8jEdiTui3H5idAKZdA1FehwiZUklqehzxy+3:8jJbT2xy
MD5:	9B15DFF7E4655271C043EDD91B8AB45F
SHA1:	C18570E8CACDB0C2526DAEC7B71F14CFA9DCF3A7
SHA-256:	F517C501E32941EAFC944CA5230C4D7E9393355812871187B4DF66B4D38E8632
SHA-512:	49F21FA21F99D4C7D686FA1FE55D426DC5E99D35B2060AA0FE1B43182264F48D68657FD1E0F55AF3000DEC52899BEE1F1D66B5647E2D4852047BE89E45F4256C
Malicious:	false
Preview:	L..................F.@.. ...$+.,.... w.))+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 23:09:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9913068192787255
Encrypted:	false
SSDEEP:	48:80EdiTui3H5idAKZdA1seh/iZUkAQkqehmxy+2:80Jb99Qhxy
MD5:	28029E6C4F1C79826ED93889FDB6FE82
SHA1:	22A6026290DAD15B18BC9A893198C0A561A937A7
SHA-256:	F2094DCEB48D6DD9EFB47463D134C97F8AD4E5BAAB40C60CF69800C661D6E136
SHA-512:	D71CAEF3192A0F7EEE435DE7C11CE17889ED074FE618F437D8A7557E5D0FB06347F384156B8D5CDE8D4E193D2016D07F798371A798CB61683785B9F0DB682AB7
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......))+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.001414422988681
Encrypted:	false
SSDEEP:	48:8pdiTuiAH5idAKZdA14meh7sFiZUkmgqeh7sExy+BX:8GbInKxy
MD5:	B02B61F5134B970B8C00B6A4F7F1F2F9
SHA1:	B86A54728BFF57ACB3ABA6C766AF614EFB107222
SHA-256:	DB74ECE075441AABFCE4B83FFF3B840555C6CF188A62AD63C91CC89041E459F4
SHA-512:	5C24EC8804E97E1CCA612A236B0900F36977792402532645D090C41A71967F388CCDECA44B689F0332097A8D492D0643D4C64929633116CB723ED998019741B6
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 23:09:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9888232999751807
Encrypted:	false
SSDEEP:	48:84EdiTui3H5idAKZdA1TehDiZUkwqehixy+R:84JbO8xy
MD5:	F0AC99ECE88AC65DBC4FD9708C636F1E
SHA1:	35FA3425DE53FD84D10C47776D3AA097E812DFF1
SHA-256:	A65D63FF5DF5739F27FC0F1986A8FE511FD523BEA70E06E5341699F1B09D214B
SHA-512:	8CDA503E601F2D40E285A1FBF2A151F52FFA41C4B2233A0DBD1393A80954A8B051641D06EF592786CD7B695405813E6683AB87E5CE1E7CA7166827180D536202
Malicious:	false
Preview:	L..................F.@.. ...$+.,....zN.))+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 23:09:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977868890088282
Encrypted:	false
SSDEEP:	48:8ZEdiTui3H5idAKZdA1dehBiZUk1W1qehYxy+C:8ZJbe94xy
MD5:	0E8A9CD0D66DCFA0AF9BEBD8CF0330C9
SHA1:	353519F240DACB3E63B866E06542D0FDA7F1787A
SHA-256:	3F9631ED9A66F844CF96C06324E2B66A28BE66BDE824494DCA9524459129395F
SHA-512:	9C87F41CD548F33B4F3D77692D470E3E4194BF0A89335F258FEE9BE414DDD026BD0881B089C5B8C81AD3788F41D3A7145B022070C0E301B5251B6ED1CF4D6D18
Malicious:	false
Preview:	L..................F.@.. ...$+.,....Z5.))+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 23:09:33 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.986499082177851
Encrypted:	false
SSDEEP:	48:85EdiTui3H5idAKZdA1duTeehOuTbbiZUk5OjqehOuTbKxy+yT+:85JbUTfTbxWOvTbKxy7T
MD5:	46C2F20D336C19C9A736CAD1688A6266
SHA1:	5A9514FDAB0F268AB400652CD1D9C0B08629553C
SHA-256:	DDF27594EAF13C724B6F10F76D23D5020E30B413C3107C3229891F255501A4EB
SHA-512:	20BE9CB69E62A12DEF01F0DC11A45733429F56802AA5AA49CDF2EDB13D1CA35928625C9B851A1919DCDA1C0BCE7043F19E03D65E963A59D74F2ECEB0C16A53CD
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....M.))+..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I_Y&.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V_Y0.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V_Y0.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V_Y0............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V_Y1............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Ym.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3078)
Category:	downloaded
Size (bytes):	3141
Entropy (8bit):	5.45868310374852
Encrypted:	false
SSDEEP:	96:jijSkiuLN1ZPlXJdHNxnkNIyTgaig4Adkig/g4:mPiYfZPlZRNxkNIyTg1g4Ad9g/g4
MD5:	072851E086E0D89AC5A86D24977AA425
SHA1:	A9D911779D79A109023CB831B8885C6211165CFC
SHA-256:	0632FDB2AA19103CC54F63A9911C3507C884D1DA752ED4F502C16E53E62D272F
SHA-512:	84B6AF746C08F6C9C1014A3CE03FD0AD91DD47631BFBDFDD27A5C5CD1B157F66AC81429D388B8C4E7D991C4B7E27920E506154957C5CB57879194302A63B798D
Malicious:	false
URL:	https://static.canva.com/web/907eef8a4baa25c2.ltr.css
Preview:	.k4R_pA{height:100%}.XlmJhg,.k4R_pA{display:flex;flex-direction:column}.XlmJhg{flex-grow:1;justify-content:flex-end}.K1vVqw{cursor:inherit;display:inline-block}.B_T1sQ,._9ZZuWA{color:var(--JEAqPw)}.vSEELQ{word-break:break-all}.xMm41w{grid-row-gap:16px;box-sizing:border-box;display:grid;grid-template-areas:"header" "content" "footer";grid-template-columns:minmax(0,1fr);grid-template-rows:auto 1fr auto;height:100%;padding:0}.Tuu4Ew{grid-area:header}._0bPs_Q{grid-area:content}.oc_U2A{grid-area:footer}@media (min-width:600px){.xMm41w{height:auto}}.mkgeBg{display:grid;justify-items:start}.nKZzpw.nKZzpw{background-color:var(--4RaSjg);border-radius:8px;box-shadow:inset 0 0 0 1px var(--Zya5eQ);cursor:pointer;outline-offset:2px;padding:8px}.YA_mlw:not([aria-disabled=true]){box-shadow:inset 0 0 0 2px var(--xAYPzA)}.nKZzpw:not(.YA_mlw):not([aria-disabled=true]):hover{box-shadow:inset 0 0 0 1px var(--9_Lxmw)}.nKZzpw:not(.YA_mlw):not([aria-disabled=true]):active{box-shadow:inset 0 0 0 1px var(--xAY

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (587)
Category:	dropped
Size (bytes):	748039
Entropy (8bit):	5.7333631422315
Encrypted:	false
SSDEEP:	12288:jRc2IqLH9YmlY3isivYdWP9rire8ud9bMkRhbqaPnsCIJHbxJk06moUhnxS48THS:Fc2TLH9YmlY3isivYdWP9rire8ud9bM9
MD5:	E32CDBD7195F96F95945C527FC3F691A
SHA1:	31F673BAAD1019D23F90EC1BADC4929A9243FE7A
SHA-256:	1DAEA02D5C36CB451AF34AD71A65209AD6E36695057332EAB859DE693F42A814
SHA-512:	A49ADA8E22063D67F17CA741BBEB653285D2E6B2F208CF10FB5B5CC0F4E05DA34E6E6DA627BE14E941653C56390FC11AD69EB4CAFF682218338DCF5B14FB2589
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389,3817],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var vD;var Pr;var jf;var Qz;var Th;var Yg;var dz;var tz;var Zy;var Uy;var bb;var Ky;var ny;var Uw;var ew;var dw;var Fu;var ur;var bu;var au;var ha;var ef;var cs;var Br;var Dr;var qr;var wr;var tr;var vr;var t;var rr;var U;var r;var ob;var v;var P;var R;var sr;var S;var p;var sc;var Ub;var W;var C;var y;var V;var E;var F;var jq;var vp;var no;var Um;var oj;var pm;var nm;var lm;var hm;var fm;var Sl;var Rl;var Yk;var Qk;var Ok;var Nk;var Kk;var Bk;var zk;var Wg;var Rb;var ub;var We;var Nj;var Ih;var pf;.var Te;var cj;var Vi;var Kf;var Ve;var vi;var Jh;var mh;var bh;var Ng;var Kg

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (374)
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	5.411571098635927
Encrypted:	false
SSDEEP:	12:kjhskjmgNKnwf0Hz0oW0+NNJ1kO/OK/A8R+QvmGbZJVrK23wirWLL:kjhskjmwKwsHAoW0gFkOxLVvmGbZJlKt
MD5:	853874DAE2B4FFF1668F87EA1DC3E537
SHA1:	82AD6A53D3CF93F4DBD42D3D2EC3D1CAAFEDF03E
SHA-256:	AFFBB8D7787E547290AA0E9490FC24180DD138890CFBBEDCFCEB6B4BACBDDD6E
SHA-512:	BC0FEBDCFC2DAACE08EE6195E8C4CAE8D4C085B543290A2873AFCFF65F2B2638D3273E9275139C5A94152CCB505CEE2756A79A9F1812D1F3D3D95A68E07EC9F7
Malicious:	false
URL:	https://static.canva.com/web/72e88e1e9b45a34c.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6642],{../***/ 708358:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {__c.UG=class extends Error{constructor(a){super(`MessageBusError: ${a.cause instanceof Error?a.cause.message:"Unknown"}`,a)}};.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}]).//# sourceMappingURL=sourcemaps/72e88e1e9b45a34c.js.map

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1024)
Category:	dropped
Size (bytes):	2097
Entropy (8bit):	5.55568202066449
Encrypted:	false
SSDEEP:	48:ja8bCsv7DZIutG9AoLv7DZIKCa7Csv7DZIutG9AoLv7DZIKUdR5:+8bCeIHIY7CeIHIb5
MD5:	DE1AF737B6CE46B42DB8A5446556E008
SHA1:	26481E41A1883FD199E5FBE8CD3E4329FA798627
SHA-256:	A75D9D0118AD0244BEB2B361D6756284C6211858FE7FA08226D9890354136C3D
SHA-512:	DD88DECB8FCC75790B4DCE82B755D8F42CA9DC203E00BE963F069488F2F267A651659E23F58E255BA12344242A7E25D8FBEF7F01B7BE5981DE31F064B54153F4
Malicious:	false
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1666986526;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1461855675;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"o

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	401404
Entropy (8bit):	5.341176593890907
Encrypted:	false
SSDEEP:	6144:TT+xG/rKpSrrczz30WQE/H2pvmyrLod7lZXKG2t0fr:/+grKpS0XPQE/sfLod12t0fr
MD5:	D5986AF74A004BC41EEA9F12AB9AE673
SHA1:	870A52A5FCB06B240054784A18B4D79B2FE72F45
SHA-256:	2A54D0188FB6A38D670C732F19972D54603DE2A74A6BC96EF4F6E65212682D9A
SHA-512:	AC6E394C0236E34A1E58DDA9A83FB0841328E47E76328BD1E27F0B0BA5DB8D2DB3364EA8EAF7B236D3AD56227F4585B3395817779986A8F64C07EEE9C73D627D
Malicious:	false
URL:	https://static.canva.com/web/0af438d079413358.vendor.js
Preview:	/! For license information please see 0af438d079413358.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:s;return(t&&t.strategy?t.strategy:l)(e,{cache:n,serializer:r})}function i(e,t,n,r){var i,o=null==(i=r)\|\|"number"==typeof i\|\|"boolean"==typeof i?r:n(r),a=t.get(o);return void 0===a&&(a=e.call(this,r),t.set(o,a)),a}function o(e,t,n){var r=Array.prototype.slice.call(arguments,3),i=n(r),o=t.get(i);return void 0===o&&(o=e.apply(this,r),t.set(i,o)),o}function a(e,t,n,r,i){return n.bind(t,e,r,i)}function l(e,t){return a(e,this,1===e.length?i:o,t.cache.create(),t.serializer)}n.d(t,{A:()=>f,H:()=>r});var s=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new u}},f={variadic

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1478)
Category:	dropped
Size (bytes):	4592
Entropy (8bit):	5.555714176953592
Encrypted:	false
SSDEEP:	96:+8bqlwOIY7qlwOIS8bqlP2IY7qlP2IWpGVYIHGbippuC+t5:+8bqqOIY7qqOIS8bqJ2IY7qJ2IWxIHGx
MD5:	0BF188DD5FF0734F4D2E7C98DD1FBEB5
SHA1:	F2C372F3B6EA324A29D7B3E94B418D941F99C9CE
SHA-256:	2E84BB9A38D1F98307E96B0A642076CB3C985F367156AC3AD842F679D8D5FEFD
SHA-512:	EABD9EC51AF19925EB5AD3FC69CF8EA68F138CC7042BC6043765CECA2648CB469746A11A350588B40C43A89443B519DD65D274815AD956AEDBF3A7EE8B875D74
Malicious:	false
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=2084015468;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (751)
Category:	downloaded
Size (bytes):	491103
Entropy (8bit):	5.671411588199521
Encrypted:	false
SSDEEP:	12288:rjXf01yNw1pl6TuXo7ILIvLtLc3Rl4A9sDMeiOCbK9WvakiANq3sndUP/ClISHU+:rjP01yNw1pl6TuXo7ILIvLtLc3Rl4A9x
MD5:	768A3EA041F59A96F067A0331EB73BAB
SHA1:	04495674CEF0E5812CC217E83093E5C054719406
SHA-256:	57AA9906B4A2DA97501ACB44207ACD62FA024C6DD77CA3B934EC2FFE119D6834
SHA-512:	E8632FAA5E3E9A59915437C231D68C5D5E94F94DBF3DB00B3DAB5FCA856DB206897A014D832F93791C97CFE1A55A1EA5B0EA2E33004C8A536AE2108B03978A75
Malicious:	false
URL:	https://static.canva.com/web/0ede3f01a65ed2a0.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[65805],{../***/ 280716:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fd1e22c0e0516062f8631db29060abc8 = self._fd1e22c0e0516062f8631db29060abc8 \|\| {};(function(__c) {var uj;var wh;var dQa;var ni;var gOa;var bj;var Ie;var Ef;var Qi;var Li;var CNa;var Q=__c.Q;var $h;var Wh;var be;var ud;var R;var da=__c.da;var Ia=__c.Ia;var C=__c.C;var Ba=__c.Ba;var A=__c.A;var Ab=__c.Ab;var lb=__c.lb;var J=__c.J;var M=__c.M;var N=__c.N;var H=__c.H;var ea=__c.ea;var Qc;var Jh;var Hh;var Gh;var Fh;var yh;var mGa;var th;var sh;var rh;var lh;var jh;var hh;var gh;var fh;var dh;var Tg;var yDa;var Rg;var Ng;var Lg;var Ag;var bb=__c.bb;var lg;var jg;var ig;var hg;var gg;var Tia=__c.Tia;.var $f;var Zf;var re;var Sf;var gya;var Ud;var Cf;var Bf;var Af;var zf;var wf;var yf;var qf;var uf;var tf;var sf;var rf;var jf;var ff;var S;var H

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	98098
Entropy (8bit):	5.753599805423207
Encrypted:	false
SSDEEP:	768:gkbeUAFnr+JVTPslqdkap5xBH4QLFCnFDVRHuhG9I1/R7sum8PXhPdbf6OMqEleh:gkbRJEqdkabRLk1fx9a/R7sR4HJVUk
MD5:	CBF02AEEE058CE5360A37FC290AED4BE
SHA1:	931E1FF80165E13B1BD73B5AD1063469D36256C5
SHA-256:	A12A51347628FEC7E07824A2E0F74CBEB05E36FD781DF9AF2A604EA2F6EAB78B
SHA-512:	55BCDBE8B90341F403A31C1E3FE7643E0877AFCF996EC257CA9CF9B5BD5A0EF92D2EF1B4F7EFB059718FF2E08C3C3CA8C633081C29DACD68518B0665825A7689
Malicious:	false
URL:	https://static.canva.com/web/779f535dfc7e9155.ltr.css
Preview:	.theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy86Q:rgba(57,76,96,.15);--p53f_Q:rgba(13,18,22,0);--REcY5g:#0d1216;--XajtPQ:rgba(36,49,61,.4);--FVk7Ew:rgba(165,112,255,.15);--2-zmYA:rgba(165,112,255,.15);--ySYdsQ:rgba(165,112,255,.2);--aMXh3A:rgba(64,87,109,.07);--_RN1Dg:#612dae;--8fGzbw:rgba(36,49,61,.4);--ob8tTA:rgba(13,18,22,0);--MghLXQ:rgba(64,87,109,.07);--3R4u8w:rgba(57,76,96,.15);--TwiLcg:rgba(13,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(17,23,29,.6);--QADODw:rgba(13,18,22,.7);--kTBxcw:rgba(13,18,22,.86);--HxK_kw:rgba(17,23,29,.6);--6u-yJQ:#fff;--J0YKvA:hsla(0,0%,100%,.7);--yrvb-A:rgba(57,76

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (797)
Category:	downloaded
Size (bytes):	168477
Entropy (8bit):	5.742117106363616
Encrypted:	false
SSDEEP:	3072:0xURkHUsEysEAqU3XdXtcptXPpsWjzUDCzY4qWbrmUsVyvw3/M5VZnlAtLpT:0xIkHUsEysFqU3XHYtKWM0Y4qNUsVzPz
MD5:	FC4DE53B088C70683DF02F966F33601C
SHA1:	D21E3766C49E034EBBB3DF2DE712BA5132CCAA40
SHA-256:	1B70327DDF2876C1A4762CC632B8B37EE52C63AA827DAE51F533A334BFB05AD4
SHA-512:	A32C586A253EA4C7933FBFDBDB230B8199086631D9E220008BC6D396641FEF9FEEE265F8F24C7DCC8829A0F4C0D96F7CECB7B43B797E04F67D35238F699831F5
Malicious:	false
URL:	https://static.canva.com/web/e39ac07f2eb3ad4a.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[21389,73817],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fd1e22c0e0516062f8631db29060abc8 = self._fd1e22c0e0516062f8631db29060abc8 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var Lc;var Ic;var Dc;var yc;var oc;var gc;var Wia;var Wb;var Vb;var Da;var Mb;var Pb;var Jb;var aba;var Hb;var Fb;var ib;var zb;var qb;var F;var C;var Ba;var jb;var N;var A;var Ga;var za;var gb;var hb;var Q;var lb;var Ab;var M;var J;var x;var H;var da;var qaa;var sga;var db;var oa;var Ka;var va;var wa;var r;var ma;.var baa,ka,eaa,faa,vaa,uaa,taa,saa,Aaa,Caa,Daa,Faa,Gaa,Haa,Iaa,Jaa,Saa,Qaa,Naa,Oaa,Paa,Ea,Raa,Taa,Maa,Kaa,Laa,Uaa,Vaa,Waa,Xaa,Yaa,bba,cba,eba,gba,hba,iba,jba,kba,lba,mba,nba,pba,oba,qba,tba,sba,vba,uba,xba,yba,zba,Bba,Mba,Aba,Nba,Pba,Rba,Tba,Wba,ida,La,jca,jda,u

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1135)
Category:	downloaded
Size (bytes):	1198
Entropy (8bit):	5.597891361251376
Encrypted:	false
SSDEEP:	24:bIGQscfJNdc1Vm1Seb7M+s0YeIipr2EdQOWyo+eBnkeBVZiLh:bfQsopqmIZ+s0rIiN22QO/o+Ri2
MD5:	858D0C0D48F869F0BC07F91BD5DD77F7
SHA1:	E8886295D5ECB37FD2565D897E5708AFC1825044
SHA-256:	92D67089B80A4F88BC2BFA3AF832503721437AD8ED7908588B88C05A6B670316
SHA-512:	8413B07B1EB663E3FDA1EC261D9B3EB958AC9F36BC83AAF25881528B37F21855F63C50302E3BCF28F65E308D1D5691C27107A32346FDFCB2F6892DE7F4F3EE0C
Malicious:	false
URL:	https://static.canva.com/web/f66980af75ea6dd8.ltr.css
Preview:	.RVlJPQ{width:304px}.kAIPdw{display:flex}.yskuIg{flex-shrink:1}.dbjzGA{flex-shrink:0}.ySxiDg{align-items:center;display:flex;font-size:2.4rem;height:24px;white-space:nowrap;width:24px}._7DenRA{margin-top:4px}.HUXoPQ{background-color:var(--yrvb-A);border-radius:8px;height:4px;margin-bottom:8px;overflow:hidden;width:100%}.A4odzg{height:100%;transform-origin:left;transition:transform .1s linear,background-color .1s linear;width:100%}._5unvSw .A4odzg{background-color:var(--bk41Zw)}.Wq9vhQ .A4odzg{background-color:var(--MRX9rw)}.HXh8eg .A4odzg{background-color:var(--P69qRQ)}._4SOUw{font-weight:600}._5unvSw ._4SOUw{color:var(--bk41Zw)}.Wq9vhQ ._4SOUw{color:var(--MRX9rw)}.HXh8eg ._4SOUw{color:var(--P69qRQ)}.gLwRtA{margin-left:4px;margin-right:4px}.AL_0xw,.gLwRtA{color:var(--5F8MFw)}._5unvSw .AL_0xw,._5unvSw .gLwRtA{color:var(--bk41Zw)}._57ApVg{align-self:center;height:20px;margin-left:-28px;width:20px}.ZMiUDw{color:var(--3V_biw)}.Hp1GZA{color:var(--P69qRQ)}.XYPJuw:disabled:hover{cursor:text}.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6785
Entropy (8bit):	4.764532758184024
Encrypted:	false
SSDEEP:	192:4rPKbcyONPj2Ix4JA63seKKpJ4zde/rsVJgqecW2RYz2nS6ef/kqy:4rPSchJ2Y4JhserpGZEVqecW2RRS6e0b
MD5:	9C747CF07B2623FE6F77E47F5A134103
SHA1:	7180E5B53413163E10A6CA1E94518AC2CEB7970A
SHA-256:	476CDA2BDE7910A58186B7B58D2BE6D22D3CFACDFEDA3354134B84E43D76AC98
SHA-512:	4C1894FD984FC35FBC725737F68B69982B4E53864EB8BF1B8A5826D4D62C682AD4D50C08BA4EAEE3FBE04D3B91EA22A79559AA77BE6BCF3B81025348C8CEB35A
Malicious:	false
Preview:	(function () {. /*. @type {string} Key for the visitor ID cookie.. /. const visitorIdKey = "Metadata_visitor_id";.. /. @type {string} Key for the session ID cookie.. /. const sessionIdKey = "Metadata_session_id";.. /. @type {string} IP address of the client.. /. let ip;.. /. Account configuration object.. /. const config = {. invalid: true. };.. /. Options object.. /. const opts = {. /. @type {string} Base URL for the CDN.. /. cdnBaseUrl: "https://cdn.metadata.io/pixel/config",.. /. @type {string} Base URL for the API.. /. baseUrl: "https://api-gw.metadata.io",.. /. @type {string} Account ID.. /. accountId: null. };.. /. Get the value of a cookie.. * @param {string} key - The key of the cookie.. * @returns {string\|null} The value of the cookie, or null if not found.. */. const getCookieValue = (key) => {. const cookie = document.cookie.split("; ").find(fu

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290)
Category:	downloaded
Size (bytes):	5937
Entropy (8bit):	5.507493024208316
Encrypted:	false
SSDEEP:	96:EZrJZjDUG+f5vyhtQN8NO4rytEe9eXTAGlZL7iOKfxi0pR3cB34nJDUGnu/HTxAs:EZrJZjDUn5vyhtqgCv6TAGlRrKZiERMD
MD5:	F4D914AEFEBB2D814FF3BE48EC26B488
SHA1:	D92BF64DA655F871F91F378E690BCCCDC300DB92
SHA-256:	7763BE74FE7FDEE0E6819BCCBDD3A2CC67A7CE88ADA4250635D0E8FBA2114283
SHA-512:	F46AC2C195590E53C4B75FAE1CE75C1385D96128E1F848BF9DAB39B877A0C02B59CD0FEDC277038D44114E62693FABA4679971CA9CA8FC2D56BEA6CC4FA42E32
Malicious:	false
URL:	https://static.canva.com/web/1d5da80170c7d950.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9134],{../***/ 523808:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(277425);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var Vob=function({data:a,url:b}){try{const c=JSON.stringify(a,void 0,2);return{extra:new Map([["spans",c.slice(0,15500)],["url",b]]),tags:new Map([["telemetry.export.beacon.over_64_kB",String(64E3<c.length)]])}}catch(c){return{tags:new Map([["telemetry.error.serialisation_error","true"]])}}},Xob=function(a,b){Wob(a,b,()=>{const c=a.EG.get(b.context.spanId)\|\|[];for(const d of c)Xob(a,d)})},Wob=function(a,b,c){var d,e=null!==(d=b.attrs.get("parent_relative_start_ms"))&&void 0!==d?d:b.duration;e="number"===.typeof e?` - ${Math.round(e)}ms`:"";var f=(d=null!=b.parentSpanId)?`${"event"===b.Nk?"[ChildEvent]":"[ChildSpan]"}: `:"[

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16239)
Category:	downloaded
Size (bytes):	16302
Entropy (8bit):	5.315283214036717
Encrypted:	false
SSDEEP:	384:TUvjW+wZFjGLDZ2UMXvfnP3ABMvMoBkH8uLBFJ3WR892WCu/:TUvjW+iFjGLDvqvfP3ABMvM8e8uVDWiZ
MD5:	6473010486679758C2CDA40053249103
SHA1:	A7DDA34C9C2A0FB2A1B2F7670C6F3F4EE4BDF0CE
SHA-256:	1B64CCC25BCBC9A7079D7C63D7D97D57152602DAEF6A8ED090A26EEDEF4C877A
SHA-512:	45ECDC47C91D89F835A3934BDC25E457A5ACDE247F43D982509150A3ACE3FCE11CEB9B19E09407615833FA8826E6FEAEA02BE62241F5977149A4EE663EE6092B
Malicious:	false
URL:	https://static.canva.com/web/bf0ba24cc4da588d.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[25436],{802011:(t,e,n)=>{n.d(e,{I:()=>i});var r=n(689735);class i{constructor(){i.prototype.__init.call(this)}static __initStatic(){this.id="Dedupe"}__init(){this.name=i.id}setupOnce(t,e){const n=t=>{const n=e().getIntegration(i);if(n){try{if(function(t,e){if(!e)return!1;if(function(t,e){const n=t.message,r=e.message;if(!n&&!r)return!1;if(n&&!r\|\|!n&&r)return!1;if(n!==r)return!1;if(!a(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;if(function(t,e){const n=c(e),r=c(t);if(!n\|\|!r)return!1;if(n.type!==r.type\|\|n.value!==r.value)return!1;if(!a(t,e))return!1;if(!o(t,e))return!1;return!0}(t,e))return!0;return!1}(t,n._previousEvent))return("undefined"==typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__)&&r.kg.warn("Event dropped due to being a duplicate of previously captured event."),null}catch(u){return n._previousEvent=t}return n._previousEvent=t}return t};n.id=this.name,t(n)}}function o(t,e){let n=u(t),r=u(e)

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8038), with no line terminators
Category:	downloaded
Size (bytes):	8038
Entropy (8bit):	5.757614462489633
Encrypted:	false
SSDEEP:	96:hEwq69FYvaBB5LpVZTZ4r4HAJciMRQoDak0IFWkJ/PW1b+ZqeExrfYrRGfY:W69FYOJ3ZTWr4geiCQonWkJ/PIErQY
MD5:	B53D6F7EA1C058C82D0E9C2CDFFD71F5
SHA1:	6009D0368E84C6209363221E422DEC66E6E7FC4B
SHA-256:	E5DC451B855F9FA8C6997CECA1C1522B612B981379AC30EB9DF0C8726F4F960D
SHA-512:	DBCAA5F176E87FD7556F61E2D47A8FC50FBC264FFAD6DBE090F8503835CD84F00C3822DCA9B2A37B560631D533F979D6EB4C7F2C80E95685DF8AB234365A888D
Malicious:	false
URL:	https://www.canva.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,n,o,y,z,B){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=parseInt(U(447))/1+-parseInt(U(448))/2+-parseInt(U(373))/3+-parseInt(U(377))/4(parseInt(U(464))/5)+parseInt(U(452))/6+parseInt(U(422))/7+-parseInt(U(400))/8(-parseInt(U(401))/9),f===d)break;else e.push(e.shift())}catch(D){e.push(e.shift())}}(a,217296),h=this\|\|self,i=h[V(427)],n={},n[V(364)]='o',n[V(394)]='s',n[V(417)]='u',n[V(398)]='z',n[V(397)]='n',n[V(384)]='I',n[V(440)]='b',o=n,h[V(463)]=function(D,E,F,G,a4,I,J,K,L,M,N){if(a4=V,null===E\|\|E===void 0)return G;for(I=x(E),D[a4(458)][a4(435)]&&(I=I[a4(451)](D[a4(458)][a4(435)](E))),I=D[a4(365)][a4(399)]&&D[a4(416)]?D[a4(365)][a4(399)](new D[(a4(416))](I)):function(O,a5,P){for(a5=a4,O[a5(420)](),P=0;P<O[a5(372)];O[P]===O[P+1]?O[a5(444)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a4(412)][a4(369)](J),K=0;K<I[a4(372)];L=I[K],M=v(D,E,L),J(M)?(N='s'===M&&!D[a4(406)](E[L]),a4(456)===F+L?H(F+L,M):N\|\|H(F+L,E[L])):H(F+L,M),K+

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1023)
Category:	downloaded
Size (bytes):	2095
Entropy (8bit):	5.553867337919517
Encrypted:	false
SSDEEP:	48:ja8bW/Psv7DZIutG9ADv7DZIKCa7W/Psv7DZIutG9ADv7DZIKUdR5:+8bW/PeIaIY7W/PeIaIb5
MD5:	120CEC0BF3673F2EC10366C55E95E2E8
SHA1:	14641FAC6807A1ECA187CD824C23C85C2A17A783
SHA-256:	383FC9746AA8544F4050426504AA0BD13689D6AD28E4889A37847C7E56B5C545
SHA-512:	45609393A717ABFD01EED7A5BDB6E209E84A9F9C9AB67640C3BFD9B4939D809F01EBE9A66FCC13292B44D11B3CA49D34C67CE6447DD92BE569194448F9A5ED89
Malicious:	false
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765772&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=loaded&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=a%20page&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10136&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"op

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10140)
Category:	dropped
Size (bytes):	16541
Entropy (8bit):	5.715817268810953
Encrypted:	false
SSDEEP:	384:0wJOalAKzyk4EeTZ1sofMNoDigJ3nGQ1G62a:05MAW4EeTnBzJ3GQ1GO
MD5:	BC7C8830D463C88348FA070B1100AC08
SHA1:	D22E5BCFE518B6520F9DB92DC324363139F18741
SHA-256:	AE20747E8A07F3FD96763369907024EEA0C435FBF82125EE1861C2E254CABD40
SHA-512:	D24CD5077BB649422506C01CF8E03D70B867E560FAA0564697EB89BA155AE64CF739DE443E5511938C56BB6487ABAE32E76B2ED2377CA3E91F9D3B0E1DE8D4DE
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2527],{../***/ 277425:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var J=__c.J;var eR;var Dr=__c.Dr;var t=__c.t;var DR;var v=__c.v;var p=__c.p;var V=__c.V;var C=__c.C;var r=__c.r;var U=__c.U;var P=__c.P;var tr=__c.tr;var S=__c.S;var qr=__c.qr;var y=__c.y;var R=__c.R;var E=__c.E;var F=__c.F;var JQ,STa,LQ,KQ,TTa,NQ,UTa,VTa,WTa,XTa,YTa,ZTa,$Ta,pR,qR,rR,aUa;JQ=function(a){const b={};for(const c of Object.keys(a)){const d=a[c];b[c]=d instanceof Object?JSON.stringify(d):d}console.table(b);console.log("View non-truncated properties:");console.dir(a)};.STa=function(a){switch(a){case "unset":return 0;case "ok":return 1;case "error":return 2;default:return 0}};LQ=function(a){const b=[];for(const [c,d

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55127)
Category:	dropped
Size (bytes):	80631
Entropy (8bit):	5.454048959086965
Encrypted:	false
SSDEEP:	1536:RQ+IUi10Pg5N8v3l3+ATAVzzQ3vEbJoGGLD3Mrl0xYuhO8fb:R1Pg78vx+AM1ah3crl0xYuvb
MD5:	B93149E308E4952B65FBB41DE9661880
SHA1:	9620CDBBB394C20A106C0D3DD1ECFA5E4D7A1510
SHA-256:	375DA51FC518AF0F9338D581F91158C75A7C2EB33203171D6DE8A124C2505758
SHA-512:	8E741511F0322FE7499B62B9B87A89CCA0A219ACB898964DF389487A9731C22B6E6681C4FDCCD77DD7491E98564C55498E88EAC085582469D35571D7DD3E1AB4
Malicious:	false
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1477)
Category:	downloaded
Size (bytes):	3095
Entropy (8bit):	5.559684237280513
Encrypted:	false
SSDEEP:	48:ja8b3qsG9Adv7DZIKCa73qsG9Adv7DZIKUuV6v7DZIHGSQLRmaKch3eCK4G9/KCl:+8b6SIY76SIWVYIHGSi8pIuC+t5
MD5:	546D58CEF95A884A23D4F549D257B2F3
SHA1:	137A1999818D507C9A8E8547531E99AE3C4C64AE
SHA-256:	5636390E6B2E3DA1A67B16794AC5F277ACAB3FB69DFA2272B84CCADC74EB9B45
SHA-512:	9C870A5629E05B0549022EDAF518AB4D23911399B9C5183F0A58AE26E8CFAB633EDCF0C96573B2C67A4AE3C8BA284B90C2F261ED6142421F8A25DC4B559774D4
Malicious:	false
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_1730333867657108&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=1&ep.custom_device_category=desktop&ep.custom_event_name=new.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=4&tfd=10151&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dm

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8132), with no line terminators
Category:	dropped
Size (bytes):	8132
Entropy (8bit):	5.765032520717745
Encrypted:	false
SSDEEP:	192:indaDvueafxnYmK3vzGyyxNHYdqGAQ/d7m3:QdaDvueaZE03HK7L17k
MD5:	CC417EBCAD8D9DDCB7AF0076CF0FABF4
SHA1:	8D388F25CB99D264435EAAFFC0760BDE28DDE77D
SHA-256:	01A32AED5614B981164E25E0A6715D6B3C2BDFDDC089FF5BF7D794C9039DB5B8
SHA-512:	3A6EB6D8696D5261743E80D375D73C4D5C9A172891CC28A9F67DB7FB61B2DB11A64EC9351FD69CBE283FAA2EB2E6182C39E6AE173C6EB4DB33D4FE42A922B5C1
Malicious:	false
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,n,o,s,z,A){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=parseInt(U(453))/1(parseInt(U(448))/2)+-parseInt(U(469))/3(-parseInt(U(456))/4)+parseInt(U(387))/5(parseInt(U(417))/6)+-parseInt(U(371))/7+parseInt(U(426))/8(parseInt(U(367))/9)+parseInt(U(398))/10+-parseInt(U(393))/11*(parseInt(U(474))/12),f===d)break;else e.push(e.shift())}catch(D){e.push(e.shift())}}(a,541316),h=this\|\|self,i=h[V(467)],n=function(a0,d,e,f){return a0=V,d=String[a0(383)],e={'h':function(D){return null==D?'':e.g(D,6,function(E,a1){return a1=b,a1(380)[a1(364)](E)})},'g':function(D,E,F,a2,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(a2=a0,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(463)];Q+=1)if(R=D[a2(364)](Q),Object[a2(451)][a2(375)][a2(400)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(451)][a2(375)][a2(400)](H,S))J=S;else{if(Object[a2(451)][a2(375)][a2(400)](I,J)){if(256>J[a2(471)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[a2(434)](F(O)),O=0):P++,G++

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://alb.reddit.com/rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	5.6762578005096325
Encrypted:	false
SSDEEP:	6:YkHKKF7r48evSQNWKtI3s0ud9lbpYhF81ExPA6WrGbfm4XCE2p64phvxg7h+7uH1:YkqmXnwScWKwwlF+F81ExPA3Cmamp62S
MD5:	B4F9F0DD587C5ABE6708F44A6E11A53F
SHA1:	28EBFA68F92AE2A96354521FFAD38A3DBE647154
SHA-256:	CCC37C837397D66FD8E0FACFE001CE7FC9F87E48089D73540AD2C2DD95716D04
SHA-512:	D471D889D8EAE3E9190B39376C29400D5AB9BF3C47897B64DC278E4E58314A78F148A44BB315D51591CA5384EAE505AD411BEF7AA706FDD5678023109A809425
Malicious:	false
URL:	https://cdn.metadata.io/pixel/config/1721.json
Preview:	{"pixelJwt": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwaXhlbCBjb25maWciLCJuYW1lIjoiQ2FudmEgSW5jLiIsImlzcyI6Im1ldGFkYXRhIGluYy4iLCJhdWQiOiIxNzIxIiwiZXhwIjoxNzY3MTE5NDAwLCJpYXQiOjE3MjExMzcxMDYsIm5iZiI6MTcxOTc3MjIwMCwiY29sbGVjdEluc2lnaHRzIjowLCJwYWNrYWdlIjoiRlVMTF9GVU5DVElPTkFMSVRZIiwiaXNfcGxnIjoiMCJ9.wMldEMSftyWmTu8VELd7xI0gDpqzWR64-SlbjetKBO8"}.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1807)
Category:	downloaded
Size (bytes):	11002
Entropy (8bit):	5.73605639366882
Encrypted:	false
SSDEEP:	192:5KaLH3uKZsjkQZOJ34wg0fOVX86GIyCu+fIVEJz5VZRqBOrEZFZ05rZmXb1EIu9c:55+fjDZOJ4UOVX8Stu+f5d5VPqQQLxf9
MD5:	0EC893E53F7D79154B0B93EDBB5AB754
SHA1:	CBF65AFFA01B562E5857823F4A8D3A1B445D13ED
SHA-256:	B03E7DBAA1C451E183D23A25EDA29D0BF9821C5F831828EBE05E63DEB185FC2E
SHA-512:	D5AD3C45A373DF4424C916AFF7F4B440DD1FB2970C8A3BD64931F64E880C613A01E1AB40197426ADCFB03F013A6B8E80CFEC53B5077D78C6C61BEAFF8D390570
Malicious:	false
URL:	https://chunk-composing.canva.com/chunk-batch/778ac51ce098c575.strings.js+899bf0e7605d8095.js
Preview:	;// __FILE_CONTENT_FOR__:778ac51ce098c575.strings.js.(function() {. const messages = JSON.parse("{\"XYz3CA\":\"If you don.t know your ZPE email, please ask your school admin.\",\"zCET4w\":\"We.ll check if you already have an account. You can.t sign up with a mobile number in your current location.\",\"5Rgwdg\":\"Continue\",\"KNSJlg\":\"Continue with email or mobile\",\"ZOsgSQ\":\"Continue with your work email\",\"CICi/g\":\"Continue with Akun belajar.id\",\"JSk2MQ\":\"Continue with email\",\"yT2Crw\":\"Using your work email makes it easier to design together with your team.\",\"x2zp1w\":\"We only support signup with mobile numbers from mainland China. Please try to sign up another way.\",\"bT0bMw\":\"Couldn.t find that mobile. Go back and log in another way.\",\"u1NJyQ\":\"If you.re a student or educator, enter your ZPE email address. We.ll check if you have an account, and help create one if you don.t.\",\"OCF9Pw\":\"Continue with mobile\",\"FNzcgw\":\"Sorry, too many at

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
URL:	https://static.canva.com/static/lib/sentry/7.16.0.min.js
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1400)
Category:	dropped
Size (bytes):	5544
Entropy (8bit):	5.56399603907591
Encrypted:	false
SSDEEP:	96:yLVYIHGLipgnC+Y8bFeI1NIY7FeI1NIS8bweICIY7weICIb5:yeIHGLipgK8bFeI7IY7FeI7IS8bweICy
MD5:	97B89516CA51F68C3B95ACC8C805F146
SHA1:	FD0F359C6F3B3370481D6C18E731D74C602B0CE1
SHA-256:	7D12F1A94C8AA6D958574A2DD64EAA65AC6A9187878B4148A332A915ABCDA607
SHA-512:	81B583077C1A26463D9B54B0C91DF90D2BC24D76ECCDFD63CEF97D1BE0284537C0E1517C65BBDA0FAA2EC0BF3F2C94CF95FBA819C6F5CD2A315D94E72425D9F3
Malicious:	false
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1223498435&fst=1730333383218&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2757)
Category:	downloaded
Size (bytes):	232071
Entropy (8bit):	5.547535542332373
Encrypted:	false
SSDEEP:	6144:UUJGRLxI5q2A415QyqVho8HMTm8ZuCH6fmU/Xx:UWSvA5QyqccyhZuCHjix
MD5:	11DD215E31015F50CC5CB0F5778F8CB7
SHA1:	A941662C37CD2D07CF369DFB6E1203130EE0FDA4
SHA-256:	A4766C8922E13DE981784FD147723E0D0EE0F588E63D289F0C94D34957D2AEC7
SHA-512:	2ED6B0FC43DBD40870CD2F232ABD14BDDE880DB1E55B9710DE5F9558D297C50730DBB0647C3DA71265FF584ECAD77D8762DC9CE90D438A4A8A2060E3F0424AFA
Malicious:	false
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x2e244000, 0x660, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writab

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22269)
Category:	downloaded
Size (bytes):	22333
Entropy (8bit):	5.394866689862906
Encrypted:	false
SSDEEP:	384:hhVUoHH879tBRVrDnN4CgOqllpkofkKdyZxV18TsUIYSUrdORpS/04nwZYEKVAUM:risKnjV94Cv0sofvdIxL8wUIYVM4sYwd
MD5:	C92F01B6DF44FDD9DB0E80496FF01291
SHA1:	CE57281EDD3CFBFC440A4B3FEE6F3B118A80CA90
SHA-256:	D40AB76CF45D0DD1B8F5E03892E0A5182E79E3518E6FCA17FD236CFA39DB6081
SHA-512:	C54D1D33466343AF092F7DF9866FF8F1F31063B9A013215452869AAF6DDFE97737190659E0D8620BF64687813263E2D4420B9F5E7580D2C9EDCDC008C25FB7C9
Malicious:	false
URL:	https://static.canva.com/web/79679fd80f393deb.runtime.js
Preview:	(()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define cannot be used indirect")},c.amdO={},e=[],c.O=(r,t,n,f)=>{if(!t){var s=1/0;for(u=0;u<e.length;u++){for(var[t,n,f]=e[u],i=!0,a=0;a<t.length;a++)if((!1&f\|\|s>=f)&&Object.keys(c.O).every((e=>c.O[e](t[a]))))t.splice(a--,1);else if(i=!1,f<s)s=f;if(i){e.splice(u--,1);var o=n();if(void 0!==o)r=o}}return r}else{f=f\|\|0;for(var u=e.length;u>0&&e[u-1][2]>f;u--)e[u]=e[u-1];e[u]=[t,n,f]}},c.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return c.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,c.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var f=Object.create(null);c.r(f);var s={};r=r\|\|[null,t({}),t([]),t(t)];for(var i=

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	dropped
Size (bytes):	115121
Entropy (8bit):	5.371362815606401
Encrypted:	false
SSDEEP:	3072:tX/OXPeGcbWUc/0aHscJYoJyhVVh5XGsj56pY5TS2z5frSiqdE:tX/sPbcbWUXaHscGoIhVVHXGqSK5frf/
MD5:	CB1826AF86C8190CEB1FF4F70E255C6D
SHA1:	83057F32ACAA0D277001D22AEAEC60D141281C3E
SHA-256:	34E60C5656534222F02FC99959F0B48D191CE8A6CF8CC78DCFDA19A794FAED9F
SHA-512:	BA5F119FD4C74B74E310A3EB6451B117F564634208B9D20259D554A3D8749E17ACC39D3DBD2B82DEC7426ADFE4ED61EA24919B9ECEB6EF06BF837491A180D9DB
Malicious:	false
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{899171:(t,e,i)=>{i.d(e,{Z:()=>s});const s={Tn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.length);for(let n=0;n<i.length;++n)s[n]=i.charCodeAt(n);return s}}},576196:(t,e,i)=>{i.d(e,{G:()=>s});const s={CustomEvent:"ce",Pr:"p",_u:"pc",vc:"ca",Ea:"i",qs:"ie",M:"cci",R:"ccic",I:"ccc",F:"ccd",ql:"ss",xl:"se",Oi:"si",Ei:"sc",Gi:"sbc",Cc:"sfe",mo:"iec",Uu:"lr",zu:"uae",O:"ci",$:"cc",Ju:"lcaa",Eu:"lcar",On:"inc",Ln:"add",Rn:"rem",$n:"set",Bn:"ncam",Ku:"sgu",Fr:"ffi"}},876055:(t,e,i)=>{i.d(e,{Z:()=>s});const s={W:function(){const t=(t=!1)=>{const e=(Math.random().toString(16)+"000000000").substr(2,8);return t?"-"+e.substr(0,4)+"-"+e.substr(4,4):e};return t()+t(!0)+t(!0)+t()}}},19601:(t,e,i)=>{i.d(e,{Z:()=>s});class s{constructor(t,e){this.database=t,this.vd=e,this.parent="undefined"==typeof window?self:window,this.database=t,this.vd=

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1807)
Category:	dropped
Size (bytes):	11002
Entropy (8bit):	5.73605639366882
Encrypted:	false
SSDEEP:	192:5KaLH3uKZsjkQZOJ34wg0fOVX86GIyCu+fIVEJz5VZRqBOrEZFZ05rZmXb1EIu9c:55+fjDZOJ4UOVX8Stu+f5d5VPqQQLxf9
MD5:	0EC893E53F7D79154B0B93EDBB5AB754
SHA1:	CBF65AFFA01B562E5857823F4A8D3A1B445D13ED
SHA-256:	B03E7DBAA1C451E183D23A25EDA29D0BF9821C5F831828EBE05E63DEB185FC2E
SHA-512:	D5AD3C45A373DF4424C916AFF7F4B440DD1FB2970C8A3BD64931F64E880C613A01E1AB40197426ADCFB03F013A6B8E80CFEC53B5077D78C6C61BEAFF8D390570
Malicious:	false
Preview:	;// __FILE_CONTENT_FOR__:778ac51ce098c575.strings.js.(function() {. const messages = JSON.parse("{\"XYz3CA\":\"If you don.t know your ZPE email, please ask your school admin.\",\"zCET4w\":\"We.ll check if you already have an account. You can.t sign up with a mobile number in your current location.\",\"5Rgwdg\":\"Continue\",\"KNSJlg\":\"Continue with email or mobile\",\"ZOsgSQ\":\"Continue with your work email\",\"CICi/g\":\"Continue with Akun belajar.id\",\"JSk2MQ\":\"Continue with email\",\"yT2Crw\":\"Using your work email makes it easier to design together with your team.\",\"x2zp1w\":\"We only support signup with mobile numbers from mainland China. Please try to sign up another way.\",\"bT0bMw\":\"Couldn.t find that mobile. Go back and log in another way.\",\"u1NJyQ\":\"If you.re a student or educator, enter your ZPE email address. We.ll check if you have an account, and help create one if you don.t.\",\"OCF9Pw\":\"Continue with mobile\",\"FNzcgw\":\"Sorry, too many at

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.779486743739521
Encrypted:	false
SSDEEP:	3:YTyLV/Vf1+xNVcSLQzRE9LduVB4:YWLV91iDLQmpdIB4
MD5:	EA03273602AC31C0858FA2D9A1895526
SHA1:	4F8AFE25482A22C6858AF1F58E55D83F9DF9B854
SHA-256:	98D77039EA9249B3DCE91AD7B467EE382F29DAA61213C3E2737BD4A8786C8801
SHA-512:	77FF06E103CA553FAD14E5F865764CDA76777F83800C439ED91B22B26935146863F9D0C3BBBD3EE95E02C69A1A1C29D0C12A5D9B9D1D619CEEBCF1DCCB422238
Malicious:	false
Preview:	{"version_hash":"49267bce","url":"https://www.redditstatic.com/ads/49267bce/pixel.js"}

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	80620
Entropy (8bit):	5.343794647476945
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QJnYTZ02LKVsdmpyKcicxWK:RIT7OXVs9ZVKBtYj8wKcHxF
MD5:	030A5FC2F78384CC7B620C3739E23DCD
SHA1:	B6718936059A489F5F6411A31307EEBAEC779FCC
SHA-256:	3C00A8B606096D82BEA1675635A677F46F35DDA254B0362EF3E541F5EA1BD344
SHA-512:	513ADF5F8A121A827DB05030496882C0A4DB490821E50DB75465F78947B474561C71B4AFD84D8DA705F94D90E16DF996D44A97693D5BECC5E7AF49A082D924E0
Malicious:	false
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39974)
Category:	downloaded
Size (bytes):	40118
Entropy (8bit):	5.3437205014790115
Encrypted:	false
SSDEEP:	768:LEjr2bpoPIZg3TnupPggtHI55pmD/FxlbvPJPr+36ScYvsy03:Qr2bpoPIZg3TnupPgevHJPCKS1kV3
MD5:	309DA0150010C8298C2F4C4E4A2A070D
SHA1:	2C8384149EE31A41F492C91935B5805EFCFDAEF5
SHA-256:	39C88DB0E8E53B597AE3CB1F2883CCC08513E0A3A23B2E0E19B15B001F3B24C2
SHA-512:	49ECB2E5FAB147CF664386AEBCE140130A7F350A4550F2E9716EC685082CC47E16AEB640F8A9C5E74952A30267C3DB9F6BBC50598254EB79B2A4E185FFDB7948
Malicious:	false
URL:	https://static.canva.com/web/4bb9c51951d1d716.vendor.js
Preview:	/! For license information please see 4bb9c51951d1d716.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{172931:(e,t,n)=>{"use strict";n.d(t,{PP:()=>_,lX:()=>y,q_:()=>R});var r=n(110519),o=n(473124),a=n(83780),i=n(196750);function u(e){return"/"===e.charAt(0)?e:"/"+e}function s(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function l(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,o=t\|\|"/";return n&&"?"!==n&&(o+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(o+="#"===r.charAt(0)?r:"#"+r),o}function d(e,t,n,a){var i;"string"==typeof e?(i=function(e){var t=e\|\|"/",n="",r="",o=t.indexOf("#");-1!==o&&(r=t.substr(o),t=t.substr(0,o));var a=t.indexOf("?");return-1!==a&&(n=t.substr(a),t=t.substr(0,a)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),i.state=t):(void 0===(i=(0,r.Z)

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	dropped
Size (bytes):	401404
Entropy (8bit):	5.341176593890907
Encrypted:	false
SSDEEP:	6144:TT+xG/rKpSrrczz30WQE/H2pvmyrLod7lZXKG2t0fr:/+grKpS0XPQE/sfLod12t0fr
MD5:	D5986AF74A004BC41EEA9F12AB9AE673
SHA1:	870A52A5FCB06B240054784A18B4D79B2FE72F45
SHA-256:	2A54D0188FB6A38D670C732F19972D54603DE2A74A6BC96EF4F6E65212682D9A
SHA-512:	AC6E394C0236E34A1E58DDA9A83FB0841328E47E76328BD1E27F0B0BA5DB8D2DB3364EA8EAF7B236D3AD56227F4585B3395817779986A8F64C07EEE9C73D627D
Malicious:	false
Preview:	/! For license information please see 0af438d079413358.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:s;return(t&&t.strategy?t.strategy:l)(e,{cache:n,serializer:r})}function i(e,t,n,r){var i,o=null==(i=r)\|\|"number"==typeof i\|\|"boolean"==typeof i?r:n(r),a=t.get(o);return void 0===a&&(a=e.call(this,r),t.set(o,a)),a}function o(e,t,n){var r=Array.prototype.slice.call(arguments,3),i=n(r),o=t.get(i);return void 0===o&&(o=e.apply(this,r),t.set(i,o)),o}function a(e,t,n,r,i){return n.bind(t,e,r,i)}function l(e,t){return a(e,this,1===e.length?i:o,t.cache.create(),t.serializer)}n.d(t,{A:()=>f,H:()=>r});var s=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new u}},f={variadic

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43473
Category:	dropped
Size (bytes):	12126
Entropy (8bit):	7.9862712081532035
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVcx6tbLRtbaa01P0jGwWsEnJqVFGUc:+tjRIm6SoITu3khUrRkaVjTWsEnsKOmH
MD5:	5E9AC3A42B557BF8CA38CF2E8BABA70B
SHA1:	384C001B3FA47AD5D2A6001A05C700DF75492609
SHA-256:	C5E0F994B0C6C1C43D0C0FDE35AE8B72D458D31A8B2A17CA6E030C3C8D3C6FF2
SHA-512:	65EE94F5AB3621A8220BECB8AF3F7A348DA789E89F22007D2484B5F6365AD4100EB9178F18C83BEEDFBBDCBADE0683ACFFC94CE5D22A57AC38DBFBE119524D5E
Malicious:	false
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (374)
Category:	dropped
Size (bytes):	593
Entropy (8bit):	5.411571098635927
Encrypted:	false
SSDEEP:	12:kjhskjmgNKnwf0Hz0oW0+NNJ1kO/OK/A8R+QvmGbZJVrK23wirWLL:kjhskjmwKwsHAoW0gFkOxLVvmGbZJlKt
MD5:	853874DAE2B4FFF1668F87EA1DC3E537
SHA1:	82AD6A53D3CF93F4DBD42D3D2EC3D1CAAFEDF03E
SHA-256:	AFFBB8D7787E547290AA0E9490FC24180DD138890CFBBEDCFCEB6B4BACBDDD6E
SHA-512:	BC0FEBDCFC2DAACE08EE6195E8C4CAE8D4C085B543290A2873AFCFF65F2B2638D3273E9275139C5A94152CCB505CEE2756A79A9F1812D1F3D3D95A68E07EC9F7
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6642],{../***/ 708358:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {__c.UG=class extends Error{constructor(a){super(`MessageBusError: ${a.cause instanceof Error?a.cause.message:"Unknown"}`,a)}};.}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}..}]).//# sourceMappingURL=sourcemaps/72e88e1e9b45a34c.js.map

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2232)
Category:	dropped
Size (bytes):	2562
Entropy (8bit):	5.21154484683455
Encrypted:	false
SSDEEP:	48:a4gkAy8rtavNRY5uPwsF00I4MgLo4UCUn2oddS1KqIZHd2ITa00HELmF2SIoYBAD:a4gpy4tur6Tco85ofKKqu2ILYYBVw
MD5:	50A750081E7FDB205DD088B870291919
SHA1:	9082CD8A5F1E2EE3FCC57C8FA81E0E2B24884D3D
SHA-256:	05B72755F7D59EC4287DF01EC432E95F9603242963B0427782920FCE481847CB
SHA-512:	8F76031828C6430B64EFCDBC6730E9E1F5008064F645851272D631D5A8E03215F6D7D5837A154B89DB555AE479B9E898C92F921D799A4C78268F1EAD61140272
Malicious:	false
Preview:	(function() {. const messages = JSON.parse("{\"eq4PgA\":\"Didn.t get the code? Resend code\",\"PFOUew\":\"Continue\",\"gmd+NA\":\"Your experience is personalized through cookies. Choosing .do not sell. will disable the ones that make things more relevant\",\"MJsM5g\":\"You.re creating a Canva account with {0}\",\"hzBARA\":\"Finish logging in\",\"JWzrpw\":\"Save my choice\",\"/gSKAw\":\"I.m ok with this\",\"Jgf1lg\":\"Control how your data is shared\",\"lkTH3g\":\"(optional)\",\"KIPmtA\":\"Do not sell or share\",\"14WFgA\":\"We didn.t find a Canva account for {0} so we.ll make one for you. Enter the code we sent to finish signing up.\",\"Z/NsvQ\":\"Didn.t get the code? Resend in {0, plural, one {# second} other {# seconds}}\",\"aKdPtw\":\"Let us know it.s you\",\"NPhxDw\":\"Didn.t get the code? <button>Resend code</button>\",\"4u7AKw\":\"Thanks for confirming\",\"1s5N/w\":\"Enter your date of birth\",\"sxlNew\":\"Your Privacy Choices\",\"NXjY4Q\":\"Enter the 6-digit

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2757)
Category:	dropped
Size (bytes):	232102
Entropy (8bit):	5.547527470440045
Encrypted:	false
SSDEEP:	6144:nUAGRLxI5q2A415QyqVho8HMTm8ZuCH6fmU/Xx:nFSvA5QyqccyhZuCHjix
MD5:	89F9107542941C3055840322CCDD4AA2
SHA1:	1DE061886FA180FC2E560FC5558D6A0C7C3AA66A
SHA-256:	8AA117CCBE114BB5995EA0EC95C30DEC260CF5BA772BCF422E6E98DDFD58B84F
SHA-512:	7649E050E0E146FDB715D548AF7AD5B76910063DE15FD4459EBA6F2DB6B852899357439E5B7A8438C52FBA19CC96F84444ED84E773AC80BB976AEA988449D711
Malicious:	false
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x2e244000, 0x760, ]);.var aa,ba,ca,da,t,ea,fa,ha,ja;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writab

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17588)
Category:	dropped
Size (bytes):	17949
Entropy (8bit):	5.103167262109176
Encrypted:	false
SSDEEP:	384:zraQ39NdRAxEkv0GLQXkdP/TNmtozdTdCGeC4v9J+0y:zvdrkwcY4pdZ4G
MD5:	E24EBA32CA9D242C9AFAD9F41D1A40D2
SHA1:	CD2DBF2A518AAF120A3F87FF0380A1E5842A4C93
SHA-256:	7359120AECBE3003165F0472C30A5CF759BC5CA63B97E068DE29ABD81F0E2EFA
SHA-512:	EA5FBD0CD483862CA4AE47E697A87C8BD2FD4406AFADB6B095ED1B50673C75F380A3857EC863014D680F9A459D27A88E8E0532C34B8E1DF7D2480C6DB9774FE7
Malicious:	false
Preview:	(function() {. const messages = JSON.parse("{\"3PbJIQ\":\"Padua\",\"WUx1ZA\":\"Ulsan\",\"PX6vXw\":\"Vercelli\",\"Q1JLUQ\":\"Botswana\",\"V6tcoQ\":\"Kanagawa\",\"RvRivQ\":\"China\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"OosLqQ\":\"Philippines\",\"5wc8vQ\":\"Yamanashi\",\"T+aI9w\":\"Nagasaki\",\"ya38uw\":\"Northern Mariana Islands\",\"/JYvRA\":\"Set password\",\"Yq8qUA\":\"Punjab\",\"iTruLw\":\"Strong\",\"Xt9npg\":\"Wallis and Futuna\",\"bVst1g\":\"Sikkim\",\"Gm1Hxg\":\"Too weak\",\"9R9SOA\":\"French Guiana\",\"bvGzFg\":\"Siena\",\"tkkB/A\":\"Names and surnames are easily guessed.\",\"MmLBsA\":\"Tokushima\",\"WPVT7w\":\"Ragusa\",\"hU8yxA\":\"Singapore\",\"t7CNfQ\":\"Prince Edward Island\",\"kbGqHA\":\"Ecuador\",\"oCiIOA\":\"Colima\",\"WczLsg\":\"Mozambique\",\"eKXiSQ\":\"Password\",\"BxogvQ\":\"Quebec\",\"38tyzQ\":\"Wyoming\",\"v3Hd8g\":\"Caltanissetta\",\"mB2eng\":\"Kagawa\",\"OzAuvw\":\"Louisiana\",\"Ad7pIw\":\"Marshall Islands\",\"tnV+vg\":\"Avellino\",\"aD4xjg\":

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://alb.reddit.com/rp.gif?ts=1730333386529&id=t2_9z5lu86h&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41801)
Category:	downloaded
Size (bytes):	42391
Entropy (8bit):	5.1760094974593756
Encrypted:	false
SSDEEP:	768:vppd1R+sPnSNLNMVe5L9NH46rrTN6x4NlAo7i68rNPgTG9:lKsPSNmVeFjHBT8urG4M
MD5:	7A4DDDE5084E819729CE5F7B17C0194F
SHA1:	4EAF0A5E119DD6B8E190557D1EDC3E4A5638828A
SHA-256:	3C7017A3C105E3918F35BDCA787D6161C6B9094CAF65F3AFA38A05D77017A236
SHA-512:	347A1D5649AD34CDE7359382D93FC3C7BF03D9FDA7D0208C3F33B3385708C20836F4E1B26D1DE2BC186BC501C25D84EBE1D96A8177359743BD71688CA437D1BF
Malicious:	false
URL:	https://static.canva.com/web/e5aa5e318fd5dfa0.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"BQkOCQ\":\"{0}K\",\"mYD1Jg\":\"Confirm\",\"lHOuKw\":\"Log back in to discover <span>ColoringBook</span>\",\"nGBlYg\":\"Change email\",\"3DXnCQ\":\"Log in or sign up to discover <span>Disney collection</span>\",\"wIf7Uw\":\"Continue with other number or email\",\"DiRXIw\":\"June\",\"yi+ahA\":\"Main menu\",\"YeXLlA\":\"Log back in to discover <span>TypeCutOut</span>\",\"fjd76Q\":\"Log back in to discover <span>Magic Eraser</span>\",\"UWeoyQ\":\"Continue to Canva\",\"AV1wmg\":\"Loading...\",\"GQHbPg\":\"Reset your password\",\"bSA5qA\":\"To protect your privacy we can.t allow you to create a Canva account yourself.\",\"RVG7lw\":\"Log in through browser\",\"ma//Zw\":\"Log in with a password\",\"Ys3NqQ\":\"Last time you used Apple to log in.\",\"2JBM4g\":\"Go back\",\"LE4MeQ\":\"Esc\",\"UY/ePA\":\"{0}M\",\"q4OW6A\":\"Your birthday can.t be in the future\",\"DZbFvg\":\"Sign up with Baidu\",\"/fLNHg\":\"When you set up two factor authenticati

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	315793
Entropy (8bit):	5.585458280341486
Encrypted:	false
SSDEEP:	6144:f4KdGbgBuDoYk2639cM8Gp/J2D9tu9BW24n1k:QKicuDoYj9AEC
MD5:	A6C7DE6B5B73A0156491A70A9AE7B17C
SHA1:	1A751A371069B6FD9BC7A306175C122B2ED8BC5A
SHA-256:	F2F6D22F75EAA766233EF754AC4FC7AF5B81DB895D899FE85543D02BC0C53A63
SHA-512:	EEFC7E2FE668C3E44D32DB9B2A06AE1CD0F4FCB42987AFE432A013F1B5EFAC8C796E3FEDA6BEBEE6C43E5210D8854E319795999A60E8E7DA7DEDCB3A19D9950D
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-EPWEMH6717&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	153
Entropy (8bit):	5.204233622301515
Encrypted:	false
SSDEEP:	3:kXCcBGKOXVMMBe9wseBnPkXM+2CEVCOXVMMBYVO/Ypf7WssMB1iqLy:KrGzVTe9wsyvV7VTYVbMsTB+
MD5:	A6F8A04613DEE769174CE0AFE39D1530
SHA1:	DAA9838A82D25B3FFAC0CACC9C275E1CFC861271
SHA-256:	70D4C486541D1C73DB35B62A1B56E1B9F48614FA5B9B52F70BF6E3FB477EDA03
SHA-512:	9F2FFC5DBA9EAEBBB4938BDF322FE7B361F26AE49905311D1E2983D7E7815BFA6EB0298F91A69B99E8FCD77A4CCD485B894D8D130DC6E1ACC616E0DD8E0E8C56
Malicious:	false
URL:	https://static.canva.com/web/40f0ce866d9a0621.ltr.css
Preview:	.NiPPrQ{grid-gap:16px;display:grid;overflow:hidden}.Amj8Dw{grid-row-gap:16px;display:grid}./# sourceMappingURL=sourcemaps/40f0ce866d9a0621.ltr.css.map/

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
URL:	https://static.canva.com/static/images/favicon-1.ico
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222)
Category:	dropped
Size (bytes):	1515
Entropy (8bit):	5.541554555020035
Encrypted:	false
SSDEEP:	24:kjhskjmxqwsHAoW0gFkOZFtMi+NIOk+500y5Nz6EP6zeyUMuM7Ew8mMj5Ma8fE+6:AOAL0nkOXP+NFY5NuEP6XxEw++E+3GBt
MD5:	46A95C34B63209EC7A7A407521D6CAF4
SHA1:	7E0FC3B684CE935B338A045EEC2244BF9248DB33
SHA-256:	1C496D1E8DE09B24328B0A6904225BB8EF82164850A02F227F1545E91F5D64FE
SHA-512:	D63C70A5450A873ECCA9077FB033EE066313DE1A8C69D0FFEC0ABFCAED26AADE0548EEB62BEE496372284523EC5147D7BC0F788509115327A608A56C2109F68A
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1032],{../***/ 9164:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var p=__c.p;var F=__c.F;var S=__c.S;var E=__c.E;__c.UD=E(()=>({}));__c.eE=E(()=>({url:S(1),Rt:__c.qr(2)}));var fGa=F(()=>[1,2,3]);__c.gF=E(()=>({status:__c.y(1,fGa)}));__c.hF=E(()=>({name:S(1),properties:(0,__c.Br)(2)}));var gGa=F(()=>[1,2,3]);var hGa=F(()=>[1,2]);__c.YD=E(()=>({KV:__c.y(1,hGa),ls:S(2),CE:__c.qr(3),vg:__c.qr(4),requestId:S(5),i$:S(6),Pna:__c.bb(7,gGa)}));var iGa=F(()=>[1,2]);var jGa=F(()=>[1,2]);__c.iF=E(()=>({type:p("A?",1,"SUCCESS")}));var kGa=E(()=>({type:p("A?",2,"ERROR")}));__c.ICa=__c.ob(()=>({type:[1,__c.iF,2,kGa]}),()=>({}));__c.aE=E(()=>({}));var lGa=E(()=>({type:p("A?",1,"SUCCESS")}));var mGa=E(()=>({type:p("A?",2,"ER

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7574)
Category:	downloaded
Size (bytes):	52177
Entropy (8bit):	5.781337457407113
Encrypted:	false
SSDEEP:	768:ee9KyVGFzML1w1xmY0oGCqaviCIpItR4fjM8M5AMlVz+fnBnQcXSqIpTut5An47s:0aGFWYXHX+MavNtXGutrAOiBYyXHlpx
MD5:	8F1C21026A9E88936F7211A1B26242CB
SHA1:	221CAE4DCA6A8C940673AF510BD63EFA67CBB772
SHA-256:	4354885C645017A8D17B583A1E90F9D0A71BBC2772E33DA95C35EC84DC1B8A78
SHA-512:	C8E3660BAC4ABBC75DD22BF47038097539BC1033D6AA18BF1FF5FC4E209276DC0A2F9BD4F6E4E43A64071D225D4E3F5B4167511147B2912599EB4A4FE39BB656
Malicious:	false
URL:	https://static.canva.com/web/f4d98df598273a74.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9888],{../***/ 273752:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(977452);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var lF=__c.lF;var zF=__c.zF;var Ub=__c.Ub;var Ra=__c.Ra;var ja=__c.ja;var S=__c.S;var E=__c.E;var hh=__c.hh;var ih=__c.ih;var n=__c.n;var J=__c.J;var I=__c.I;var zVa,AVa,BVa,CVa,DVa,HVa,IVa,sS,LVa,MVa,NVa,PVa,OVa,RVa,UVa,GS,IS,MS,YVa,ZVa,OS,$Va,aWa,bWa,wVa,xVa,yVa,WS,dWa,XS,YS,$S,wS,aT,bT;__c.oS=function(a){a.Y.track(wVa,{location:"login_reset",source:a.source})};__c.pS=function(a,{method:b,Ua:c,flow:d}){a.Y.track(xVa,{source:a.source,Qaa:b,Ua:c,flow:d})};.__c.qS=function(a,b,c,d){__c.$e(a,0===b?"email":"phone",c,yVa[d])};.zVa=function(a,b,c){const d=[];let e=0;for(let g=0;g<a.length;g++){const h=a[g],l=h.options.length;va

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 38848, version 1.655
Category:	downloaded
Size (bytes):	38848
Entropy (8bit):	7.993669247804477
Encrypted:	true
SSDEEP:	768:SGQkx5jYojomEnKWP2gtvC7smgmSNW82sdRzCGZMc0wbsNm4NY8vikf:3L5LHNY2gU7ZS2gdCCMcQG8KE
MD5:	CFF149EE1E9D2BE50AC77BCD86769D05
SHA1:	A1B8A95DDFE811A098D0298E83DD711E90943732
SHA-256:	C84DE7E52D68BD3B651219E7085236BABC85A0C7C79F21A14F0CDDDBD0FB4B4C
SHA-512:	D27E713343F51A75E909B4A01D3F2FFB95EE82E13A1B21A9D3034D3858579E4C3FEBAE76E1AF706B820E51583254281E256B825F1742167E1E072DC59CDF1AE4
Malicious:	false
URL:	https://static.canva.com/web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2
Preview:	wOF2..............%(...L..............................j...?HVAR.^?MVARZ.`?STAT$'(..N/....D.\|0....6.$..\|..... ..>. [..q..W.....sgtY.....C.m..X=e...`...~9...?-....h[U.t.-.\..Q.zkm..,..k..RP4...%Z#_1q...H...A.P.T.s#..Q...;......[...H\|..C....i....AW....V....r..'.....`...$r.C$C$..8&.....]:v\x&N..q..........}..+.Q.$OJ............./.Wdb.a..........}.<....}//..B...BHB.!.K.+.).kT#.J).".Xa,e.JqQDtW..o...R..v.W...........;]..w...........7C0.N.^Q.m.......bAn..c8b...VD..(...Q"Z..y..1...o..O_......L.._.f.&........LC.Z................N....=.Y..]...h.).\|....&.1B.....6..].R..3.t)....i........#...`.B.8..D.E\V.(5*...O2..7..93.:.l6.$.B....>._...9..FE.........V.........1...0Al.5g=.....:/...L..3.b......7....... ......j...u...F)......e.g.Xf"C..e...3=..#...y...w...I.@.O.>.J.$........{S.V...e8B.. ."J9..DD."27k"VD..(...}...LHT...a.6-...r..m~.........~.?...NI...!..'F(b.....xb...(."~u...Q..&:.....9#Gm.D....D.&....R\|.D..N...:...".......II'.w_#..X...&:..WQ...\|...oj...RzP....T\|

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2532
Entropy (8bit):	3.8961545021668296
Encrypted:	false
SSDEEP:	48:UGjBXEKsdRgS8XVzbrfeSySCFAcU4fJN7vnROAHaiV9NemjDSNDATLr5Rx4jl:NqKQgSEzbiJU4P7RFHailLvSePrI
MD5:	856BAC30504ECAC8DBD38DBEE61DE1F1
SHA1:	AE5A807D8A8DA6E89007FF0B777F275732D20F2A
SHA-256:	F907C8872EBCE8226DBD7C952D0B6086FD446623DEAF473ADFC6700BEC4EA491
SHA-512:	7C58F21B2F5648D9BB85EEA9DDF914D91B57B185DE24080A21A350F9FB5C13AA93A320FA4D09C3B00CDE42567217D02438A484A504561F7C55407D865100E234
Malicious:	false
Preview:	<svg width="80" height="30" viewBox="0 0 80 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M79.444 18.096c-.136 0-.26.088-.324.272-.82 2.34-1.928 3.732-2.84 3.732-.524 0-.736-.584-.736-1.5 0-2.292 1.372-7.152 2.064-9.368.08-.268.132-.508.132-.712 0-.644-.352-.96-1.224-.96-.94 0-1.952.368-2.936 2.092-.34-1.52-1.368-2.184-2.804-2.184-1.66 0-3.264 1.068-4.584 2.8-1.32 1.732-2.872 2.3-4.04 2.02.84-2.056 1.152-3.592 1.152-4.732 0-1.788-.884-2.868-2.312-2.868-2.172 0-3.424 2.072-3.424 4.252 0 1.684.764 3.416 2.444 4.256-1.408 3.184-3.464 6.064-4.244 6.064-1.008 0-1.304-4.932-1.248-8.46.036-2.024.204-2.128.204-2.74 0-.352-.228-.592-1.144-.592-2.136 0-2.796 1.808-2.896 3.884a10.233 10.233 0 0 1-.368 2.332c-.892 3.184-2.732 5.6-3.932 5.6-.556 0-.708-.556-.708-1.284 0-2.292 1.284-5.156 1.284-7.6 0-1.796-.788-2.932-2.272-2.932-1.748 0-4.06 2.08-6.248 5.976.72-2.984 1.016-5.872-1.116-5.872A2.886 2.886 0 0 0 36 9.916a.752.752 0 0 0-.432.728c.204 3.176-2.56 11.312-5.18 11.312-.476 0-.70

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	4.55972645456488
Encrypted:	false
SSDEEP:	6:2LGa3ymyCE//MzGCFiM1wBJPwcQK5DrIt6xfeGYqX3OLGhw47Jsr4z+LibIEBE7g:2f3ymyCEIiMRhykgIaOEsrq1EiE7Dmyu
MD5:	A1AB0546CD0209ECAF9D81C1EC431E9B
SHA1:	A35F658C7DF8BE35A1BABAF39998CFB23419E994
SHA-256:	4922A8859B315C354C23AD278E35483C6CF29AEBF1C509C2C928C1F41634FE43
SHA-512:	9EE64BAEBD84174ED337F668C90E3679B37FF57857AF64C2B07D9D8FC1A722BF0C097F9C4B6B902F6F2BE66443E37D7EBE9ED24F03006124C3321B68C8E0CAB5
Malicious:	false
URL:	https://bat.bing.com/p/action/56000504.js
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.571250611266531
Encrypted:	false
SSDEEP:	3:VO/YpLEs2MQUWKLY/oFzyH0cGAtdGu1Ryi8o0LAsWsCVzrtNiWnOLQGqn:JmsthFzyHlGC29rClryWnOkGqn
MD5:	7D34C21F2B5B249426723B011D2FB962
SHA1:	DE833D943DEA1BFF14AD1D37C9FE6EF6BE2F901F
SHA-256:	2E9E9674881EA01F82EC5D7F5F34879CBC07EE41C1B562DA603B597A760F27DD
SHA-512:	455BCD25288550E2AD5A9EB901B366D4914807639D324B00D01F3D0B247072F3C6D893772D99BDD6C97A747A588439987959BBDACC19AED07496594187CDC72D
Malicious:	false
URL:	https://static.canva.com/web/59362c63d8046de9.ltr.css
Preview:	./# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiIsImZpbGUiOiI4NGVjMjMxZjk1MmY0ZGJmLmx0ci5jc3MifQ== /

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533), with no line terminators
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	4.933115570682282
Encrypted:	false
SSDEEP:	12:X5eNcBWFXMOYEBAP5egtIzVWRwHjXJqIK+qIKzg0fUsq5eK:pemBkXWegazdDZq3+q3c08sceK
MD5:	FEB698008C36A09DFE88AB06A1C3E3B9
SHA1:	A871FBCBBE298AE7078D06627708B2C106A0FAF3
SHA-256:	1C4E7E389D73C6ACF7F19CC812514E71230740791FDE8A018C1D7EDCCF1590AE
SHA-512:	F8E3CA3E49B1C027232D1B3AAB82B5430F4A69334A5E18BEB4469C39D6A24D3F4D3FA4C473F360B619CE734977F0D7EFD03BE6ACB5EB7B9F69295FB2CBF94D9B
Malicious:	false
URL:	https://accounts.google.com/gsi/style
Preview:	#credential_picker_container{border:none;height:330px;position:fixed;right:20px;top:20px;width:391px;z-index:9999}#credential_picker_container iframe{border:none;width:391px;height:330px}#g_a11y_announcement{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}.L5Fo6c-sM5MNb{border:0;display:block;left:0;position:relative;top:0}.L5Fo6c-bF1uUb{-webkit-border-radius:4px;border-radius:4px;bottom:0;cursor:pointer;left:0;position:absolute;right:0;top:0}.L5Fo6c-bF1uUb:focus{border:none;outline:none}sentinel{}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1399)
Category:	downloaded
Size (bytes):	5543
Entropy (8bit):	5.562072055283017
Encrypted:	false
SSDEEP:	96:yCVYIHGLipgnC+Y8bjeIRIY7jeIRIS8bCeIQIY7CeIQIb5:yrIHGLipgK8bjeIRIY7jeIRIS8bCeIQ6
MD5:	40C60A946D7B6855A2461A5FFB5F0FB6
SHA1:	1B012140518EB868C2232ABA2BCDEA63B7BEC0A4
SHA-256:	BE9C7E35E797B7E88FEEDD7BE989F2220B3F8767FB72086452B6C2AF8855E8B8
SHA-512:	74C3663C2568C9CD6E092EBF21767C5EC6DB9F6091C1CEC8CB849D47DAAE126A1EAED33EB887C044CEE0CE90727B0E135A50848CE25DAD5E45834283F3A3E199
Malicious:	false
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=homepage_visit&_fv=1&_nsi=1&_ss=1&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765753&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=homepage&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=visit&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&up.custom_country_code=US&tfd=10127&richsstsse
Preview:	event: message.data: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=153901850&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55127)
Category:	downloaded
Size (bytes):	80631
Entropy (8bit):	5.454048959086965
Encrypted:	false
SSDEEP:	1536:RQ+IUi10Pg5N8v3l3+ATAVzzQ3vEbJoGGLD3Mrl0xYuhO8fb:R1Pg78vx+AM1ah3crl0xYuvb
MD5:	B93149E308E4952B65FBB41DE9661880
SHA1:	9620CDBBB394C20A106C0D3DD1ECFA5E4D7A1510
SHA-256:	375DA51FC518AF0F9338D581F91158C75A7C2EB33203171D6DE8A124C2505758
SHA-512:	8E741511F0322FE7499B62B9B87A89CCA0A219ACB898964DF389487A9731C22B6E6681C4FDCCD77DD7491E98564C55498E88EAC085582469D35571D7DD3E1AB4
Malicious:	false
URL:	https://connect.facebook.net/signals/plugins/microdata.js?v=2.9.174
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2532
Entropy (8bit):	3.8961545021668296
Encrypted:	false
SSDEEP:	48:UGjBXEKsdRgS8XVzbrfeSySCFAcU4fJN7vnROAHaiV9NemjDSNDATLr5Rx4jl:NqKQgSEzbiJU4P7RFHailLvSePrI
MD5:	856BAC30504ECAC8DBD38DBEE61DE1F1
SHA1:	AE5A807D8A8DA6E89007FF0B777F275732D20F2A
SHA-256:	F907C8872EBCE8226DBD7C952D0B6086FD446623DEAF473ADFC6700BEC4EA491
SHA-512:	7C58F21B2F5648D9BB85EEA9DDF914D91B57B185DE24080A21A350F9FB5C13AA93A320FA4D09C3B00CDE42567217D02438A484A504561F7C55407D865100E234
Malicious:	false
URL:	https://static.canva.com/web/images/856bac30504ecac8dbd38dbee61de1f1.svg
Preview:	<svg width="80" height="30" viewBox="0 0 80 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M79.444 18.096c-.136 0-.26.088-.324.272-.82 2.34-1.928 3.732-2.84 3.732-.524 0-.736-.584-.736-1.5 0-2.292 1.372-7.152 2.064-9.368.08-.268.132-.508.132-.712 0-.644-.352-.96-1.224-.96-.94 0-1.952.368-2.936 2.092-.34-1.52-1.368-2.184-2.804-2.184-1.66 0-3.264 1.068-4.584 2.8-1.32 1.732-2.872 2.3-4.04 2.02.84-2.056 1.152-3.592 1.152-4.732 0-1.788-.884-2.868-2.312-2.868-2.172 0-3.424 2.072-3.424 4.252 0 1.684.764 3.416 2.444 4.256-1.408 3.184-3.464 6.064-4.244 6.064-1.008 0-1.304-4.932-1.248-8.46.036-2.024.204-2.128.204-2.74 0-.352-.228-.592-1.144-.592-2.136 0-2.796 1.808-2.896 3.884a10.233 10.233 0 0 1-.368 2.332c-.892 3.184-2.732 5.6-3.932 5.6-.556 0-.708-.556-.708-1.284 0-2.292 1.284-5.156 1.284-7.6 0-1.796-.788-2.932-2.272-2.932-1.748 0-4.06 2.08-6.248 5.976.72-2.984 1.016-5.872-1.116-5.872A2.886 2.886 0 0 0 36 9.916a.752.752 0 0 0-.432.728c.204 3.176-2.56 11.312-5.18 11.312-.476 0-.70

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	86447
Entropy (8bit):	7.954632366681183
Encrypted:	false
SSDEEP:	1536:gwWRXWXE5fmtg5Jbz1gB3uuDQzJRKyjhtE6JkmlxFD9oFNZgotfXEtMEB/ZtE:gw4WkftJ1Q+uDBytEGksjD+HgMPuD/Zq
MD5:	FAA6CDB69C74C23EF804B6462A9F767F
SHA1:	243A6D87D7BC397A00F8AD3470085DECC55CFCEC
SHA-256:	CE438E6645957D9ADEA645B91729FCE37729656F75B5C6C466759979A4553F49
SHA-512:	D27E8797ED063E629897E00BBC12F62B9A341792ED965C19BC61D17A46DF34893BE1CD5C8ABF2F761B607A663FC0DF94A94E00E16517739EF16EAC7F77B09094
Malicious:	false
Preview:	......JFIF.................................."...... ."2,441,0/7>OC7:K;/0E^FKRTYYY5Bah`VgOWYU.......(..(U909UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU......8...."..........3................................................................`F..].^p]K..@.c#-.H...T9Q.o.tL.....v4.j.agYgy..........Cj.:W...}...r........,.\|..L.).....oy;;.J.~...3.'..<W@3s.:RU.Q.S.s#..\....9c 8...3......A.:....<.+.n3.w.f*1.P...].[!6..S..Z.....l.F.&b6X......R}..0H.3...7..................e8.0.E..g3,u.-o..t....:...-)..u[....\|...!..7..z.B...(.....i.:n..w]g......y.FR....'.....OU8...p.)T^..ZL\|.F.Sk.s}.....69..w..Z7L.}2.........Jb+.i.....'.D......eF0...v.H3....b..3....T!..]h3~/Xg.h..8.........c._d....Q.3.......4,.....&8..UkTs.:.;.L.0....0'.E.u...$.....-..9..s......u>Xf%C}........J.\.H.I....$b_......(...g?i.t..A........HI..3..->.SK..V..jP..(h....i.xn-..IK.<..1w..TY_O).!..p..<...c.x:.Dw~_z..K..@....._M.I`..Qs>..K=n.Q.....L..X{\.%q..Co.DU<.Ua>Y.....T...N ..=.;..k{>^.....i.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
URL:	https://collector-22324.us.tvsquared.com/tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 43473
Category:	downloaded
Size (bytes):	12126
Entropy (8bit):	7.9862712081532035
Encrypted:	false
SSDEEP:	192:26MV2PEUWRRI2V6SKbQ5W3YmOCf3OrXT9WVcx6tbLRtbaa01P0jGwWsEnJqVFGUc:+tjRIm6SoITu3khUrRkaVjTWsEnsKOmH
MD5:	5E9AC3A42B557BF8CA38CF2E8BABA70B
SHA1:	384C001B3FA47AD5D2A6001A05C700DF75492609
SHA-256:	C5E0F994B0C6C1C43D0C0FDE35AE8B72D458D31A8B2A17CA6E030C3C8D3C6FF2
SHA-512:	65EE94F5AB3621A8220BECB8AF3F7A348DA789E89F22007D2484B5F6365AD4100EB9178F18C83BEEDFBBDCBADE0683ACFFC94CE5D22A57AC38DBFBE119524D5E
Malicious:	false
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....n..i....k\....<.L..J..P"$F.q....{.%....;;.6.B.}N.w.>.....I.0(EF.J..t$T=4......yc....J...T.4..%......."\..F......d..%...U52..c+>F..f..JV...... ......."tW>..[.x....L.Q.P.u't..\]wF..w=.._.z....Boi...'.c.FIl<m6M..]u.;..K....F..'.Y.R........AK.M..3.c.N.....D....yf..&...Y2oz......uS..Q.j.]&$...8[.i..6cT..L5.....#..Q.&hj;I.=6I.L.^,F..v;z\&...S4.....N.h...\|.].@..D..B.=a..pz.P.....e.5...vQ....G~.fK...2..A.r9ko...ihO...R...[-...}.=.T.39O!.3"....(.....C.....q...8.E..6...}..]t.D...'gN.;.2.>....k.+.S)D.....0...".Q.i.,./r.(....Nn.Tmhz.m.Kx]Zj....y.<...;.D.r..H...U....@%.Kb...W.V.{..`i......._...'.!)5.CGd.....e.+^...E.8.Q..d.....4.#...\|_.7.UCm..I{.{.f['...`..c:mBjMp......N..F..1.>*. YR...N....~te.B.}n....M..q.<...x.....N:.6.....CT..+^.1........!;...8....P..d+>.q",3..qW.....qb....:....C@ey.$..c.D.e..D...-..<...!......$.d...I`sj.;yplf.....<Y.2I.y.L.Du1".K..... gWn.4.2.....l..0ri....I...Q......X.x.}.?.......A.I..).g.a4.....o..-c

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	607424
Entropy (8bit):	4.854897260548451
Encrypted:	false
SSDEEP:	12288:AUACX/E9ppD7ehSadRuo2oGyaaYKoErDbfj7XfHG6W:hsHh7ehSo2NaY+bfj7Xfi
MD5:	4922CB8B7F2629E3D61D325AD77E0429
SHA1:	C861D8C6A37FF8552A28F7E7C0ECE3837EBD434F
SHA-256:	88692DB4E440FE58E7E73604CDEA4055827019E6DB9316671AEFD0B0ECB4147D
SHA-512:	EB233824913E21AAE475DA2C5DF0E64681B00325A939313B3993198786C5C7B62C32A525675A7C656F57F4745262D030C6093511B31BA6D4382E9841530E0A03
Malicious:	false
URL:	https://static.canva.com/web/b77b429f87fd6ea1.runtime.js
Preview:	(()=>{"use strict";var r,e,f,t,s,c={},n={};function a(r){var e=n[r];if(void 0!==e)return e.exports;var f=n[r]={id:r,loaded:!1,exports:{}};return c[r].call(f.exports,f,f.exports,a),f.loaded=!0,f.exports}a.m=c,a.amdD=function(){throw new Error("define cannot be used indirect")},a.amdO={},r=[],a.O=(e,f,t,s)=>{if(!f){var c=1/0;for(u=0;u<r.length;u++){for(var[f,t,s]=r[u],n=!0,i=0;i<f.length;i++)if((!1&s\|\|c>=s)&&Object.keys(a.O).every((r=>a.O[r](f[i]))))f.splice(i--,1);else if(n=!1,s<c)c=s;if(n){r.splice(u--,1);var d=t();if(void 0!==d)e=d}}return e}else{s=s\|\|0;for(var u=r.length;u>0&&r[u-1][2]>s;u--)r[u]=r[u-1];r[u]=[f,t,s]}},a.n=r=>{var e=r&&r.__esModule?()=>r.default:()=>r;return a.d(e,{a:e}),e},f=Object.getPrototypeOf?r=>Object.getPrototypeOf(r):r=>r.__proto__,a.t=function(r,t){if(1&t)r=this(r);if(8&t)return r;if("object"==typeof r&&r){if(4&t&&r.__esModule)return r;if(16&t&&"function"==typeof r.then)return r}var s=Object.create(null);a.r(s);var c={};e=e\|\|[null,f({}),f([]),f(f)];for(var n=

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2001)
Category:	dropped
Size (bytes):	19262
Entropy (8bit):	5.438594810338565
Encrypted:	false
SSDEEP:	384:TYJAyZB3OLWOddr7DvNHs5KHoECh+m3GKis9GpVBmfWGj6DY1GwX2QrE42K:TGZB3OLWOddr7DvNEKHoE6+MGo9GQfWk
MD5:	38BE64DCEBA955213F68196648D4BA6C
SHA1:	3FF3D13F463AF8AAB23756A4E38BEBF11ADD3929
SHA-256:	6DE792EAF3D35B5AA51E02AB81E7F979E673E6BD76C0BDEEFEA4863D119823C8
SHA-512:	B6731A10B4020FDC5E2CB3191C8A7F16E7D2AAAC8B9B44E0582B0F4269F4A876DCB7112C18DD69CDC5D03B1F3D32BFA6BA5F937D7076C20DE224EF53B468654F
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{../***/ 558045:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);__web_req__(708358);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var S=__c.S;var U=__c.U;var E=__c.E;.var bTa=async function(a,b){const c=__c.Mf(__c.Kf([gQ,"create"])),[d,{x8:e}]=await Promise.all([a.yb.post(c,hQ.N(b),{uc:"recordanalyticsevent"}),__webpack_require__.me(9164).then(()=>({x8:aTa}))]);return e.R(d)},dTa=async function(a,b){const c=__c.Mf(__c.Kf([gQ,"createBatch"])),[d,{w8:e}]=await Promise.all([a.yb.post(c,iQ.N(b),{uc:"recordanalyticseventbatch"}),__webpack_require__.me(9164).then(()=>({w8:cTa}))]);return e.R(d)},jQ=function(a){if(!a.cU){const b=a.OE.url,c=a.OE.Vra,d=a.OE.tra;a.cU=new Promise(e=>.{a.global.sensorsDataAnalytic201505="sa";a.global.sa={para:{

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	downloaded
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
URL:	https://pixel-config.reddit.com/pixels/t2_9z5lu86h/config
Preview:	...........................

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34530)
Category:	downloaded
Size (bytes):	34593
Entropy (8bit):	5.741729371356181
Encrypted:	false
SSDEEP:	384:gK/Pya4sEzfidaRaqOHqdC1VbamwTGkEJcSJWG7o+UwsI:gkbGzqdkap5xBwGkE20O5I
MD5:	9E2205E808FD8D87EC77908A431D0FC3
SHA1:	037AE3FFB8A9CA03DD5F0EF09D13074604B4BDE1
SHA-256:	16BF3651FF1CB8002FB132168BAF7FE39DAB400052EC048AFF36F39C80C80015
SHA-512:	4C476B1D6C720214207A8D8E057E32BF137074A3CC7DA4B94ADEF808769DB68D9C5201937CB21C26D69356EC0436FF25925221B7A3F4D85B329B6A898CA8EAF4
Malicious:	false
URL:	https://static.canva.com/web/4ce1876078c17bba.ltr.css
Preview:	.theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy86Q:rgba(57,76,96,.15);--p53f_Q:rgba(13,18,22,0);--REcY5g:#0d1216;--XajtPQ:rgba(36,49,61,.4);--FVk7Ew:rgba(165,112,255,.15);--2-zmYA:rgba(165,112,255,.15);--ySYdsQ:rgba(165,112,255,.2);--aMXh3A:rgba(64,87,109,.07);--_RN1Dg:#612dae;--8fGzbw:rgba(36,49,61,.4);--ob8tTA:rgba(13,18,22,0);--MghLXQ:rgba(64,87,109,.07);--3R4u8w:rgba(57,76,96,.15);--TwiLcg:rgba(13,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(17,23,29,.6);--QADODw:rgba(13,18,22,.7);--kTBxcw:rgba(13,18,22,.86);--HxK_kw:rgba(17,23,29,.6);--6u-yJQ:#fff;--J0YKvA:hsla(0,0%,100%,.7);--yrvb-A:rgba(57,76

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	80620
Entropy (8bit):	5.343794647476945
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QJnYTZ02LKVsdmpyKcicxWK:RIT7OXVs9ZVKBtYj8wKcHxF
MD5:	030A5FC2F78384CC7B620C3739E23DCD
SHA1:	B6718936059A489F5F6411A31307EEBAEC779FCC
SHA-256:	3C00A8B606096D82BEA1675635A677F46F35DDA254B0362EF3E541F5EA1BD344
SHA-512:	513ADF5F8A121A827DB05030496882C0A4DB490821E50DB75465F78947B474561C71B4AFD84D8DA705F94D90E16DF996D44A97693D5BECC5E7AF49A082D924E0
Malicious:	false
URL:	https://connect.facebook.net/signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	315800
Entropy (8bit):	5.585510832227241
Encrypted:	false
SSDEEP:	6144:f4KdGbgBuzook2639cM8Gp/J2D9tu9BW24n1H:QKicuzooj9AER
MD5:	58261FB83BADA7D3778FE6C93CB43DB9
SHA1:	0750B01BC21F1B2B23FF19CC6E895EA5EFAF062D
SHA-256:	C7D4F29F5472646A5A9AB0737D8EFBFBC147273DDF52AF82DD0406A3FAD567C2
SHA-512:	9DC8B7F4916EA4C9BEB7FAEBCEC1987B3601F14664CECFE7A48F3BC10BD31FBCB11334B5E65BFC7B5E30B5FC1440085A0B3B2944C4FED3549F8AF1547B5B3B32
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":12,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (41801)
Category:	dropped
Size (bytes):	42391
Entropy (8bit):	5.1760094974593756
Encrypted:	false
SSDEEP:	768:vppd1R+sPnSNLNMVe5L9NH46rrTN6x4NlAo7i68rNPgTG9:lKsPSNmVeFjHBT8urG4M
MD5:	7A4DDDE5084E819729CE5F7B17C0194F
SHA1:	4EAF0A5E119DD6B8E190557D1EDC3E4A5638828A
SHA-256:	3C7017A3C105E3918F35BDCA787D6161C6B9094CAF65F3AFA38A05D77017A236
SHA-512:	347A1D5649AD34CDE7359382D93FC3C7BF03D9FDA7D0208C3F33B3385708C20836F4E1B26D1DE2BC186BC501C25D84EBE1D96A8177359743BD71688CA437D1BF
Malicious:	false
Preview:	(function() {. const messages = JSON.parse("{\"BQkOCQ\":\"{0}K\",\"mYD1Jg\":\"Confirm\",\"lHOuKw\":\"Log back in to discover <span>ColoringBook</span>\",\"nGBlYg\":\"Change email\",\"3DXnCQ\":\"Log in or sign up to discover <span>Disney collection</span>\",\"wIf7Uw\":\"Continue with other number or email\",\"DiRXIw\":\"June\",\"yi+ahA\":\"Main menu\",\"YeXLlA\":\"Log back in to discover <span>TypeCutOut</span>\",\"fjd76Q\":\"Log back in to discover <span>Magic Eraser</span>\",\"UWeoyQ\":\"Continue to Canva\",\"AV1wmg\":\"Loading...\",\"GQHbPg\":\"Reset your password\",\"bSA5qA\":\"To protect your privacy we can.t allow you to create a Canva account yourself.\",\"RVG7lw\":\"Log in through browser\",\"ma//Zw\":\"Log in with a password\",\"Ys3NqQ\":\"Last time you used Apple to log in.\",\"2JBM4g\":\"Go back\",\"LE4MeQ\":\"Esc\",\"UY/ePA\":\"{0}M\",\"q4OW6A\":\"Your birthday can.t be in the future\",\"DZbFvg\":\"Sign up with Baidu\",\"/fLNHg\":\"When you set up two factor authenticati

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1477)
Category:	dropped
Size (bytes):	3097
Entropy (8bit):	5.556468484062283
Encrypted:	false
SSDEEP:	48:ja8b3ocsG9A8v7DZIKCa73ocsG9A8v7DZIKUuR6v7DZIHGSQLRmaKch3eCK4G9/v:+8bDVIY7DVIWRYIHGSi8pIuC+t5
MD5:	91E9E5A6271D6DC13A0504E72050886F
SHA1:	CB0AD5CC2BD88B10948A0F4C58F5ACCB3566519B
SHA-256:	7BDFFEC67C97C528F45B0F55DACFA8AFEEFEBF8038B348AE2BD3E893D0542D68
SHA-512:	67E48479D25068DC07CB8C732F8FFCFE27B127AC826537837D976DAE106EFE5509C0724EBB97B924BD2185E14C2A15224675B22836B2AE12EB66E2F5DBE52F11
Malicious:	false
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4au0h2v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1529173079;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4au0h2v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;d

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59736)
Category:	downloaded
Size (bytes):	59799
Entropy (8bit):	5.233503062351194
Encrypted:	false
SSDEEP:	768:s5HuCYDLo4tJt/3Ss9YWy2cnyXKFHpXaIQLSYbK6E3CLwtk2W:LDLo4tJt/SswP/aTbK6E3Aak2W
MD5:	2C2418F2A0BB5BF10E642D60F3C2A492
SHA1:	81273E41DE48E3D1205F201AD4D2F31BD3A058F5
SHA-256:	6C69EAAFF9C7BE38F2BB84BB5FAA685016CC77C4A23F275FCC99A019164C2318
SHA-512:	6D663D0A3C61314F2CD8DB87650127F3FFA01E332CF32283368746313D0F50E6C74EF4883350ABD07E25E0240BABE18E872FCDF9DA3E06698D59D4CAE37C2B0A
Malicious:	false
URL:	https://static.canva.com/web/b20dcbcd86b70481.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{42782:(e,t,n)=>{n.d(t,{$$:()=>ze,EH:()=>Wt,Ei:()=>Yn,Fl:()=>Ie,Gf:()=>an,LG:()=>Ht,LJ:()=>tr,LO:()=>Ce,M5:()=>pn,N7:()=>An,PS:()=>xn,Pb:()=>fr,SB:()=>xt,SW:()=>it,U5:()=>Xt,VO:()=>On,XP:()=>mn,ZN:()=>jn,Zf:()=>Ye,aD:()=>Kt,cp:()=>J,dw:()=>on,eJ:()=>bn,gx:()=>En,hz:()=>$t,jQ:()=>rn,kS:()=>jr,le:()=>jt,ls:()=>hn,mJ:()=>ht,n7:()=>rr,p6:()=>Y,pA:()=>Zt,pu:()=>gt,qh:()=>wn,qp:()=>kr,rC:()=>Bn,rg:()=>ut,so:()=>z,vP:()=>er,wM:()=>ft,z:()=>qt});function r(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];throw new Error("number"==typeof e?"[MobX] minified error nr: "+e+(n.length?" "+n.map(String).join(","):"")+". Find the full error at: https://github.com/mobxjs/mobx/blob/main/packages/mobx/src/errors.ts":"[MobX] "+e)}var i={};function o(){return"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:"undefined"!=typeof self?self:i}var

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2001)
Category:	downloaded
Size (bytes):	19262
Entropy (8bit):	5.438594810338565
Encrypted:	false
SSDEEP:	384:TYJAyZB3OLWOddr7DvNHs5KHoECh+m3GKis9GpVBmfWGj6DY1GwX2QrE42K:TGZB3OLWOddr7DvNEKHoE6+MGo9GQfWk
MD5:	38BE64DCEBA955213F68196648D4BA6C
SHA1:	3FF3D13F463AF8AAB23756A4E38BEBF11ADD3929
SHA-256:	6DE792EAF3D35B5AA51E02AB81E7F979E673E6BD76C0BDEEFEA4863D119823C8
SHA-512:	B6731A10B4020FDC5E2CB3191C8A7F16E7D2AAAC8B9B44E0582B0F4269F4A876DCB7112C18DD69CDC5D03B1F3D32BFA6BA5F937D7076C20DE224EF53B468654F
Malicious:	false
URL:	https://static.canva.com/web/748178ca07be7fb4.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{../***/ 558045:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);__web_req__(708358);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var S=__c.S;var U=__c.U;var E=__c.E;.var bTa=async function(a,b){const c=__c.Mf(__c.Kf([gQ,"create"])),[d,{x8:e}]=await Promise.all([a.yb.post(c,hQ.N(b),{uc:"recordanalyticsevent"}),__webpack_require__.me(9164).then(()=>({x8:aTa}))]);return e.R(d)},dTa=async function(a,b){const c=__c.Mf(__c.Kf([gQ,"createBatch"])),[d,{w8:e}]=await Promise.all([a.yb.post(c,iQ.N(b),{uc:"recordanalyticseventbatch"}),__webpack_require__.me(9164).then(()=>({w8:cTa}))]);return e.R(d)},jQ=function(a){if(!a.cU){const b=a.OE.url,c=a.OE.Vra,d=a.OE.tra;a.cU=new Promise(e=>.{a.global.sensorsDataAnalytic201505="sa";a.global.sa={para:{

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2232)
Category:	downloaded
Size (bytes):	2562
Entropy (8bit):	5.21154484683455
Encrypted:	false
SSDEEP:	48:a4gkAy8rtavNRY5uPwsF00I4MgLo4UCUn2oddS1KqIZHd2ITa00HELmF2SIoYBAD:a4gpy4tur6Tco85ofKKqu2ILYYBVw
MD5:	50A750081E7FDB205DD088B870291919
SHA1:	9082CD8A5F1E2EE3FCC57C8FA81E0E2B24884D3D
SHA-256:	05B72755F7D59EC4287DF01EC432E95F9603242963B0427782920FCE481847CB
SHA-512:	8F76031828C6430B64EFCDBC6730E9E1F5008064F645851272D631D5A8E03215F6D7D5837A154B89DB555AE479B9E898C92F921D799A4C78268F1EAD61140272
Malicious:	false
URL:	https://static.canva.com/web/ef72ef9d495f3a56.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"eq4PgA\":\"Didn.t get the code? Resend code\",\"PFOUew\":\"Continue\",\"gmd+NA\":\"Your experience is personalized through cookies. Choosing .do not sell. will disable the ones that make things more relevant\",\"MJsM5g\":\"You.re creating a Canva account with {0}\",\"hzBARA\":\"Finish logging in\",\"JWzrpw\":\"Save my choice\",\"/gSKAw\":\"I.m ok with this\",\"Jgf1lg\":\"Control how your data is shared\",\"lkTH3g\":\"(optional)\",\"KIPmtA\":\"Do not sell or share\",\"14WFgA\":\"We didn.t find a Canva account for {0} so we.ll make one for you. Enter the code we sent to finish signing up.\",\"Z/NsvQ\":\"Didn.t get the code? Resend in {0, plural, one {# second} other {# seconds}}\",\"aKdPtw\":\"Let us know it.s you\",\"NPhxDw\":\"Didn.t get the code? <button>Resend code</button>\",\"4u7AKw\":\"Thanks for confirming\",\"1s5N/w\":\"Enter your date of birth\",\"sxlNew\":\"Your Privacy Choices\",\"NXjY4Q\":\"Enter the 6-digit

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.779486743739521
Encrypted:	false
SSDEEP:	3:YTyLV/Vf1+xNVcSLQzRE9LduVB4:YWLV91iDLQmpdIB4
MD5:	EA03273602AC31C0858FA2D9A1895526
SHA1:	4F8AFE25482A22C6858AF1F58E55D83F9DF9B854
SHA-256:	98D77039EA9249B3DCE91AD7B467EE382F29DAA61213C3E2737BD4A8786C8801
SHA-512:	77FF06E103CA553FAD14E5F865764CDA76777F83800C439ED91B22B26935146863F9D0C3BBBD3EE95E02C69A1A1C29D0C12A5D9B9D1D619CEEBCF1DCCB422238
Malicious:	false
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry
Preview:	{"version_hash":"49267bce","url":"https://www.redditstatic.com/ads/49267bce/pixel.js"}

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=574836&time=1730333387858&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	{}

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10140)
Category:	downloaded
Size (bytes):	16541
Entropy (8bit):	5.715817268810953
Encrypted:	false
SSDEEP:	384:0wJOalAKzyk4EeTZ1sofMNoDigJ3nGQ1G62a:05MAW4EeTnBzJ3GQ1GO
MD5:	BC7C8830D463C88348FA070B1100AC08
SHA1:	D22E5BCFE518B6520F9DB92DC324363139F18741
SHA-256:	AE20747E8A07F3FD96763369907024EEA0C435FBF82125EE1861C2E254CABD40
SHA-512:	D24CD5077BB649422506C01CF8E03D70B867E560FAA0564697EB89BA155AE64CF739DE443E5511938C56BB6487ABAE32E76B2ED2377CA3E91F9D3B0E1DE8D4DE
Malicious:	false
URL:	https://static.canva.com/web/2359b9fab9478cec.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2527],{../***/ 277425:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var J=__c.J;var eR;var Dr=__c.Dr;var t=__c.t;var DR;var v=__c.v;var p=__c.p;var V=__c.V;var C=__c.C;var r=__c.r;var U=__c.U;var P=__c.P;var tr=__c.tr;var S=__c.S;var qr=__c.qr;var y=__c.y;var R=__c.R;var E=__c.E;var F=__c.F;var JQ,STa,LQ,KQ,TTa,NQ,UTa,VTa,WTa,XTa,YTa,ZTa,$Ta,pR,qR,rR,aUa;JQ=function(a){const b={};for(const c of Object.keys(a)){const d=a[c];b[c]=d instanceof Object?JSON.stringify(d):d}console.table(b);console.log("View non-truncated properties:");console.dir(a)};.STa=function(a){switch(a){case "unset":return 0;case "ok":return 1;case "error":return 2;default:return 0}};LQ=function(a){const b=[];for(const [c,d

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7574)
Category:	dropped
Size (bytes):	52177
Entropy (8bit):	5.781337457407113
Encrypted:	false
SSDEEP:	768:ee9KyVGFzML1w1xmY0oGCqaviCIpItR4fjM8M5AMlVz+fnBnQcXSqIpTut5An47s:0aGFWYXHX+MavNtXGutrAOiBYyXHlpx
MD5:	8F1C21026A9E88936F7211A1B26242CB
SHA1:	221CAE4DCA6A8C940673AF510BD63EFA67CBB772
SHA-256:	4354885C645017A8D17B583A1E90F9D0A71BBC2772E33DA95C35EC84DC1B8A78
SHA-512:	C8E3660BAC4ABBC75DD22BF47038097539BC1033D6AA18BF1FF5FC4E209276DC0A2F9BD4F6E4E43A64071D225D4E3F5B4167511147B2912599EB4A4FE39BB656
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9888],{../***/ 273752:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(977452);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var lF=__c.lF;var zF=__c.zF;var Ub=__c.Ub;var Ra=__c.Ra;var ja=__c.ja;var S=__c.S;var E=__c.E;var hh=__c.hh;var ih=__c.ih;var n=__c.n;var J=__c.J;var I=__c.I;var zVa,AVa,BVa,CVa,DVa,HVa,IVa,sS,LVa,MVa,NVa,PVa,OVa,RVa,UVa,GS,IS,MS,YVa,ZVa,OS,$Va,aWa,bWa,wVa,xVa,yVa,WS,dWa,XS,YS,$S,wS,aT,bT;__c.oS=function(a){a.Y.track(wVa,{location:"login_reset",source:a.source})};__c.pS=function(a,{method:b,Ua:c,flow:d}){a.Y.track(xVa,{source:a.source,Qaa:b,Ua:c,flow:d})};.__c.qS=function(a,b,c,d){__c.$e(a,0===b?"email":"phone",c,yVa[d])};.zVa=function(a,b,c){const d=[];let e=0;for(let g=0;g<a.length;g++){const h=a[g],l=h.options.length;va

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Suserng: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	316952
Entropy (8bit):	7.999334180097668
Encrypted:	true
SSDEEP:	6144:Xp8jdvGk2RxKnWau3TvDxIzTy6UJxEnUvgeukXmFq8Ed:4vGTS+QyBxEnVm8U
MD5:	2795F745B3C77D8B0F6C5CC46AE87655
SHA1:	AF799A6FA688F584051F5189A2626E3A63AB1466
SHA-256:	73B1E47CBE4764B3482E2795B8627B24EC8DB35F091F15D0583EAD0B57D2C7E1
SHA-512:	124C28B360ACDC1287AE0D59A527F1A19EA1597F7C3925D29A0874C90FFA7AD517CD20FC4E44A209EFABD0AC3B2C6D86EB681C9A4CDB049E742267B1C887862D
Malicious:	false
URL:	https://static.canva.com/web/images/42153edee14c6bb2affb2bdb5c065004.jpg
Preview:	RIFF....WEBPVP8 .....N.....8.>I .D..#....0....KL.M./..+._.<.k.qJ......6e?...._.z....^P..?.:.\|&.\|......7z.4.-.._.y..X.1._..o.}i....q...Gh..............g...+............o...?S>........?u.....7./.........S.../...?.\|....G.....?....?..................\|..%./.O.o.....?............._....S.e..././..F?.?............G.........\|&.........W.7.g.....?.?......../...O..._...:;.o....././..G...o......................._............H................+..._......7...o........I.[.....?.~......O...>C.5.E.g.O.O....v>......?...>h...o.......{../...?....1...5._.?......o......w.........o..........7.?..........O..._............O.+..._................+..........q...........G.........?._.....?...'..._w.............?...?..............Y.3...o&..q3.....d......_.M8.W\.f.v..._....hZe.^.?G.tj..o....Cu...D./:Z..m........S.%........;.9P..#..;w....k..}..z.:.k<..2.....G}..>..x..av...Vt..o.."i.;+.M?..-_.{._y}...RPQ.cu.f....V.YS.......5.)Jl...,j.._p..).....\|..x\0...6O.l..{.Q..0/J...X).......B..o5.L.....v....

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	86447
Entropy (8bit):	7.954632366681183
Encrypted:	false
SSDEEP:	1536:gwWRXWXE5fmtg5Jbz1gB3uuDQzJRKyjhtE6JkmlxFD9oFNZgotfXEtMEB/ZtE:gw4WkftJ1Q+uDBytEGksjD+HgMPuD/Zq
MD5:	FAA6CDB69C74C23EF804B6462A9F767F
SHA1:	243A6D87D7BC397A00F8AD3470085DECC55CFCEC
SHA-256:	CE438E6645957D9ADEA645B91729FCE37729656F75B5C6C466759979A4553F49
SHA-512:	D27E8797ED063E629897E00BBC12F62B9A341792ED965C19BC61D17A46DF34893BE1CD5C8ABF2F761B607A663FC0DF94A94E00E16517739EF16EAC7F77B09094
Malicious:	false
URL:	https://static.canva.com/web/images/543d7829999d351b301ced5ed3c1f087.jpg
Preview:	......JFIF.................................."...... ."2,441,0/7>OC7:K;/0E^FKRTYYY5Bah`VgOWYU.......(..(U909UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU......8...."..........3................................................................`F..].^p]K..@.c#-.H...T9Q.o.tL.....v4.j.agYgy..........Cj.:W...}...r........,.\|..L.).....oy;;.J.~...3.'..<W@3s.:RU.Q.S.s#..\....9c 8...3......A.:....<.+.n3.w.f*1.P...].[!6..S..Z.....l.F.&b6X......R}..0H.3...7..................e8.0.E..g3,u.-o..t....:...-)..u[....\|...!..7..z.B...(.....i.:n..w]g......y.FR....'.....OU8...p.)T^..ZL\|.F.Sk.s}.....69..w..Z7L.}2.........Jb+.i.....'.D......eF0...v.H3....b..3....T!..]h3~/Xg.h..8.........c._d....Q.3.......4,.....&8..UkTs.:.;.L.0....0'.E.u...$.....-..9..s......u>Xf%C}........J.\.H.I....$b_......(...g?i.t..A........HI..3..->.SK..V..jP..(h....i.xn-..IK.<..1w..TY_O).!..p..<...c.x:.Dw~_z..K..@....._M.I`..Qs>..K=n.Q.....L..X{\.%q..Co.DU<.Ua>Y.....T...N ..=.;..k{>^.....i.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47891)
Category:	dropped
Size (bytes):	363267
Entropy (8bit):	5.547083410978261
Encrypted:	false
SSDEEP:	3072:ojeVYmjsJ22DwiztGuETvak0A0D5yptDY8/I8+gOrDmKD0C8Gp/qphFp:ojeVYmjsk2TGugCky82/x0C8Gp/+hP
MD5:	DB0F7A25610FCC8BB86970E48C471491
SHA1:	452C3E95057EFC7A1C15F3CA569530C98D4FBACC
SHA-256:	03F0B18F91A70A16C42474FF9EA16D7BF118362BF3BB9DF9EC9566855925C8A0
SHA-512:	2D093CCB71E86B93AFABCF958E309F11038847A04CA5735914FB0FF06332B96D61C4224419C117BCF6768F664FCEAF21B514188779FBCC26E717F94735F2D83A
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"285",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"label"},{"function":"__r"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_content"},{"function":"__c","vtp_value":"844585682227065"},{"function":"__cvt_12729902_717"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"product_variant"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":fa

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	354
Entropy (8bit):	5.6762578005096325
Encrypted:	false
SSDEEP:	6:YkHKKF7r48evSQNWKtI3s0ud9lbpYhF81ExPA6WrGbfm4XCE2p64phvxg7h+7uH1:YkqmXnwScWKwwlF+F81ExPA3Cmamp62S
MD5:	B4F9F0DD587C5ABE6708F44A6E11A53F
SHA1:	28EBFA68F92AE2A96354521FFAD38A3DBE647154
SHA-256:	CCC37C837397D66FD8E0FACFE001CE7FC9F87E48089D73540AD2C2DD95716D04
SHA-512:	D471D889D8EAE3E9190B39376C29400D5AB9BF3C47897B64DC278E4E58314A78F148A44BB315D51591CA5384EAE505AD411BEF7AA706FDD5678023109A809425
Malicious:	false
Preview:	{"pixelJwt": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwaXhlbCBjb25maWciLCJuYW1lIjoiQ2FudmEgSW5jLiIsImlzcyI6Im1ldGFkYXRhIGluYy4iLCJhdWQiOiIxNzIxIiwiZXhwIjoxNzY3MTE5NDAwLCJpYXQiOjE3MjExMzcxMDYsIm5iZiI6MTcxOTc3MjIwMCwiY29sbGVjdEluc2lnaHRzIjowLCJwYWNrYWdlIjoiRlVMTF9GVU5DVElPTkFMSVRZIiwiaXNfcGxnIjoiMCJ9.wMldEMSftyWmTu8VELd7xI0gDpqzWR64-SlbjetKBO8"}.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47891)
Category:	downloaded
Size (bytes):	363267
Entropy (8bit):	5.547083410978261
Encrypted:	false
SSDEEP:	3072:ojeVYmjsJ22DwiztGuETvak0A0D5yptDY8/I8+gOrDmKD0C8Gp/qphFp:ojeVYmjsk2TGugCky82/x0C8Gp/+hP
MD5:	DB0F7A25610FCC8BB86970E48C471491
SHA1:	452C3E95057EFC7A1C15F3CA569530C98D4FBACC
SHA-256:	03F0B18F91A70A16C42474FF9EA16D7BF118362BF3BB9DF9EC9566855925C8A0
SHA-512:	2D093CCB71E86B93AFABCF958E309F11038847A04CA5735914FB0FF06332B96D61C4224419C117BCF6768F664FCEAF21B514188779FBCC26E717F94735F2D83A
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-TZPTKRR&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"285",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"label"},{"function":"__r"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_content"},{"function":"__c","vtp_value":"844585682227065"},{"function":"__cvt_12729902_717"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"product_variant"},{"function":"__v","convert_case_to":1,"vtp_dataLayerVersion":2,"vtp_setDefaultValue":fa

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, truncated
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.169382490786664
Encrypted:	false
SSDEEP:	3:Ftt4ipq4Wln:XtrxWl
MD5:	8C843FFB840DECAC646424269B22D78B
SHA1:	823D50FAA2E9D2D75CAEC02C2595C953F165F956
SHA-256:	CF5E566DC08016A63E1667A2726699C3ADE378330F8E073CC4632D0D19B9F51E
SHA-512:	C0C1F5624728CDBC57F55C77F6D59C53584F74731A25B8C2EC7C8CCE72725C7AB7A1E1266A8940F19E6C018D3E4A6FA36602987E7EC3680CFFE501A44289070C
Malicious:	false
Preview:	...........................

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1477)
Category:	downloaded
Size (bytes):	4595
Entropy (8bit):	5.550954478636129
Encrypted:	false
SSDEEP:	96:+8bqlQfIY7qlQfIS8bqlisIY7qlisIWQVYIHGbippuC+t5:+8bqefIY7qefIS8bq0sIY7q0sIWhIHGx
MD5:	7CFAD8470A9430772EBCE74E621E7267
SHA1:	4E0C30D94868633B6BD5F0EAE9FEFBEF4F3EF3EE
SHA-256:	7AFAA5E8B43B08F9B6FFAA2401F9A516101BC1E45DF6339CBCC7337819747EA1
SHA-512:	1A9A70A568EE4558FDFCAC5097D2DE5B34601423D01C88E15A0E73114F9DB5ADBFB85BC789AA525D8D9147B0B0C2EC8D3DD8AC77694AA070122AD0EB021B566D
Malicious:	false
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765789&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=custom.user.engagement&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&ep.custom_data_newSession=yes&epn.custom_data_page=1&ep.custom_product_variant=web-2&ep.custom_country_code=US&ep.custom_app_name=web&_et=1&tfd=10137&richsstsse
Preview:	event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"options":{"attribution_reporting":true}}..event: message.data: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2312)
Category:	downloaded
Size (bytes):	10727
Entropy (8bit):	5.65212869906664
Encrypted:	false
SSDEEP:	192:IwJETod3LjdOKORcavtQt0+3MVamn+8iX05kJb2K+vY922xCmN8zFS7xPKFBrBPf:IwJETotdOKOhQ2QAaSBik50KKDU20mN+
MD5:	DF76A9D6070D0E7A2DE0F3838D753097
SHA1:	6C401B2395B3B19DE24FF0780FA834CFC6625D1B
SHA-256:	4C487DB43EE1B83504179DD3039D5D449531036C839023101C5EB0F193515602
SHA-512:	6D64B737A681D65B3F9CF99AF3ACF61FE273AAF75F5CC6FAD4AFD98B979C97508760245DC207ECBC178280601900E5797E706A4D699E59CE17BFE9006714DDC4
Malicious:	false
URL:	https://static.canva.com/web/7db610c71177e514.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1505],{../***/ 977452:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var J=__c.J;var Kg=__c.Kg;var lF;var kF,pGa,qGa,rGa,vGa,uGa,wF,xF;kF=function(a){switch(a.kind){case 1:return a.Va;case 0:return a.email;default:throw new __c.n(a);}};pGa=function(a){const b=new __c.qA;__c.Ii(b,"button",(c,d,e)=>lF(__c.tz,{onClick:a,children:d},e));return c=>b.render(c)};qGa=function({label:a,description:b,error:c,control:d}){return mF(__c.Ng,{spacing:"1u",children:[a,d,b,c]})};.rGa=function({label:a,description:b,disabled:c,selected:d,Sm:e}){a="string"===typeof a?lF(Kg,{tagName:"span",margins:"none",alignment:"center",tone:c?"tertiary":"primary",weight:d?"bold":"regular",children:a}):lF(nF,{children:a});ret

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23
Entropy (8bit):	3.708132064658602
Encrypted:	false
SSDEEP:	3:YMEsRUn:YMpm
MD5:	257FB2D2DC5872218862D50EE3783912
SHA1:	D0C14E8D141E225C47C38F9CBDD4A56C6E0D65D7
SHA-256:	60CD985B4E450B133B5EE634EEC66621DABA812296CA8C025632B7BC549C1F11
SHA-512:	4CB829C19F55F1B87145F57B7095E9F37087A3074571B4862D86C805488EEF79BC076457A6C728CED61014B922A417A6705FB1237BD374706BAE55F30B5F39E4
Malicious:	false
Preview:	{"ip":"173.254.250.78"}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65455)
Category:	downloaded
Size (bytes):	441956
Entropy (8bit):	5.343859094337128
Encrypted:	false
SSDEEP:	6144:3DfgGOmWntnM+xQ+Mqutrq5ezD6VPKbgSkXrCJ4fdA2K+YubF:TfAA+dE+Lm4fdA2K+YubF
MD5:	B41D184BBCBCB05887E6AB0027FA496F
SHA1:	702E3A7AA89C03A626FD1151866B3DE8F35ECC0C
SHA-256:	D914A0EAB16D5138F0C5F8CE844699AC3D470D512C61F968246AF0AC6AA297DF
SHA-512:	F8ABF94F59162630E0A280B242CE1EFA2591EB0792CA92DE60C083EB68AEECC8D607129D64CB8B659D679942CC09DE6D8EDEAABACD687A7E155C4BC077E4084A
Malicious:	false
URL:	https://static.canva.com/web/26a8c4e333fb3663.vendor.js
Preview:	/! For license information please see 26a8c4e333fb3663.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[87858],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serializer:l;return(t&&t.strategy?t.strategy:s)(e,{cache:n,serializer:r})}function o(e,t,n,r){var o,i=null==(o=r)\|\|"number"==typeof o\|\|"boolean"==typeof o?r:n(r),a=t.get(i);return void 0===a&&(a=e.call(this,r),t.set(i,a)),a}function i(e,t,n){var r=Array.prototype.slice.call(arguments,3),o=n(r),i=t.get(o);return void 0===i&&(i=e.apply(this,r),t.set(o,i)),i}function a(e,t,n,r,o){return n.bind(t,e,r,o)}function s(e,t){return a(e,this,1===e.length?o:i,t.cache.create(),t.serializer)}n.d(t,{A:()=>d,H:()=>r});var l=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}u.prototype.get=function(e){return this.cache[e]},u.prototype.set=function(e,t){this.cache[e]=t};var c={create:function(){return new u}},d={variadi

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6785
Entropy (8bit):	4.764532758184024
Encrypted:	false
SSDEEP:	192:4rPKbcyONPj2Ix4JA63seKKpJ4zde/rsVJgqecW2RYz2nS6ef/kqy:4rPSchJ2Y4JhserpGZEVqecW2RRS6e0b
MD5:	9C747CF07B2623FE6F77E47F5A134103
SHA1:	7180E5B53413163E10A6CA1E94518AC2CEB7970A
SHA-256:	476CDA2BDE7910A58186B7B58D2BE6D22D3CFACDFEDA3354134B84E43D76AC98
SHA-512:	4C1894FD984FC35FBC725737F68B69982B4E53864EB8BF1B8A5826D4D62C682AD4D50C08BA4EAEE3FBE04D3B91EA22A79559AA77BE6BCF3B81025348C8CEB35A
Malicious:	false
URL:	https://cdn.metadata.io/site-insights.js
Preview:	(function () {. /*. @type {string} Key for the visitor ID cookie.. /. const visitorIdKey = "Metadata_visitor_id";.. /. @type {string} Key for the session ID cookie.. /. const sessionIdKey = "Metadata_session_id";.. /. @type {string} IP address of the client.. /. let ip;.. /. Account configuration object.. /. const config = {. invalid: true. };.. /. Options object.. /. const opts = {. /. @type {string} Base URL for the CDN.. /. cdnBaseUrl: "https://cdn.metadata.io/pixel/config",.. /. @type {string} Base URL for the API.. /. baseUrl: "https://api-gw.metadata.io",.. /. @type {string} Account ID.. /. accountId: null. };.. /. Get the value of a cookie.. * @param {string} key - The key of the cookie.. * @returns {string\|null} The value of the cookie, or null if not found.. */. const getCookieValue = (key) => {. const cookie = document.cookie.split("; ").find(fu

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (55289)
Category:	dropped
Size (bytes):	55418
Entropy (8bit):	5.2011745666689
Encrypted:	false
SSDEEP:	768:7Snb/BBuuGki0usgH8bdwB005NLqrbcSb4sA7CctFzBmBv4L7HelSWVoz8WlqdLZ:70q8berM2bW6X49yWx1ZSDh/33s
MD5:	16E5D529039D25735AE0BA1D610125E8
SHA1:	D7CAA746424A018583EC1E097F74A484C4FB1811
SHA-256:	C6DE703F8EE214808496DCD92795AC8971782935ED75ABDD5624C814E69DAAEA
SHA-512:	56AC6CDABC05070E1440C8CA4A60119B3555B2743BA8652A2A0282701ECC8E150AC343020D620D3F5CD6406F04966CDE54FD797530149AD0B2711E44F89165D0
Malicious:	false
Preview:	/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /.var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0;default:return h(t,Error)}}function r(t,e){return n.call(t)===`[object ${e}]`}function i(t){return r(t,"ErrorEvent")}function s(t){return r(t,"DOMError")}function o(t){return r(t,"String")}function c(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function u(t){return r(t,"Object")}function a(t){return"undefined"!=typeof Event&&h(t,Event)}function f(t){return Boolean(t&&t.then&&"function"==typeof t.then)}function h(t,n){try{return t instanceof n}catch(t){return!1}}function l(t){return t&&t.Math==Math?t:void 0}const d="object"==typeof globalThis&&l(globalThis)\|\|"object"==typeof window&&l(window)\|\|"object"==typeof self&&l(self)\|\|"object"==typeof global&&l(global)\|\|function(){return this}()\|\|{};function p(t,n,e){const r

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	363
Entropy (8bit):	4.55972645456488
Encrypted:	false
SSDEEP:	6:2LGa3ymyCE//MzGCFiM1wBJPwcQK5DrIt6xfeGYqX3OLGhw47Jsr4z+LibIEBE7g:2f3ymyCEIiMRhykgIaOEsrq1EiE7Dmyu
MD5:	A1AB0546CD0209ECAF9D81C1EC431E9B
SHA1:	A35F658C7DF8BE35A1BABAF39998CFB23419E994
SHA-256:	4922A8859B315C354C23AD278E35483C6CF29AEBF1C509C2C928C1F41634FE43
SHA-512:	9EE64BAEBD84174ED337F668C90E3679B37FF57857AF64C2B07D9D8FC1A722BF0C097F9C4B6B902F6F2BE66443E37D7EBE9ED24F03006124C3321B68C8E0CAB5
Malicious:	false
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39974)
Category:	dropped
Size (bytes):	40118
Entropy (8bit):	5.3437205014790115
Encrypted:	false
SSDEEP:	768:LEjr2bpoPIZg3TnupPggtHI55pmD/FxlbvPJPr+36ScYvsy03:Qr2bpoPIZg3TnupPgevHJPCKS1kV3
MD5:	309DA0150010C8298C2F4C4E4A2A070D
SHA1:	2C8384149EE31A41F492C91935B5805EFCFDAEF5
SHA-256:	39C88DB0E8E53B597AE3CB1F2883CCC08513E0A3A23B2E0E19B15B001F3B24C2
SHA-512:	49ECB2E5FAB147CF664386AEBCE140130A7F350A4550F2E9716EC685082CC47E16AEB640F8A9C5E74952A30267C3DB9F6BBC50598254EB79B2A4E185FFDB7948
Malicious:	false
Preview:	/! For license information please see 4bb9c51951d1d716.vendor.js.LICENSE.txt /.(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{172931:(e,t,n)=>{"use strict";n.d(t,{PP:()=>_,lX:()=>y,q_:()=>R});var r=n(110519),o=n(473124),a=n(83780),i=n(196750);function u(e){return"/"===e.charAt(0)?e:"/"+e}function s(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function l(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,o=t\|\|"/";return n&&"?"!==n&&(o+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(o+="#"===r.charAt(0)?r:"#"+r),o}function d(e,t,n,a){var i;"string"==typeof e?(i=function(e){var t=e\|\|"/",n="",r="",o=t.indexOf("#");-1!==o&&(r=t.substr(o),t=t.substr(0,o));var a=t.indexOf("?");return-1!==a&&(n=t.substr(a),t=t.substr(0,a)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),i.state=t):(void 0===(i=(0,r.Z)

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	115121
Entropy (8bit):	5.371362815606401
Encrypted:	false
SSDEEP:	3072:tX/OXPeGcbWUc/0aHscJYoJyhVVh5XGsj56pY5TS2z5frSiqdE:tX/sPbcbWUXaHscGoIhVVHXGqSK5frf/
MD5:	CB1826AF86C8190CEB1FF4F70E255C6D
SHA1:	83057F32ACAA0D277001D22AEAEC60D141281C3E
SHA-256:	34E60C5656534222F02FC99959F0B48D191CE8A6CF8CC78DCFDA19A794FAED9F
SHA-512:	BA5F119FD4C74B74E310A3EB6451B117F564634208B9D20259D554A3D8749E17ACC39D3DBD2B82DEC7426ADFE4ED61EA24919B9ECEB6EF06BF837491A180D9DB
Malicious:	false
URL:	https://static.canva.com/web/f0398d1166314304.vendor.js
Preview:	"use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{899171:(t,e,i)=>{i.d(e,{Z:()=>s});const s={Tn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.length);for(let n=0;n<i.length;++n)s[n]=i.charCodeAt(n);return s}}},576196:(t,e,i)=>{i.d(e,{G:()=>s});const s={CustomEvent:"ce",Pr:"p",_u:"pc",vc:"ca",Ea:"i",qs:"ie",M:"cci",R:"ccic",I:"ccc",F:"ccd",ql:"ss",xl:"se",Oi:"si",Ei:"sc",Gi:"sbc",Cc:"sfe",mo:"iec",Uu:"lr",zu:"uae",O:"ci",$:"cc",Ju:"lcaa",Eu:"lcar",On:"inc",Ln:"add",Rn:"rem",$n:"set",Bn:"ncam",Ku:"sgu",Fr:"ffi"}},876055:(t,e,i)=>{i.d(e,{Z:()=>s});const s={W:function(){const t=(t=!1)=>{const e=(Math.random().toString(16)+"000000000").substr(2,8);return t?"-"+e.substr(0,4)+"-"+e.substr(4,4):e};return t()+t(!0)+t(!0)+t()}}},19601:(t,e,i)=>{i.d(e,{Z:()=>s});class s{constructor(t,e){this.database=t,this.vd=e,this.parent="undefined"==typeof window?self:window,this.database=t,this.vd=

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2312)
Category:	dropped
Size (bytes):	10727
Entropy (8bit):	5.65212869906664
Encrypted:	false
SSDEEP:	192:IwJETod3LjdOKORcavtQt0+3MVamn+8iX05kJb2K+vY922xCmN8zFS7xPKFBrBPf:IwJETotdOKOhQ2QAaSBik50KKDU20mN+
MD5:	DF76A9D6070D0E7A2DE0F3838D753097
SHA1:	6C401B2395B3B19DE24FF0780FA834CFC6625D1B
SHA-256:	4C487DB43EE1B83504179DD3039D5D449531036C839023101C5EB0F193515602
SHA-512:	6D64B737A681D65B3F9CF99AF3ACF61FE273AAF75F5CC6FAD4AFD98B979C97508760245DC207ECBC178280601900E5797E706A4D699E59CE17BFE9006714DDC4
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1505],{../***/ 977452:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(9164);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var J=__c.J;var Kg=__c.Kg;var lF;var kF,pGa,qGa,rGa,vGa,uGa,wF,xF;kF=function(a){switch(a.kind){case 1:return a.Va;case 0:return a.email;default:throw new __c.n(a);}};pGa=function(a){const b=new __c.qA;__c.Ii(b,"button",(c,d,e)=>lF(__c.tz,{onClick:a,children:d},e));return c=>b.render(c)};qGa=function({label:a,description:b,error:c,control:d}){return mF(__c.Ng,{spacing:"1u",children:[a,d,b,c]})};.rGa=function({label:a,description:b,disabled:c,selected:d,Sm:e}){a="string"===typeof a?lF(Kg,{tagName:"span",margins:"none",alignment:"center",tone:c?"tertiary":"primary",weight:d?"bold":"regular",children:a}):lF(nF,{children:a});ret

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (362)
Category:	dropped
Size (bytes):	421
Entropy (8bit):	4.952490968142085
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4aYRL4noV4KBqcx4ZeNiV4h:yrdmcXd6NOH4t4noV4H44ZeNiV4h
MD5:	9FACC5C348CF06E3F14BE6FBF3671FCE
SHA1:	11EED3329D9F6E77A2CE73EB521CD0B423E5F85A
SHA-256:	8C4E2A09140622CEC93BFF6E8A7EAC08048291DC35C73A8960F034BB6149BF65
SHA-512:	250CFB8B23FCA4797580A835ECB604BBD7B299D5F3C700C7A0D79229AC9F82442BAB4BF3120F18AF6E1DF0DB0F7AD97F7A7A8553501D68A49F35CC24B57F0CB2
Malicious:	false
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1505":{"js":["ef72ef9d495f3a56.strings.js"],"css":[]},"2348":{"js":["0c91ba9d7b8ccc72.strings.js"],"css":[]},"6631":{"js":["778ac51ce098c575.strings.js"],"css":[]},"9888":{"js":["6f9b607367582042.strings.js"],"css":[]}});

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	436648
Entropy (8bit):	7.990975410199206
Encrypted:	true
SSDEEP:	6144:EfY/akqkb7KyG4eheAYnI3Nh3I8NLUgkaMQlkXctUyKbzt0FnA/praXj7r01DkiC:EA/aWeRcI73wQM+eZ/xraXr6ty
MD5:	1ABFDC7E40505A96E44613A4CC977162
SHA1:	391288B750CBCA9A69631380E4195178E5459F52
SHA-256:	EA85392C322C99AD0492C5FED4764174AC409AC07D303FC751587CF349DFD623
SHA-512:	EF45E4A54059A7A40EB73A77CC17F5C0B378FAD054A38EC8C6182E0E439F8D8C10134D0D5889A28FFA463C31B6D0E7E953AE947065EE65093273E08092486BC1
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................8....".................................................................................@...ZQ:.j...1%.R{...RHY...?.3..a........L..].%..6e.=.......1..j...`vv>.<..(..^..@...$./...1.{cw.7n....7.3..r..=SC..w..?........\|..../......w..S...<.LW2...i....+...-.../.......:.,..W..X{A.~.2.....?..')zlE....#f..{.G./2^.lS..WYY...QrX......p..-.....l.q...d.e8......q......W.\|.j.6%wby.E..?n2...v....8..tw....Y.O../K..l..~{t..u.........~..j+w..Y.#._..mkz....2..w....=~>....k8...m..h...E......7^..Q....1.v...]YfV^.............w2..0...+..vDd.Hb.?m.!af.;.!. ..)........zzl.<T.ShesP..C5V..JEi....@ ..N]bu........0>3.a.5.TO{.2-.=...H.g5R....c..3n.OY.ln./'L.=.... ...a..5l.0-.La.....`>0.w...s. . ..?Ny.b....:.n_\|=I.g....&...8.$.mrN@....=.S.iccLx...z....-"..*..~i\|...n:...R..........3D...h..-&0..........xRTVVM

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.708132064658602
Encrypted:	false
SSDEEP:	3:YMEsRUn:YMpm
MD5:	257FB2D2DC5872218862D50EE3783912
SHA1:	D0C14E8D141E225C47C38F9CBDD4A56C6E0D65D7
SHA-256:	60CD985B4E450B133B5EE634EEC66621DABA812296CA8C025632B7BC549C1F11
SHA-512:	4CB829C19F55F1B87145F57B7095E9F37087A3074571B4862D86C805488EEF79BC076457A6C728CED61014B922A417A6705FB1237BD374706BAE55F30B5F39E4
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"173.254.250.78"}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (587)
Category:	downloaded
Size (bytes):	748039
Entropy (8bit):	5.7333631422315
Encrypted:	false
SSDEEP:	12288:jRc2IqLH9YmlY3isivYdWP9rire8ud9bMkRhbqaPnsCIJHbxJk06moUhnxS48THS:Fc2TLH9YmlY3isivYdWP9rire8ud9bM9
MD5:	E32CDBD7195F96F95945C527FC3F691A
SHA1:	31F673BAAD1019D23F90EC1BADC4929A9243FE7A
SHA-256:	1DAEA02D5C36CB451AF34AD71A65209AD6E36695057332EAB859DE693F42A814
SHA-512:	A49ADA8E22063D67F17CA741BBEB653285D2E6B2F208CF10FB5B5CC0F4E05DA34E6E6DA627BE14E941653C56390FC11AD69EB4CAFF682218338DCF5B14FB2589
Malicious:	false
URL:	https://static.canva.com/web/306ff5855d28408f.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389,3817],{../**/ 813110:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var vD;var Pr;var jf;var Qz;var Th;var Yg;var dz;var tz;var Zy;var Uy;var bb;var Ky;var ny;var Uw;var ew;var dw;var Fu;var ur;var bu;var au;var ha;var ef;var cs;var Br;var Dr;var qr;var wr;var tr;var vr;var t;var rr;var U;var r;var ob;var v;var P;var R;var sr;var S;var p;var sc;var Ub;var W;var C;var y;var V;var E;var F;var jq;var vp;var no;var Um;var oj;var pm;var nm;var lm;var hm;var fm;var Sl;var Rl;var Yk;var Qk;var Ok;var Nk;var Kk;var Bk;var zk;var Wg;var Rb;var ub;var We;var Nj;var Ih;var pf;.var Te;var cj;var Vi;var Kf;var Ve;var vi;var Jh;var mh;var bh;var Ng;var Kg

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222)
Category:	downloaded
Size (bytes):	1515
Entropy (8bit):	5.541554555020035
Encrypted:	false
SSDEEP:	24:kjhskjmxqwsHAoW0gFkOZFtMi+NIOk+500y5Nz6EP6zeyUMuM7Ew8mMj5Ma8fE+6:AOAL0nkOXP+NFY5NuEP6XxEw++E+3GBt
MD5:	46A95C34B63209EC7A7A407521D6CAF4
SHA1:	7E0FC3B684CE935B338A045EEC2244BF9248DB33
SHA-256:	1C496D1E8DE09B24328B0A6904225BB8EF82164850A02F227F1545E91F5D64FE
SHA-512:	D63C70A5450A873ECCA9077FB033EE066313DE1A8C69D0FFEC0ABFCAED26AADE0548EEB62BEE496372284523EC5147D7BC0F788509115327A608A56C2109F68A
Malicious:	false
URL:	https://static.canva.com/web/64de167a16d42d85.js
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1032],{../***/ 9164:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var p=__c.p;var F=__c.F;var S=__c.S;var E=__c.E;__c.UD=E(()=>({}));__c.eE=E(()=>({url:S(1),Rt:__c.qr(2)}));var fGa=F(()=>[1,2,3]);__c.gF=E(()=>({status:__c.y(1,fGa)}));__c.hF=E(()=>({name:S(1),properties:(0,__c.Br)(2)}));var gGa=F(()=>[1,2,3]);var hGa=F(()=>[1,2]);__c.YD=E(()=>({KV:__c.y(1,hGa),ls:S(2),CE:__c.qr(3),vg:__c.qr(4),requestId:S(5),i$:S(6),Pna:__c.bb(7,gGa)}));var iGa=F(()=>[1,2]);var jGa=F(()=>[1,2]);__c.iF=E(()=>({type:p("A?",1,"SUCCESS")}));var kGa=E(()=>({type:p("A?",2,"ERROR")}));__c.ICa=__c.ob(()=>({type:[1,__c.iF,2,kGa]}),()=>({}));__c.aE=E(()=>({}));var lGa=E(()=>({type:p("A?",1,"SUCCESS")}));var mGa=E(()=>({type:p("A?",2,"ER

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	234260
Entropy (8bit):	5.456621895233652
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713FN:zfLeYc+PJxH8N7QQGArHu58K713z
MD5:	C04BB3EDB0F1A33B985B3285055FE1FA
SHA1:	0AE234EBC67E016B8A3B5603885A67160493227C
SHA-256:	668C6828672FA8600B7A0632CB328EE63A31361BE6734987B04985FCD9D08D4F
SHA-512:	8E154181A67EF7706AB11421D2A91270F9620895CA54EDA89E73E60533FB2F72CF7E3323F4F56EB08C177F69E4CFC36117E011B3DD2479B07267C7E1F74C8B5D
Malicious:	false
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (362)
Category:	downloaded
Size (bytes):	421
Entropy (8bit):	4.952490968142085
Encrypted:	false
SSDEEP:	12:m1l1fX1sHcXd+1NOH4aYRL4noV4KBqcx4ZeNiV4h:yrdmcXd6NOH4t4noV4H44ZeNiV4h
MD5:	9FACC5C348CF06E3F14BE6FBF3671FCE
SHA1:	11EED3329D9F6E77A2CE73EB521CD0B423E5F85A
SHA-256:	8C4E2A09140622CEC93BFF6E8A7EAC08048291DC35C73A8960F034BB6149BF65
SHA-512:	250CFB8B23FCA4797580A835ECB604BBD7B299D5F3C700C7A0D79229AC9F82442BAB4BF3120F18AF6E1DF0DB0F7AD97F7A7A8553501D68A49F35CC24B57F0CB2
Malicious:	false
URL:	https://static.canva.com/web/d423b058a335b47b.en.js
Preview:	window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};.window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1505":{"js":["ef72ef9d495f3a56.strings.js"],"css":[]},"2348":{"js":["0c91ba9d7b8ccc72.strings.js"],"css":[]},"6631":{"js":["778ac51ce098c575.strings.js"],"css":[]},"9888":{"js":["6f9b607367582042.strings.js"],"css":[]}});

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1290)
Category:	dropped
Size (bytes):	5937
Entropy (8bit):	5.507493024208316
Encrypted:	false
SSDEEP:	96:EZrJZjDUG+f5vyhtQN8NO4rytEe9eXTAGlZL7iOKfxi0pR3cB34nJDUGnu/HTxAs:EZrJZjDUn5vyhtqgCv6TAGlRrKZiERMD
MD5:	F4D914AEFEBB2D814FF3BE48EC26B488
SHA1:	D92BF64DA655F871F91F378E690BCCCDC300DB92
SHA-256:	7763BE74FE7FDEE0E6819BCCBDD3A2CC67A7CE88ADA4250635D0E8FBA2114283
SHA-512:	F46AC2C195590E53C4B75FAE1CE75C1385D96128E1F848BF9DAB39B877A0C02B59CD0FEDC277038D44114E62693FABA4679971CA9CA8FC2D56BEA6CC4FA42E32
Malicious:	false
Preview:	(self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9134],{../***/ 523808:.function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_req__(277425);self._fe4d99ebe0d2d259646a80d250150d47 = self._fe4d99ebe0d2d259646a80d250150d47 \|\| {};(function(__c) {var Vob=function({data:a,url:b}){try{const c=JSON.stringify(a,void 0,2);return{extra:new Map([["spans",c.slice(0,15500)],["url",b]]),tags:new Map([["telemetry.export.beacon.over_64_kB",String(64E3<c.length)]])}}catch(c){return{tags:new Map([["telemetry.error.serialisation_error","true"]])}}},Xob=function(a,b){Wob(a,b,()=>{const c=a.EG.get(b.context.spanId)\|\|[];for(const d of c)Xob(a,d)})},Wob=function(a,b,c){var d,e=null!==(d=b.attrs.get("parent_relative_start_ms"))&&void 0!==d?d:b.duration;e="number"===.typeof e?` - ${Math.round(e)}ms`:"";var f=(d=null!=b.parentSpanId)?`${"event"===b.Nk?"[ChildEvent]":"[ChildSpan]"}: `:"[

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=34402982&ns_type=hidden&ns_event=page_view&c6=canva-aad9e5ad-3a29-42d3-a4e3-b2a423a0bfe7&c7=&c9=&c8=&gtmcb=726119946
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4414
Entropy (8bit):	5.9195472440471955
Encrypted:	false
SSDEEP:	96:v6LQztmnE2hqFJmd7l0TlPInbSqVpWV9gr9Fb3+:bs4oCTlGbSqVpWXw9p
MD5:	A0C86DA7FC37EA50E848C4733761D53E
SHA1:	7B53A4FE8198AA654C02282134DCC19E0C07CC9A
SHA-256:	EC2FBAD47E598FE06C7A2B825224B3B1B8D8221F3002E6370E627D459FF0634A
SHA-512:	6FD3BB6D1392F89DCF63A37A9086517620A63C6D933885ACDB61F99BB8AF137D2DD184C59EF92C173E214711DCEAE9585A5B574AFB422A4A0969D99C86264339
Malicious:	false
Preview:	...... .... .(.......(... ...@..... ......................................................@...........#h..!g\."h..!i..#k..$l..$n..$o..%q..%r..'s[.#t..........@...................................................UU..........,]).+_..)b..j..)l..'l..%l..$k..#m..$q..&u..(y..(z..&t..&u..%v)..........U......................................@@..........3Y..1[..4b..1]..0\..0^../`..,c..+f..)i..&l..%o..%q..&s..&t..)\|..'v..(v..........@...............................33......8X .7V..;]..7V..8W..7W..7X..8Z..=_..?b..?e..<g..5g..-i..m..(q..&s..&t..'u.....(x..(x .....3f......................@@......CN..?R..@W..=R..=R..>S..?S..GZ..<S...?...5...6...@..!T..?f..;i..0j..-o..)s..'u..'w..}..(y..'z......@...............UU......PP .HL..IO..EN..DO..CN..GQ..GQ...!..HR................ly...B...O..Dh..7g..3l...q..)v..(w..)\|..)z..(x ......U..................SG..UK..PG..NI..LI..NN..FF..76..................................\|....>..He..=e..8i..3o..-t..*w..+...){..............@......\A..cG..ZB..XC..VD..VG..QC..OA...

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17588)
Category:	downloaded
Size (bytes):	17949
Entropy (8bit):	5.103167262109176
Encrypted:	false
SSDEEP:	384:zraQ39NdRAxEkv0GLQXkdP/TNmtozdTdCGeC4v9J+0y:zvdrkwcY4pdZ4G
MD5:	E24EBA32CA9D242C9AFAD9F41D1A40D2
SHA1:	CD2DBF2A518AAF120A3F87FF0380A1E5842A4C93
SHA-256:	7359120AECBE3003165F0472C30A5CF759BC5CA63B97E068DE29ABD81F0E2EFA
SHA-512:	EA5FBD0CD483862CA4AE47E697A87C8BD2FD4406AFADB6B095ED1B50673C75F380A3857EC863014D680F9A459D27A88E8E0532C34B8E1DF7D2480C6DB9774FE7
Malicious:	false
URL:	https://static.canva.com/web/6f9b607367582042.strings.js
Preview:	(function() {. const messages = JSON.parse("{\"3PbJIQ\":\"Padua\",\"WUx1ZA\":\"Ulsan\",\"PX6vXw\":\"Vercelli\",\"Q1JLUQ\":\"Botswana\",\"V6tcoQ\":\"Kanagawa\",\"RvRivQ\":\"China\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"OosLqQ\":\"Philippines\",\"5wc8vQ\":\"Yamanashi\",\"T+aI9w\":\"Nagasaki\",\"ya38uw\":\"Northern Mariana Islands\",\"/JYvRA\":\"Set password\",\"Yq8qUA\":\"Punjab\",\"iTruLw\":\"Strong\",\"Xt9npg\":\"Wallis and Futuna\",\"bVst1g\":\"Sikkim\",\"Gm1Hxg\":\"Too weak\",\"9R9SOA\":\"French Guiana\",\"bvGzFg\":\"Siena\",\"tkkB/A\":\"Names and surnames are easily guessed.\",\"MmLBsA\":\"Tokushima\",\"WPVT7w\":\"Ragusa\",\"hU8yxA\":\"Singapore\",\"t7CNfQ\":\"Prince Edward Island\",\"kbGqHA\":\"Ecuador\",\"oCiIOA\":\"Colima\",\"WczLsg\":\"Mozambique\",\"eKXiSQ\":\"Password\",\"BxogvQ\":\"Quebec\",\"38tyzQ\":\"Wyoming\",\"v3Hd8g\":\"Caltanissetta\",\"mB2eng\":\"Kagawa\",\"OzAuvw\":\"Louisiana\",\"Ad7pIw\":\"Marshall Islands\",\"tnV+vg\":\"Avellino\",\"aD4xjg\":

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22269)
Category:	dropped
Size (bytes):	22333
Entropy (8bit):	5.394866689862906
Encrypted:	false
SSDEEP:	384:hhVUoHH879tBRVrDnN4CgOqllpkofkKdyZxV18TsUIYSUrdORpS/04nwZYEKVAUM:risKnjV94Cv0sofvdIxL8wUIYVM4sYwd
MD5:	C92F01B6DF44FDD9DB0E80496FF01291
SHA1:	CE57281EDD3CFBFC440A4B3FEE6F3B118A80CA90
SHA-256:	D40AB76CF45D0DD1B8F5E03892E0A5182E79E3518E6FCA17FD236CFA39DB6081
SHA-512:	C54D1D33466343AF092F7DF9866FF8F1F31063B9A013215452869AAF6DDFE97737190659E0D8620BF64687813263E2D4420B9F5E7580D2C9EDCDC008C25FB7C9
Malicious:	false
Preview:	(()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define cannot be used indirect")},c.amdO={},e=[],c.O=(r,t,n,f)=>{if(!t){var s=1/0;for(u=0;u<e.length;u++){for(var[t,n,f]=e[u],i=!0,a=0;a<t.length;a++)if((!1&f\|\|s>=f)&&Object.keys(c.O).every((e=>c.O[e](t[a]))))t.splice(a--,1);else if(i=!1,f<s)s=f;if(i){e.splice(u--,1);var o=n();if(void 0!==o)r=o}}return r}else{f=f\|\|0;for(var u=e.length;u>0&&e[u-1][2]>f;u--)e[u]=e[u-1];e[u]=[t,n,f]}},c.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return c.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,c.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModule)return e;if(16&n&&"function"==typeof e.then)return e}var f=Object.create(null);c.r(f);var s={};r=r\|\|[null,t({}),t([]),t(t)];for(var i=

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
URL:	https://ct.canva.com/g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=AEA&sst.tft=1730333377374&sst.sp=1&sst.em_event=1&sst.ude=0&_s=5&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=scroll&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_17303338676570&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=no&ep.custom_consent_gtm_fpc_rtid=no&epn.custom_data_newSession2=0&ep.custom_device_category=desktop&ep.custom_event_name=gtm.init&ep.custom_quantity=0&ep.custom_step=not%20set&ep.custom_user_type_by_user_id=guest&ep.event_action=no-value&epn.percent_scrolled=90&_et=4&tfd=15154&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.069173392345705
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	ReviewDoc_Commission Dept Ec.pdf
File size:	107'259 bytes
MD5:	421d8d7c5f5b9fa59629da00303b723e
SHA1:	f741ff4158157cc11fc45cfd4fbe7a59b300496b
SHA256:	8fe117a3ac2644e34374454e9d0bf905098bd75735214119d9b1a51db54433c2
SHA512:	5781a5a3b2a361768cf73a64007eaa0bef45b509c4e3d1e56db369bd109a354f78896a9201e28181e0a828d1a64767e95b2d2d1349161903f2172397600b4356
SSDEEP:	1536:m1lC0Qc0uuUV1cCM0sqPRVdqEnq39mCBAKFOyFxau:Y40L0KHM0sqPRVdVnqNlqKhFxau
TLSH:	8CA32A94A988DBF9E886DAB5F4B7562E1B0DF27404DB24F6404F4A3E203A5E3351B173
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Title (Document Notification)./Creator (Chromium)./Producer (Skia/PDF m126)./CreationDate (D:20240919002616+00'00')./ModDate (D:20240919002616+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.4 0 obj.<</Type /XObject./Subtyp

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.069173
Total Bytes:	107259
Stream Entropy:	6.998305
Stream Bytes:	96472
Entropy outside Streams:	5.083817
Bytes outside Streams:	10787
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	66
endobj	66
stream	9
endstream	9
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
4	a280a2a2a2a280a2	c238835e1f5343a494fb0a2b1b6bc00f
11	0000000000000000	4bdf5d5167ded2abe6e8f225066bf6a8

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 01:09:31.436234951 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:31.436270952 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:31.436372995 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:31.469727039 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:31.469770908 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.086533070 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.086890936 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.086920977 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.088839054 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.088905096 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.091095924 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.091207027 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.091509104 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.091530085 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.140731096 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.222903013 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:32.315179110 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.315386057 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.315444946 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.315476894 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.315617085 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.315671921 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.318403959 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.318423033 CET	443	49698	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.318434000 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.318471909 CET	49698	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.321414948 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.321443081 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.321505070 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.321747065 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.321758986 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.536819935 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:32.943342924 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.943897009 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.943909883 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.945163012 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.945758104 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.945889950 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:32.945926905 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:32.994818926 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.139555931 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:33.301214933 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301446915 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301551104 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301650047 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301687956 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.301714897 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301754951 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.301810980 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301901102 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.301996946 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.302036047 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.302042007 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.302457094 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.302460909 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.302762985 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.327573061 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.327634096 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.330508947 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.330598116 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.330617905 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.419558048 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.419774055 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.419864893 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.419955969 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.419990063 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.420006990 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420058966 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.420063019 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420187950 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420200109 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.420216084 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420666933 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420754910 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420789957 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.420795918 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420913935 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.420975924 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.420980930 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.421592951 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.421650887 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.421655893 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.421719074 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.421777964 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422096968 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422133923 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.422138929 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422257900 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422338963 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422391891 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.422398090 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.422451019 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.423989058 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.424031019 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.424180031 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.427567959 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.427593946 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.538630962 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.538837910 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.538930893 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.538939953 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.538955927 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539002895 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.539024115 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539181948 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539222956 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.539227962 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539352894 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539411068 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.539416075 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539704084 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539767027 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.539772034 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539814949 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539894104 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.539899111 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.539971113 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.540648937 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.540741920 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.540754080 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.540767908 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.540796995 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.540848970 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.541660070 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.541753054 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.541801929 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.541801929 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.541809082 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.541857958 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.542418003 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.542481899 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.542521000 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.542644978 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.543262005 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.543327093 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.543421984 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.543489933 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.657284975 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.657366991 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.657442093 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.657517910 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.657537937 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.657614946 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.657638073 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.657731056 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.658649921 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.658710003 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.658776999 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.658838987 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.658876896 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.658932924 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.658962965 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.659025908 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.659084082 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.659252882 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.659368038 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.659413099 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.659430027 CET	443	49701	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:33.659444094 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.659478903 CET	49701	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:33.665756941 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.665797949 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.665859938 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.666143894 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.666171074 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.666218042 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.666676044 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.666770935 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.666835070 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.667196989 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.667237997 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.667289019 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.667649031 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.667663097 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.668507099 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.668521881 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.668986082 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.669025898 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.669145107 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.669171095 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.680437088 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:33.680478096 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:33.680547953 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:33.680808067 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:33.680838108 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:33.943834066 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.944736004 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.944786072 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.945941925 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.946008921 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.947187901 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.947278023 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.947384119 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:33.947395086 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:33.990041018 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.034148932 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.034404039 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.034425020 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.035526037 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.035594940 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.036027908 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.036101103 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.036184072 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.036195040 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.083869934 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.114336014 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114419937 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114454031 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114475012 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.114486933 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114516020 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114553928 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.114597082 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114634991 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114643097 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.114660978 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.114706039 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.114721060 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.160836935 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.160856962 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199436903 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199508905 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199547052 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199554920 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.199583054 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199625015 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.199635983 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.199690104 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.200319052 CET	49704	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.200340033 CET	443	49704	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.202604055 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.202641964 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.202714920 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.202965021 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.202975988 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.205751896 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.212521076 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.212610006 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.212681055 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.212881088 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.212917089 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.232892990 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.232956886 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233000994 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.233019114 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233112097 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233144999 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233160019 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.233180046 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233211994 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233227015 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.233237982 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.233289957 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.234061003 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234117031 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234149933 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234163046 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.234170914 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234225035 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.234231949 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234814882 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234847069 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234875917 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.234877110 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234889030 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.234915018 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.235414028 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.235445976 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.235464096 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.235471964 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.235519886 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.235527992 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.275648117 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.275898933 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.275964022 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.276803970 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.276887894 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.277005911 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.277029991 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.277081013 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.277148008 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.277307034 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.277343035 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.277621031 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.277694941 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.277781963 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.277801037 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.278042078 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.278095961 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.278373003 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.278430939 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.278510094 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.278520107 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.278825045 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.278891087 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.279166937 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.279253006 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.279257059 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.281774044 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.287414074 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.287666082 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.287686110 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.289010048 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.289203882 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.289227009 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.290246964 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.290311098 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.291213989 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.291271925 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.291349888 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.291424036 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.291655064 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.291835070 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.291868925 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.291881084 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.291939020 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.291945934 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.319561005 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.331732035 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.331737041 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.331739902 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.331808090 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.331809998 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.331820011 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.347727060 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:34.351815939 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.351893902 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.351922035 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.351946115 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.351954937 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.351967096 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.351999998 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.352206945 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352241993 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352248907 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.352267981 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352308035 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.352315903 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352325916 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352379084 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.352396011 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.352982998 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353014946 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353050947 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.353061914 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353070021 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353072882 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.353113890 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.353780985 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353848934 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.353945017 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.353996992 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.354000092 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354038954 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354067087 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.354866028 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354902983 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354931116 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.354950905 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354969978 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.354974031 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.355031013 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.355041981 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.355089903 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.355761051 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.355823040 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.379904985 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.394251108 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.394329071 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.432128906 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432229042 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432298899 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.432318926 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432332993 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432380915 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.432383060 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432394028 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432444096 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.432467937 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432748079 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432796001 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432826042 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432848930 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.432866096 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.432939053 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.433058977 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433104038 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.433130026 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433248997 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433300018 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.433307886 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433444977 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433504105 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.433510065 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433636904 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.433689117 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.433695078 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.441028118 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441072941 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441112995 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441124916 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.441150904 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441210032 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441214085 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.441229105 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441283941 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.441313028 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441907883 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441940069 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.441956997 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.441972017 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.442025900 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.447163105 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447382927 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447448015 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.447470903 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447607040 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447669029 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.447684050 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447777987 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447839975 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.447854042 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.447954893 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.448009014 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.448021889 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.448111057 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.448175907 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.448189020 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.469569921 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.469775915 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.469835043 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.469854116 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.469937086 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.469990969 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.469999075 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.470103979 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.470155001 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.470160961 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.470264912 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.470304966 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.470312119 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.471160889 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.471225977 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.471246958 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.471291065 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.471352100 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.471509933 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.471544981 CET	443	49703	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.471570969 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.471785069 CET	49703	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.475461006 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.475524902 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.475610018 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.475985050 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.475992918 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.476003885 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.476022959 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.491738081 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.522727966 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.523060083 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.523078918 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549201012 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549263000 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549293995 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549320936 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.549343109 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549488068 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.549499035 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549556017 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549606085 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549635887 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549854040 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.549865961 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.549951077 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550255060 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550367117 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550492048 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550493956 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.550502062 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550535917 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550566912 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550574064 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550585032 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.550585985 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.550595999 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550625086 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.550761938 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550867081 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.550899982 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.550911903 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551341057 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551372051 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551386118 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551389933 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551394939 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551403999 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551418066 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551481009 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551491022 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551553011 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551562071 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551661968 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551687956 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551693916 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551721096 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551743984 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.551781893 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.551789045 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552341938 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552402973 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.552408934 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.552409887 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552417994 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552700996 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552805901 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.552814960 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.552840948 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.553030968 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.553141117 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.553167105 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.553196907 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.553236008 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.557765007 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.557934046 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.557962894 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.558083057 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.558129072 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.558423042 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.558466911 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.558568954 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.559055090 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.559055090 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.563822031 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564007998 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564105988 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564201117 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564238071 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.564261913 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564385891 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.564394951 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564421892 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564460039 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.564682007 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.564891100 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.564892054 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.568553925 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.568555117 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.568586111 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.568622112 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.568651915 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.568747997 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.569124937 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.569158077 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.569169998 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.569185972 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.571079016 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.572191954 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:34.572201967 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:34.572401047 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:34.572580099 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:34.572592974 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:34.588517904 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.588721991 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.588807106 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.588815928 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.588860989 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589025974 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589029074 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.589062929 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589240074 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589551926 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589639902 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589673042 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.589694023 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589785099 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.589818001 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.589826107 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590192080 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.590375900 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590523958 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590661049 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590754032 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590784073 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.590791941 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.590884924 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.591166973 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.591480970 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.591489077 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.595602036 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.595616102 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.600048065 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.600048065 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.600074053 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.600671053 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.600734949 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.602751970 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.602809906 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.602817059 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.603075027 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.603106022 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.630520105 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.630991936 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.631000996 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.666409969 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.666481972 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.666543007 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.666580915 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.666712999 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.667212963 CET	49709	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.667237997 CET	443	49709	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.667537928 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.667748928 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.667855024 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.667890072 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.667908907 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668008089 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.668013096 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668123007 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668225050 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668337107 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668359995 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.668365002 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668524027 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668529034 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.668565035 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.668589115 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.668807983 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.669039965 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.672321081 CET	49706	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.672332048 CET	443	49706	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.672331095 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.672405005 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.672612906 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.673882961 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.673912048 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.675553083 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.675582886 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.676378965 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.676378965 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.676403046 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.682737112 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.693301916 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:34.693355083 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:34.695059061 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:34.695177078 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:34.695208073 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:34.708417892 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.708596945 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.708703995 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.708787918 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.708806992 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.708817005 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.708844900 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.708947897 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709045887 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709078074 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.709084988 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709459066 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709546089 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709577084 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.709584951 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.709794998 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.710242033 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.710259914 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.710316896 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.710347891 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.710365057 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.710390091 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.710944891 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.711051941 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.711066008 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.711074114 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.711126089 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.711126089 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.711884975 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712091923 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.712321997 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712418079 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712451935 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.712457895 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712482929 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.712506056 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712703943 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.712711096 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.712763071 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.759182930 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.759268999 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.759289980 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.759550095 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.808290958 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.808532000 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.808592081 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.809667110 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.809771061 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.810369968 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.810369968 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.810419083 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.810478926 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.817509890 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.818581104 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.818604946 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.818967104 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.819552898 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.819554090 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.819617987 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.827658892 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.827790022 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.827800989 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.827831030 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.827884912 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.827954054 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828047037 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828063965 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828073978 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828102112 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828414917 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828443050 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828449965 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828479052 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828598022 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828689098 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828722954 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828731060 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828744888 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828783989 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828874111 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.828886986 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.828896046 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829018116 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829108000 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829242945 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829248905 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829272985 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829304934 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829453945 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829549074 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829581976 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829588890 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829617977 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829662085 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.829828978 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.829835892 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.830605984 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832386017 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832461119 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832469940 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832494974 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832525015 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832549095 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832604885 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832693100 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832705975 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832714081 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.832763910 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.832763910 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833003044 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833276033 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833312035 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833318949 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833343029 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833440065 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833477974 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833484888 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833497047 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833528042 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833570004 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833570004 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833578110 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833674908 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833784103 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833791018 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833811045 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833844900 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.833851099 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.833878994 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.857912064 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.857973099 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.869430065 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.869503975 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.869551897 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.869591951 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.869625092 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.869776964 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.871747971 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.872750998 CET	49710	443	192.168.2.16	104.16.79.73
Oct 31, 2024 01:09:34.872807980 CET	443	49710	104.16.79.73	192.168.2.16
Oct 31, 2024 01:09:34.872904062 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.873435974 CET	49708	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.873502970 CET	443	49708	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.904859066 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.946599007 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.946679115 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.946902990 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.946933985 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947004080 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947004080 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947016001 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947223902 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947249889 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947288990 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947295904 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947331905 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947567940 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947588921 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947623968 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947632074 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947652102 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947856903 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947882891 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947916031 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.947923899 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.947952986 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948188066 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948208094 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948281050 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948281050 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948288918 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948530912 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948558092 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948590040 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948597908 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948627949 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948776960 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948796988 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948832035 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.948839903 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.948863983 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949166059 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949189901 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949264050 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949264050 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949271917 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949443102 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949462891 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949507952 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949516058 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949539900 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949810028 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949835062 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949870110 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.949877024 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.949906111 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950031996 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950052023 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950083971 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950090885 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950115919 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950123072 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950170994 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950206995 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950213909 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950226068 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.950366020 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950593948 CET	49707	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.950612068 CET	443	49707	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.956322908 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.956412077 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.956536055 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.956753969 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.956785917 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.958584070 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.958879948 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.958916903 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.958952904 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.958970070 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.959697008 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.959841967 CET	49713	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:34.959861040 CET	443	49713	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:34.974299908 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974366903 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974399090 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974427938 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974451065 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.974462032 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974483967 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.974509001 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.974616051 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.974625111 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.975142002 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.975172043 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.975260019 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:34.975269079 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:34.975331068 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.080317974 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.081192970 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.081217051 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.081553936 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.083928108 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.083997011 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.084003925 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.093065023 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093133926 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093173981 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093265057 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.093276978 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093364954 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.093373060 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093441010 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093473911 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093554974 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.093563080 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.093832016 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.094293118 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.094366074 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.094402075 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.094432116 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.094542027 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.094549894 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095107079 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095139980 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095165968 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095547915 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.095556021 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095781088 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095813036 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095839977 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095865011 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.095877886 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.095896006 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.095931053 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.096180916 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.096190929 CET	443	49712	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.096213102 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.096277952 CET	49712	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.126744032 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.126754999 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.131236076 CET	49689	80	192.168.2.16	192.229.211.108
Oct 31, 2024 01:09:35.172925949 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.173264027 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.173278093 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.173603058 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.176161051 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.176224947 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.176318884 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.186506987 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.186907053 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.186924934 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.188489914 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.188700914 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.189009905 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.189089060 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.189125061 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.195148945 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.195445061 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.195456028 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.195735931 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.196099043 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.196156025 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.196257114 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.211998940 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.212297916 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.212313890 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.213759899 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.213982105 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.214196920 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.214298964 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.214337111 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.214375973 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.215715885 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.215774059 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.217235088 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.217504978 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.217637062 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.217637062 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.217673063 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.217726946 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.223336935 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.235342979 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.235770941 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.235781908 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.236648083 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.237062931 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.237116098 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.239368916 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.239511013 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.240148067 CET	49716	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.240164042 CET	443	49716	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.243788004 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.243875027 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.244008064 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.244383097 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.244419098 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.259334087 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.266774893 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.266777992 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.266786098 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.266805887 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.282737017 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.294553041 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.294897079 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.294939041 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.297926903 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.298075914 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.298422098 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.298669100 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.298696041 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.306364059 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.306667089 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.306711912 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.307735920 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.307859898 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.308775902 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.308849096 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.309120893 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.309140921 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.313736916 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.313843966 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.316380978 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.316615105 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.316629887 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.317620993 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.317768097 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.318650961 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.318706036 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.319550991 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.319559097 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.330164909 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330370903 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330401897 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330431938 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330466986 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.330467939 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330481052 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.330482960 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.330570936 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.330845118 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.331001043 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.331290960 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.331301928 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.343329906 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.346273899 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.346292973 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347003937 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347111940 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347157001 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347204924 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347243071 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.347258091 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347285032 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.347301006 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347354889 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347428083 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.347567081 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.347575903 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.354590893 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354679108 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354712009 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354748964 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354782104 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354799986 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.354810953 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.354876995 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.354959011 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.355154991 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.355163097 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.355717897 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.355725050 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.364286900 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.364823103 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365036011 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365149021 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365253925 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365295887 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.365310907 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365417004 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365472078 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.365480900 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365797043 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365835905 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.365843058 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.365879059 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.369456053 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.369558096 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.369566917 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.377744913 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.378223896 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.378233910 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.393742085 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.393781900 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.393795013 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.398863077 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399199963 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399295092 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399406910 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399451017 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.399485111 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399553061 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.399568081 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399688005 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399696112 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.399718046 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.399864912 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.400029898 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.400046110 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.400156975 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.409789085 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.409854889 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.409863949 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.425774097 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.443577051 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.446450949 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.446517944 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.446547985 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.446777105 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.446789026 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447020054 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447050095 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447076082 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.447078943 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447104931 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.447113037 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447227955 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.447674990 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447719097 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447745085 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447791100 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.447930098 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.447940111 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.448571920 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.448604107 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.448635101 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.448695898 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.448695898 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.448709011 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.449229002 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.449934006 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.449943066 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.454792976 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455019951 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455118895 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455214977 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455404997 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455502987 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455534935 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.455554008 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455569983 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.455658913 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455760956 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455787897 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.455802917 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.455868959 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.457813025 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.464698076 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.464777946 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.464862108 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.464903116 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.464915037 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.465118885 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.465173006 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.465192080 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.465214014 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.465246916 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.465717077 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.465781927 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.466084957 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.466084957 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.469758987 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.469830990 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.469890118 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.469917059 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.469929934 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.469940901 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.469973087 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.470402002 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.470446110 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.470838070 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.470866919 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.470904112 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.470932961 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471009016 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.471009016 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.471020937 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471564054 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471606970 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.471616030 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471798897 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.471854925 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471914053 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471946955 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.471977949 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.472007036 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.472033978 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.472033978 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.472044945 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.473253965 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.473261118 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.478363037 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.480230093 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.483558893 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.488692045 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.488884926 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.488976955 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.489073992 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.489119053 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.489130974 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.489206076 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.489274979 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.490067959 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.490087032 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.490092993 CET	443	49720	104.16.80.73	192.168.2.16
Oct 31, 2024 01:09:35.490176916 CET	49720	443	192.168.2.16	104.16.80.73
Oct 31, 2024 01:09:35.491553068 CET	49725	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.491584063 CET	443	49725	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.492372036 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.492419004 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.492516994 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.492547989 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.494291067 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.494431019 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.495532036 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495564938 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495605946 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495635033 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495665073 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495692968 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.495726109 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.495740891 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.496215105 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.496520042 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.496529102 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.497437954 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.503549099 CET	49718	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.503561020 CET	443	49718	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.513282061 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.513335943 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.513448954 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.513667107 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.513684988 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.514889956 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.514942884 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.514974117 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515142918 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515188932 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515217066 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515228033 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.515259027 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515507936 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.515525103 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.515626907 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.515959978 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.516007900 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.516037941 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.516067028 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.516083002 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.516201973 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.516786098 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517138958 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517175913 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517205954 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517236948 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517239094 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.517251968 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.517291069 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.518033981 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.518068075 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.518069983 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.518083096 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.519555092 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.531596899 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.535650015 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.535707951 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.535775900 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.536398888 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:35.536418915 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:35.566327095 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.566621065 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.566653013 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.567131996 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.567461014 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.567554951 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.567686081 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.573329926 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573513031 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573566914 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.573580027 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573755026 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573808908 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.573817968 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573916912 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.573961020 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.573967934 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.574383020 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.574433088 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.574440956 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.574543953 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.574592113 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.574599028 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575027943 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575088024 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.575094938 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575213909 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575263023 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.575270891 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575391054 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575440884 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.575452089 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.575730085 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.575988054 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.576031923 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.576040030 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.576150894 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.576194048 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.576200962 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.585244894 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585310936 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585342884 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585356951 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.585380077 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585416079 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.585423946 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585457087 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585489035 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585494041 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.585501909 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.585561991 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.585843086 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.586185932 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.586230993 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.586246014 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.586253881 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.586282015 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.586297989 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.586977959 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587016106 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587034941 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.587043047 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587053061 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587065935 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.587076902 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.587080956 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587126970 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.587846041 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587877035 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587893963 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.587902069 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.587927103 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.588594913 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.588643074 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.588650942 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.588660955 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.588706970 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.590456009 CET	49721	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.590471029 CET	443	49721	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.602247000 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.602273941 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.602344990 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.604163885 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.604178905 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.611354113 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.617733955 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.617784977 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.617856979 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.617886066 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.617901087 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.617914915 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.617952108 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.619393110 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619729042 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619762897 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619771957 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.619780064 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619810104 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619817019 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.619823933 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.619868040 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.620587111 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.620640039 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.620671988 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.620681047 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.620688915 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.620726109 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.620733023 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.621474028 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.621504068 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.621510029 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.621517897 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.621553898 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.621560097 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.622541904 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.622580051 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.622587919 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.632107973 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632272005 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632354021 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.632359028 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632399082 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632457972 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.632474899 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632649899 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.632713079 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.632725954 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633054018 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633109093 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.633121014 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633538961 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633605957 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.633619070 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633663893 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633728981 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.633742094 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.633794069 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.634203911 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.634260893 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.634325027 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.634398937 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.634432077 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.634493113 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.635116100 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.635178089 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.635274887 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.635351896 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.636127949 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.636200905 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.636220932 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.636291027 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.666712999 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.676542997 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.676605940 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.692440987 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.692636013 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.692687988 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.692698002 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.692766905 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.692815065 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.736419916 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736534119 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736574888 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736584902 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.736613989 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736665964 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736670971 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.736690044 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736741066 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736746073 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.736761093 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736809969 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736815929 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.736829996 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.736880064 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.741806984 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.741880894 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.741909027 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.741925955 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.741950989 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.741986990 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.741992950 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.742002010 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.742032051 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.742050886 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.742058992 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.742100954 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.743205070 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.743267059 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.743324995 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.743335009 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.743362904 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.743386030 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.743407965 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.749121904 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.749156952 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.749197006 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.749227047 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.749253988 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.749274969 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762167931 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762203932 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762233973 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762237072 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762250900 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762275934 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762305975 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762384892 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762439966 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762516022 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762547016 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762573957 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762573957 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762584925 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.762595892 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.762617111 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.763356924 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763385057 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763411999 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.763436079 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763458967 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.763478041 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763508081 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763528109 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.763561964 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.763592958 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.764259100 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764312983 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.764327049 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764347076 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764379025 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.764394045 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764422894 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.764513969 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764538050 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764564037 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.764576912 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.764605045 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765501022 CET	49723	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.765517950 CET	443	49723	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.765830040 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.765862942 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.765883923 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765892029 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.765902042 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.765922070 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.765944004 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765944004 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765979052 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765979052 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.765990973 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766128063 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766175032 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.766187906 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766213894 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766239882 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.766247034 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766257048 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766269922 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.766278982 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766299009 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.766311884 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.766340017 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.767143965 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.767173052 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.767190933 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.767204046 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.767230988 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.775717020 CET	49719	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.775739908 CET	443	49719	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.790700912 CET	49724	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.790728092 CET	443	49724	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.793456078 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.793521881 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.793555021 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.793611050 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.850179911 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.850970984 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.851000071 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.851424932 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.851883888 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.851885080 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.851984024 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853281975 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853374958 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853420019 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853427887 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.853449106 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853497982 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.853513956 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853712082 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.853754997 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.853769064 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854280949 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854326963 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854341030 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.854358912 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854408979 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.854415894 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854433060 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.854487896 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.854501009 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855215073 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855259895 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.855262041 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855277061 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855331898 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.855345011 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855393887 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.855438948 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.855452061 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.856170893 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.856224060 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.856235981 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.866308928 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.866393089 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.866449118 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.866507053 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.866782904 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.866832972 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.866849899 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.866858006 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.866883993 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867283106 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867340088 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867348909 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867367983 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867420912 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867429018 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867729902 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867784977 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867801905 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867813110 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867845058 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867916107 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.867975950 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.867957115 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.868006945 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.868032932 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.871695042 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.871737003 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.871757984 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.871767998 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.871798038 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.872488976 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.872526884 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.872548103 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.872556925 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.872581959 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.872966051 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873014927 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873035908 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873042107 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873070002 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873092890 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873132944 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873148918 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873155117 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873193979 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873210907 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873712063 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873754978 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873781919 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873789072 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873819113 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873838902 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873878956 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873918056 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873954058 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.873960972 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.873987913 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.874006987 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.874044895 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.874722004 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.874766111 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.874787092 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.874804020 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.874819040 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.874854088 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875407934 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875452042 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875471115 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875526905 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875566006 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875581026 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875766039 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875811100 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875835896 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875848055 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.875874043 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.875899076 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.900731087 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.903721094 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.970293045 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970382929 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970424891 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970432997 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.970449924 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970503092 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.970515966 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970618963 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970662117 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970685005 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.970700026 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.970761061 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.970772982 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971086979 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971148014 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.971162081 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971688032 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971744061 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971780062 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.971801043 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.971824884 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.972548008 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.972601891 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.972614050 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.972629070 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.972655058 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.972659111 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.972731113 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.972744942 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.972801924 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.973504066 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.973548889 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.973561049 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.973573923 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.973630905 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.973630905 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.974400043 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.974446058 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.974469900 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.974483967 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:35.974519968 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.974543095 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:35.984427929 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.984486103 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.984539032 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.984555960 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.984590054 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.984611034 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.987840891 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.987915039 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.987931967 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.987946033 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988008976 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988017082 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988043070 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988044024 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988075018 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988111019 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988111019 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988132954 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988204956 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988223076 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988274097 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988287926 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988332987 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988356113 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988363028 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988425016 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988436937 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988487005 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988502026 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988518953 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988559008 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988570929 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988598108 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988617897 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988827944 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988843918 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988887072 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988898993 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.988956928 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.988956928 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989073992 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989090919 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989140034 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989154100 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989201069 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989228010 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989243984 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989295959 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989303112 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989314079 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989334106 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989418983 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989666939 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989706039 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989727974 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989739895 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.989788055 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.989788055 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990164995 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990180016 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990236044 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990257978 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990313053 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990457058 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990490913 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990520000 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990531921 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990561008 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990700006 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990732908 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990765095 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990776062 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.990803003 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.990825891 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.991152048 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.991440058 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.991455078 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.991499901 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.991513968 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:35.991573095 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:35.991573095 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.006964922 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.007110119 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.007167101 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.013428926 CET	49728	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.013458014 CET	443	49728	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087371111 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087430000 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087440014 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087455988 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087485075 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087487936 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087502956 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087517023 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087544918 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087724924 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087780952 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087795973 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087832928 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087852955 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.087879896 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.087903023 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088241100 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088303089 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088316917 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088376999 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088540077 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088587046 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088589907 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088622093 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088644981 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088669062 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.088673115 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088685036 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.088732958 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.089123011 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089174032 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.089323997 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089370966 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089380980 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.089392900 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089416027 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089426041 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.089451075 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.089459896 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.089487076 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.090163946 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.090219975 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.090229988 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.090241909 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.090280056 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.090305090 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.090332031 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.090343952 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.090404987 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092255116 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092318058 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092330933 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092384100 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092391968 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092403889 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092437029 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092458010 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092513084 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092544079 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.092588902 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.092994928 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093048096 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093203068 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093255997 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093709946 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093759060 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093813896 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093861103 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093866110 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093878031 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093916893 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093918085 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093930006 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.093966007 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.093987942 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.094355106 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.094405890 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.094433069 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.094485044 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.101264954 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101285934 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101336956 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101360083 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101394892 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101413965 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101505995 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101521015 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101557016 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101567984 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101594925 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101615906 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101761103 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101779938 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101826906 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101844072 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.101871014 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.101888895 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.104687929 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.104703903 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.104758024 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.104773045 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.104801893 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.104820967 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105196953 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105210066 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105246067 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105257988 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105288029 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105308056 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105612040 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105647087 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105684042 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105711937 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.105741024 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.105758905 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.106300116 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.106367111 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.106379032 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.106441975 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.106491089 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.110052109 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.111972094 CET	49722	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.111994982 CET	443	49722	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.133572102 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.133795023 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.133827925 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.134448051 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.134685993 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.134713888 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.134917021 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.134975910 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.135451078 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.135521889 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.135618925 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.135627985 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.135929108 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.136419058 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.136521101 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.136544943 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.183748007 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.183765888 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.205035925 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205105066 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205113888 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205152988 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205174923 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205178022 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205210924 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205239058 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205276966 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205327034 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205327988 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205327988 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205353022 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205368996 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205410957 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205419064 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205465078 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205476999 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205502987 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205503941 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205523014 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205533981 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205559969 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205563068 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205585003 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205615997 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.205643892 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.205662012 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206063032 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206083059 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206123114 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206136942 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206162930 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206192017 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206363916 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206392050 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206454039 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206454039 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206469059 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206513882 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206593037 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206613064 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206648111 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206660032 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.206686020 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.206729889 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207086086 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207106113 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207146883 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207160950 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207185984 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207205057 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207276106 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207295895 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207348108 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207361937 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207384109 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207402945 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207797050 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207815886 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207859993 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207891941 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.207916975 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.207933903 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208066940 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208087921 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208131075 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208143950 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208168030 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208189964 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208364010 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208394051 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208425045 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208436966 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208462000 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208503008 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208576918 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208636045 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208648920 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208676100 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.208718061 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.208997011 CET	49727	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.209043026 CET	443	49727	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.217601061 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.217931032 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.217942953 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.218400955 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.218756914 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.218837976 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.218863964 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.259344101 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.262733936 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.263453960 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:36.263525963 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:36.263607025 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:36.263813972 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:36.263858080 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:36.268277884 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.268342972 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.268415928 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.268692017 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.268722057 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.302333117 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.303039074 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.303102016 CET	443	49735	34.120.195.249	192.168.2.16
Oct 31, 2024 01:09:36.303155899 CET	49735	443	192.168.2.16	34.120.195.249
Oct 31, 2024 01:09:36.307506084 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.307919979 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.307988882 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.308027983 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308129072 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308182001 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.308197975 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308293104 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308346987 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.308360100 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308474064 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.308526039 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.308540106 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.325025082 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.325098038 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.325176001 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.325448990 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.325478077 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.327229023 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.327271938 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.327332973 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328021049 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328089952 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.328154087 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328306913 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328322887 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.328600883 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328644037 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.328717947 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328911066 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.328942060 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.329173088 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.329196930 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.333206892 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.333216906 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.333287001 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.333586931 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.333606005 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.335506916 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.335522890 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.335582972 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.335943937 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.335953951 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.358783960 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.358805895 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381239891 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381628036 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381681919 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.381695986 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381835938 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381880045 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.381887913 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.381988049 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.382035017 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.382041931 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.382149935 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.382206917 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.382214069 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.406752110 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.422863960 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.422882080 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.426608086 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.426810980 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.426863909 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.426879883 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.426980972 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427026987 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.427036047 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427146912 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427192926 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.427201986 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427649975 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427732944 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.427742004 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427826881 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427874088 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.427885056 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.427989960 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.428036928 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.428044081 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.428694963 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.428751945 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.428760052 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.428849936 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.428895950 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.428903103 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430440903 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430483103 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430493116 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.430500984 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430536032 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430540085 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.430546999 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430591106 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.430598021 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430629969 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.430668116 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.435275078 CET	49734	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.435291052 CET	443	49734	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.469645023 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.469736099 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.469867945 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.470045090 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.470076084 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.470771074 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.498119116 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498296976 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498339891 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.498356104 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498456001 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498500109 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.498507023 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498676062 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.498723984 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.498730898 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.499208927 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.499259949 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.499265909 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.499377012 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.499419928 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.499427080 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.499984980 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.500042915 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.500051022 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.500127077 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.500169039 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.500188112 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.500279903 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.500329971 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.500349045 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.501147032 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.501193047 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.501202106 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.501281977 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.501327991 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.501336098 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.523964882 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.524043083 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.524121046 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.524435997 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.524470091 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.549787998 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.615582943 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.615761995 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.615858078 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.615895033 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.615911961 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.615998030 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616095066 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616195917 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616223097 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.616230965 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616338015 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616434097 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616463900 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.616472006 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.616570950 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.617130995 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.617247105 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.617280006 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.617286921 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.617307901 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.618185997 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.618560076 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.618566990 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.619077921 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.619164944 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.619198084 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.619204044 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.619226933 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.619997978 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.620150089 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.620158911 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.620207071 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.620239973 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.620245934 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.620269060 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.620955944 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.621129036 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.621149063 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.621217966 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.621479034 CET	49736	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.621504068 CET	443	49736	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.755732059 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:36.893029928 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.893551111 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.893593073 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.894718885 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.895097971 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.895287037 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.895359039 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.930042982 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.931579113 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.931643009 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.932703018 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.932805061 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.933216095 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.933289051 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.933455944 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.939649105 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.940099001 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.940413952 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.940435886 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.940603971 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.940648079 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.940797091 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:36.940819979 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:36.941039085 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.941375017 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.941452980 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.941499949 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.941517115 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.941693068 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.941927910 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.942012072 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.942013979 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.942064047 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.942522049 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.942567110 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.946119070 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.946291924 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.946459055 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.946547031 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.946583033 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.946660995 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.946677923 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.946870089 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.946912050 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.947957039 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.948025942 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.948446989 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.948520899 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.948558092 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.964649916 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.964976072 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.965002060 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.965451002 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.966219902 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.966219902 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.966243029 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.966308117 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.975342035 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.977739096 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.977765083 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.987339973 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.987406015 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.993755102 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.993758917 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.993792057 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.993801117 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:36.993828058 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:36.993846893 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.009768009 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.026288986 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.041726112 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.041795015 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.055404902 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.055674076 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.055752993 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.055829048 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.055835962 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.055866957 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.056015968 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.056042910 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.056119919 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.056148052 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.056164980 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.056518078 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.056530952 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.084227085 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.084616899 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.084639072 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.084968090 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.086426973 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.086505890 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.086595058 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.089915037 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.090037107 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.090152025 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.090780020 CET	49747	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.090817928 CET	443	49747	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.091097116 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.091165066 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.091376066 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.091567993 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.091594934 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.093173027 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.093251944 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.093301058 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.093430996 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.094202042 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.094223022 CET	49748	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.094244957 CET	443	49748	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.094254971 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.095041990 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.095041990 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.095102072 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.101152897 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.104671001 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.104734898 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.104763985 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.104830980 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.104860067 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.104979992 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.105577946 CET	49742	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.105597973 CET	443	49742	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.106080055 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.106129885 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.106259108 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.106893063 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.106918097 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.108969927 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.109266996 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.109757900 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.110116005 CET	49744	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.110146999 CET	443	49744	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.112037897 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.112077951 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.112366915 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.112366915 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.112426996 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.112905025 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.112968922 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.113049984 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.113086939 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.113193035 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.114264965 CET	49745	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.114284039 CET	443	49745	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.115073919 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.115129948 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.115621090 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.115780115 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.115813971 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.116396904 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:37.116677999 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:37.116698027 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:37.117831945 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:37.117938995 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:37.118216038 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.118261099 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.118395090 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.118576050 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.118604898 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.118993044 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:37.119097948 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:37.125880003 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.125983000 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126022100 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126060009 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126092911 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126132011 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.126147032 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126257896 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.126270056 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126494884 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.126702070 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.126709938 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.127336025 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.136737108 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.141010046 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.141494989 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.141515970 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.145072937 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.145422935 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.146038055 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.146214962 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.146253109 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.168725014 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.168732882 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.168735981 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:37.168759108 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:37.174693108 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.174868107 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.174946070 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175044060 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175122976 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175173998 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.175209045 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175304890 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175420046 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175468922 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.175486088 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175551891 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.175853014 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.175995111 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176069975 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176074028 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.176090956 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176124096 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.176723003 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176800966 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176876068 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176942110 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.176953077 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.176966906 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.177264929 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.177284002 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.177674055 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.177870989 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.177887917 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.187376022 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.203567028 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.203602076 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.216784954 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.216792107 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:37.227768898 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.227833033 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.228303909 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.228324890 CET	443	49750	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.228390932 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.228960037 CET	49750	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.230165958 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.230216026 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.230385065 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.230499983 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.230540991 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.232753992 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.249047995 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249094009 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.249130964 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249171972 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249218941 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249238014 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.249248028 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249299049 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.249387980 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.250706911 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.251193047 CET	49743	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.251204967 CET	443	49743	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.257313013 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.257330894 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.257359982 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.257359982 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.257512093 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.257550001 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.257687092 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.257710934 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.257870913 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.257896900 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.294353962 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.294531107 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.294658899 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.294687033 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.295921087 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296000004 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296070099 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.296080112 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296092033 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296340942 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.296355009 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296461105 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296546936 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296633005 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296672106 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296814919 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.296814919 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.296833992 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.296967030 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.296988010 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.297092915 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.297092915 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.297113895 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.297189951 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.297198057 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.297496080 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.297508001 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.297941923 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.298032045 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.298043966 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.298054934 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.298141956 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.298147917 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.298171043 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.298216105 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.298348904 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.298965931 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.299063921 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.299114943 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.299127102 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.299191952 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.299192905 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.299870968 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.299949884 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.307806969 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308015108 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308100939 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.308114052 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308166981 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308268070 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308408976 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308445930 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.308465958 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308536053 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.308553934 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308633089 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.308653116 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308799028 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308859110 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.308872938 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.308917046 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.309015989 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.309252024 CET	49751	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.309283018 CET	443	49751	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.319937944 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.319972038 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.320214987 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.321073055 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.321086884 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.414340973 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414443016 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414457083 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414484024 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414554119 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414568901 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414602995 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414613962 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414657116 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414663076 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414757967 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414763927 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414798975 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414869070 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414906025 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.414911985 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.414946079 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415041924 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415333986 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415498018 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415522099 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415612936 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415649891 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415657043 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415699005 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415710926 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415868998 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.415874958 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415887117 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.415968895 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416002035 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.416007996 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416028976 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.416099072 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416104078 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.416121960 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416189909 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416223049 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.416229010 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.416264057 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.416358948 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.419255018 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419351101 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.419498920 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419567108 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.419603109 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419666052 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.419708967 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419792891 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419796944 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.419815063 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.419852018 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420263052 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420387030 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420417070 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420423031 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420459032 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420478106 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420567036 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420604944 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420610905 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420629978 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420689106 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420787096 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420829058 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420834064 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.420842886 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.420880079 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.421001911 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.421062946 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.421068907 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.421082973 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.421269894 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.421274900 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.421499014 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.534579039 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.534658909 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.534768105 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.534878969 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.534923077 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535074949 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535181999 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535552979 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.535564899 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535618067 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.535625935 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535640001 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535659075 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.535659075 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.535665989 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.535693884 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.535900116 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.536962032 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537010908 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537055016 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537062883 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537221909 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537250996 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537271023 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537302971 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537313938 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537319899 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537331104 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537384987 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537393093 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537393093 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537400961 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537429094 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537441015 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537463903 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537471056 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537492037 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537497044 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537548065 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537548065 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537775040 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537893057 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537914991 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.537982941 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537982941 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.537988901 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.538177013 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.538203001 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.538278103 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.538278103 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.538284063 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539650917 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539673090 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539733887 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539746046 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.539752960 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539778948 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539788008 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.539793015 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.539840937 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654189110 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654213905 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654262066 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654274940 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654289007 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654320955 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654323101 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654336929 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654366970 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654423952 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654450893 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654474974 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.654479980 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.654520988 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.655000925 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655023098 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655062914 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.655069113 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655100107 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.655278921 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655304909 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655330896 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.655337095 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.655366898 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656111002 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656133890 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656194925 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656200886 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656214952 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656322956 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656351089 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656383991 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656388998 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656408072 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656761885 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656786919 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.656842947 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.656848907 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657290936 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657344103 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657347918 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.657357931 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657397985 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.657736063 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657756090 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657797098 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.657802105 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.657826900 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.658433914 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658459902 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658500910 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.658505917 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658521891 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.658890963 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658910036 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658951044 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.658957958 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.658968925 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.659447908 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.659483910 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.659518003 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.659523964 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.659547091 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.660209894 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.660232067 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.660279989 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.660285950 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.660301924 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.686964989 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.687236071 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.687248945 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.687635899 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.687979937 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.688045025 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.688121080 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.704526901 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.704854012 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.704938889 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.705292940 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.705650091 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.705728054 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.705797911 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.710793018 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.719364882 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.719571114 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.719580889 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.720634937 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.720712900 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.721062899 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.721129894 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.721354961 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.721363068 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.722307920 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.723141909 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.723176956 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.724806070 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.725075960 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.725105047 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.725406885 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.725497007 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.725755930 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.725877047 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.725891113 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.725969076 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.728285074 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.728354931 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.728626013 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.728705883 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.728740931 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.731333017 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.747342110 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.771327972 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.774115086 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774142027 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774188042 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.774194956 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774209023 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.774209976 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774231911 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.774244070 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774259090 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.774269104 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.774310112 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.774743080 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.774754047 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.774784088 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.774785995 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.774797916 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.775013924 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775034904 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775068998 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775074959 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775090933 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775101900 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775111914 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775121927 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775137901 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775150061 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775187969 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775378942 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775397062 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775434017 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775439024 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.775464058 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.775501013 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777065992 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777087927 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777124882 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777129889 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777147055 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777156115 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777170897 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777174950 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777199984 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777225971 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.777295113 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777467966 CET	49741	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.777484894 CET	443	49741	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.820476055 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.822751045 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.842334032 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842396975 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842437029 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842459917 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.842466116 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842477083 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842514992 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.842524052 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842633963 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.842937946 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.842994928 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.843410969 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.843858004 CET	49752	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.843864918 CET	443	49752	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.845784903 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.845830917 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.846143961 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.846232891 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.846443892 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.846460104 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.846561909 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.846574068 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.846926928 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.847847939 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.847922087 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.847965002 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.867292881 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867407084 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867465973 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867522001 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867525101 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.867583990 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867640972 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.867645979 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867667913 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.867687941 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.868041992 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.868093014 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.868094921 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.868110895 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.868196011 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.869062901 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.869502068 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.869523048 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.870302916 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.870680094 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.870698929 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.870729923 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.870811939 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.871165991 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.871208906 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.871270895 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.871619940 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.871709108 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.871750116 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.871756077 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.871922970 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.872138977 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872215033 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872241020 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872270107 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872308016 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872536898 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.872555017 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.872828960 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.872842073 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.873039961 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.873085976 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.873117924 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.877981901 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.878082991 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.878180981 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.879443884 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.879472971 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.879584074 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.880137920 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.880151987 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.880179882 CET	49754	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.880187988 CET	443	49754	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.881874084 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.882046938 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.882097006 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.882112026 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.882241964 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.882291079 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.882381916 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.882416964 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.882472038 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.882875919 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.882890940 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.883193016 CET	49756	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.883209944 CET	443	49756	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.885993958 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.886075020 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.886140108 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.886348963 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.886382103 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.890328884 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.890347958 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.890521049 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.890685081 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.890698910 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.892877102 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.892936945 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.893038988 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.893182039 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.893207073 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.895329952 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.902736902 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.915337086 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.918728113 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.918984890 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.919004917 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.958919048 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.959176064 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.959196091 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.961067915 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.961127996 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.961745024 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.961816072 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.961891890 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.961899042 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.966757059 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.984503031 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.984586954 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.984644890 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.984648943 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.984663963 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.984730005 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.985295057 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.985390902 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.985470057 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.985522032 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.986711979 CET	49755	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.986738920 CET	443	49755	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.988579988 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:37.988626003 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:37.988712072 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:37.988806009 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988850117 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988878012 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988908052 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988908052 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:37.988928080 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:37.988939047 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.988948107 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988969088 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.988986969 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.989375114 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.989418030 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.989428043 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.989466906 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:37.989501953 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.990659952 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.990745068 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.990781069 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.990874052 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.990916967 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.990963936 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.990991116 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.991063118 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.991099119 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.991147995 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.991170883 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.991215944 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.991916895 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.991993904 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.992031097 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.992055893 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.992060900 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.992074013 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.992115021 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.992861032 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.992918015 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.992927074 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.993458033 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.993493080 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.993546009 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.993555069 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.993598938 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:37.993778944 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:37.993921995 CET	49758	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:37.993940115 CET	443	49758	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.005053997 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.005076885 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.005147934 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.005325079 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.005340099 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.028737068 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.034728050 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.034749031 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036698103 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036817074 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036844015 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036870956 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036870003 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.036896944 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036926985 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036930084 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.036957979 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.036964893 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.036971092 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.037010908 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.037262917 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.037343979 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.039576054 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.040812969 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.040880919 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.040954113 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.041004896 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.057126045 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.057178020 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.057271004 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.059037924 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.059072018 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.077744961 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.097475052 CET	49760	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.097508907 CET	443	49760	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.108725071 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108799934 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108849049 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108877897 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.108884096 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108902931 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108932972 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.108948946 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108987093 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.108994007 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109004974 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109369993 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109410048 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109415054 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109426975 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109453917 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109766960 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109775066 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109818935 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109824896 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109827042 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109852076 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.109865904 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109896898 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.109906912 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.110821009 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.110891104 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.110893011 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.110904932 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.110949039 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.111623049 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.111669064 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.111674070 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.111685038 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.111721039 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.112363100 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.112394094 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.112411022 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.112421989 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.112447023 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.114101887 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.114140987 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.114164114 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.114176035 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.114201069 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.118989944 CET	49759	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.119012117 CET	443	49759	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135490894 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135597944 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135638952 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135677099 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135705948 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.135709047 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135730982 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.135757923 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.135768890 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.135772943 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.136332035 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.136368036 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.136377096 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.136382103 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.136419058 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.136424065 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.136468887 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.139579058 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.140940905 CET	49761	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.140950918 CET	443	49761	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.156754971 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.158226967 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.158252001 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.158333063 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.160129070 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.160142899 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.172915936 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.177206993 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.177229881 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.177592039 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.181463003 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.181559086 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.181581974 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.223330021 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.226835966 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.226897955 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.226917982 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.226933956 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.226963997 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.226983070 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.227070093 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227140903 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227159977 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.227169991 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227193117 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227202892 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.227225065 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.227235079 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227283955 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.227341890 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.235986948 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.248843908 CET	49753	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.248887062 CET	443	49753	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.299483061 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.299523115 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.299711943 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.300431013 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.300453901 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.329920053 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.329962969 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.330046892 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.330307961 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.330322027 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333250046 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333365917 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333394051 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333420038 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333445072 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333455086 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.333482981 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.333503962 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.333524942 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.333817005 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.377758980 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.377770901 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.425715923 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.454369068 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:38.454402924 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:38.454547882 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:38.456068993 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:38.456082106 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:38.483088970 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483148098 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483181000 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483227968 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.483234882 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483278036 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.483720064 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483773947 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483849049 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.483896017 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.484096050 CET	49757	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.484105110 CET	443	49757	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.484386921 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.484402895 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.484488010 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.484863997 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.484874964 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.486012936 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.486228943 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.486264944 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.486630917 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.486758947 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.486864090 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.486877918 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.486957073 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.487116098 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.487221956 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.487293005 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.487301111 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.487638950 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.487879992 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.487946987 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.488008022 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.488169909 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.488240004 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.488401890 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.488468885 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.488545895 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.488594055 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.488603115 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.495131969 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.495348930 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.495383978 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.496279001 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.496347904 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.496620893 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.496650934 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.496718884 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.496828079 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.496838093 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.496912956 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.496928930 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.497344971 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.497673035 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.497754097 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.497759104 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.522988081 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.523255110 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.523278952 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.523628950 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.523935080 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.524003029 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.524046898 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.531332016 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.535329103 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.536721945 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.536750078 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.539340973 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.552722931 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.568742037 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.568748951 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.608984947 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.609251022 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.609292030 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.610160112 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.610219955 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.610526085 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.610591888 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.610821962 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.610833883 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639079094 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639156103 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639183998 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639214039 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639231920 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.639250040 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639273882 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.639342070 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639427900 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.639450073 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.639492989 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.640305996 CET	49763	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.640326977 CET	443	49763	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646197081 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646272898 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646313906 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646317005 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.646344900 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646359921 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.646392107 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.646420002 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.647023916 CET	49767	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.647037029 CET	443	49767	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.648333073 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.648482084 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.648535967 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.648551941 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.648586035 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.648638010 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.648652077 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649065018 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649110079 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649132013 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.649144888 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649204969 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649236917 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.649247885 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.649368048 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.656784058 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.656908989 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.656979084 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.657651901 CET	49766	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.657665968 CET	443	49766	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.663748980 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.666234016 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.666568041 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:38.666599989 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:38.666699886 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:38.666728020 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.666745901 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.666941881 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:38.666953087 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:38.667779922 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.667861938 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.668170929 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.668242931 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.668346882 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.668363094 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.670006037 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670238972 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670305967 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.670315981 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670435905 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670505047 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.670511961 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670593023 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670672894 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.670679092 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670789957 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670867920 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.670875072 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670900106 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.670947075 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.684376001 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684447050 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684477091 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684499979 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.684508085 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684520960 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684555054 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.684571028 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684619904 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684623957 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.684631109 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.684669018 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.684981108 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.689101934 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.689151049 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.689172029 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.710787058 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.742769003 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.762814045 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.762892008 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.762923956 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.762963057 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.762990952 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763082981 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763108969 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763124943 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.763134956 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763144970 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.763859034 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763886929 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.763935089 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.763943911 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.767575979 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.771843910 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.771938086 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.771982908 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.771996021 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.772007942 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.772084951 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.772126913 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.772133112 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.772161007 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.772177935 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.772201061 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.772938967 CET	49762	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.772954941 CET	443	49762	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.775702953 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.775955915 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.775965929 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.776577950 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.776599884 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.776670933 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.776942968 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.776952982 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.777393103 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.777458906 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.777829885 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.777950048 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.777955055 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.777966976 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.786798954 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.786969900 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.787070990 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.787094116 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.787576914 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.787673950 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.787681103 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.787767887 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.787822008 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.787827969 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.788180113 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.788228035 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.788239956 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.788321018 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.788393974 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.788398981 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789021969 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789079905 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.789086103 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789176941 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789242029 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.789247036 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789330959 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789386988 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.789392948 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789869070 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.789933920 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.789940119 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.790021896 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.790081024 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.790086985 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.807883978 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.807943106 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.807965994 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.807986975 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.808002949 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808052063 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.808073997 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808238029 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808271885 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808295965 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.808304071 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808398008 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.808403969 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.808975935 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809005976 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809042931 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809045076 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.809053898 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809089899 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.809099913 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809139013 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.809870005 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809919119 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809947968 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809959888 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.809968948 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.809998035 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.810019016 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.810025930 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.810074091 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.810075045 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810189009 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810236931 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.810246944 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810494900 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810523987 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810578108 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.810587883 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.810708046 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.810977936 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.811057091 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.811155081 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.811333895 CET	49774	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.811341047 CET	443	49774	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.822731972 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.822741032 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.836338997 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.836534023 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.836575031 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.837107897 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.837172031 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.838093042 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.838145971 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.838743925 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.839467049 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.839550972 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.839663029 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.839675903 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:38.870747089 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.879884005 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.879947901 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.879975080 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880027056 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.880054951 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880172968 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880199909 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.880209923 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880240917 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.880248070 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880264997 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.880302906 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.880527020 CET	49773	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.880542040 CET	443	49773	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.885746956 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:38.904221058 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904321909 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904380083 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904382944 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.904397964 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904448986 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.904455900 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904505968 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904551029 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904555082 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.904565096 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.904609919 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.904895067 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.905005932 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.905057907 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.905324936 CET	49764	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.905340910 CET	443	49764	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.908515930 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.908557892 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.908631086 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.908849001 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.908863068 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.908951998 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.909205914 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.909219980 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.909579039 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.909874916 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.909944057 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.910099983 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.910115004 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.910192013 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.910227060 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.931437016 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931449890 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.931500912 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931533098 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931559086 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.931560040 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931571960 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931617975 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.931622982 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931633949 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931672096 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.931838989 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.931879997 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.931890965 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932095051 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932291031 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932337046 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932346106 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.932353020 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932365894 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.932380915 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932394981 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932436943 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.932447910 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932491064 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.932518959 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932574034 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.932579994 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932606936 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932651997 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.932658911 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.932698965 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932775021 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932816029 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932856083 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.932871103 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932884932 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.932908058 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.932956934 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.933129072 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.933170080 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.933190107 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.933197021 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.933219910 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.933242083 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.933993101 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934031010 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934062958 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934072018 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.934077978 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934104919 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.934933901 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934969902 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.934984922 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.934992075 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.935015917 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.935561895 CET	49775	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.935587883 CET	443	49775	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.935847044 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.936207056 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.936220884 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.936558962 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.936954975 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.937021971 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.937124968 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:38.937155962 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:38.938532114 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.938610077 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:38.938617945 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:38.938735008 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055083036 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055139065 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055192947 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055216074 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055231094 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055243015 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055277109 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055282116 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055423021 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055481911 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055488110 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055536032 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055653095 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055727959 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055860043 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.055908918 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.055988073 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056022882 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056032896 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056037903 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056071043 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056087017 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056092024 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056106091 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056128979 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056135893 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056181908 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056194067 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056287050 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056776047 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056828976 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056854010 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056870937 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.056899071 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.056914091 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057259083 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057308912 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057322979 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057341099 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057364941 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057379007 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057398081 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057413101 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057430983 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.057456017 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057456970 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.057482958 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.059978008 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060035944 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060075045 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060086012 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060112953 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060146093 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060146093 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060158968 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060185909 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060192108 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060223103 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060237885 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060256004 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060282946 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060830116 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.060906887 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.060919046 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061011076 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061086893 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061099052 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061109066 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061157942 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061425924 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061479092 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061496019 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061500072 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061515093 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061532974 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061547041 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.061548948 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061590910 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.061602116 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.062360048 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.085733891 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:39.086430073 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:39.086450100 CET	443	49770	142.250.186.142	192.168.2.16
Oct 31, 2024 01:09:39.086498976 CET	49770	443	192.168.2.16	142.250.186.142
Oct 31, 2024 01:09:39.089386940 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.089617968 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.089646101 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.090040922 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.090317011 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.090385914 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.090466976 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.094263077 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:39.094325066 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:39.094419003 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:39.094600916 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:39.094629049 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:39.131341934 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.139751911 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.173254013 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.173326969 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.173515081 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.174113035 CET	49776	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.174165010 CET	443	49776	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.175157070 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.175252914 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.175306082 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.175769091 CET	49777	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.175789118 CET	443	49777	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.178237915 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.178278923 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.178373098 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.178504944 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.178519964 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.178550959 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.178591013 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.178607941 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.178765059 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.178780079 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.178782940 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.178847075 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.178869963 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.178889036 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.178919077 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.178935051 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179142952 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179168940 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179229021 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179246902 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179284096 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179299116 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179408073 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.179430008 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.179506063 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179522991 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179568052 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.179630041 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179630041 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179647923 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179706097 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.179725885 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.179725885 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179775953 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179791927 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.179847956 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.179862022 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180025101 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.180027962 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180037975 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.180134058 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180154085 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180191994 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180205107 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180232048 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180272102 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180525064 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180546999 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180600882 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180618048 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180644989 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180663109 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180674076 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180737972 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180757999 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180813074 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180911064 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.180931091 CET	443	49765	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:39.180953979 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.181046009 CET	49765	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:39.183557034 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.183568954 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.183634043 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.183808088 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.183823109 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256105900 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256205082 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256241083 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256273031 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256282091 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.256304979 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256323099 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.256402969 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256433964 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256473064 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.256483078 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.256531000 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.256794930 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.287997961 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.288285971 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.288300037 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.289453030 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.289546013 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.290543079 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.290623903 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.290714979 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.297755003 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.297765970 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.322949886 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.323025942 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.327279091 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.327286959 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.327522039 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.335330963 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.345769882 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.345778942 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.345796108 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.369976997 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.372783899 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373018980 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373069048 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.373078108 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373224020 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373265028 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.373270988 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373766899 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373799086 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373816967 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.373841047 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.373899937 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.373908997 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.386152983 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.386440992 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.386516094 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.386989117 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.387372017 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.387461901 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.387500048 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.392816067 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.411334991 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.424766064 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.424788952 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.434375048 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.434603930 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.434638977 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.434787989 CET	443	49780	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.434791088 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.435094118 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.435127020 CET	49780	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.435153961 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.435256004 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.435324907 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.435525894 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:39.435550928 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:39.440759897 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.471755028 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.490715981 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.490796089 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.490839005 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.490842104 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.490871906 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.491000891 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.491144896 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.491199970 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.491242886 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.491270065 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.491282940 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.491383076 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.491631031 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.518749952 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.519006968 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.519021034 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.520273924 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.520607948 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.520745993 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.520777941 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.535753012 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.536134005 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.536262035 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.536314964 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.536323071 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540162086 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540268898 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540319920 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540334940 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.540390968 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540452957 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540482998 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.540499926 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540555000 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.540569067 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540626049 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540674925 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540676117 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.540688992 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.540734053 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.540745974 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.566740990 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.582755089 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.582842112 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.607708931 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.607798100 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.607853889 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.607868910 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.608014107 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.608047009 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.608055115 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.608062983 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.608103991 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.608109951 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.617094994 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.617162943 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.617238998 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.649326086 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.649363995 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.649389029 CET	49778	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.649395943 CET	443	49778	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.653218985 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.653332949 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.653347969 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.657807112 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.657913923 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.657959938 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.657979012 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.658008099 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.658221006 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.658348083 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.658449888 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.658509016 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.658652067 CET	49781	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.658685923 CET	443	49781	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.689363956 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.689631939 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.689714909 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.689742088 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.689953089 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.690011024 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.690017939 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.690108061 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.690191984 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.690241098 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.690248013 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.690287113 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.690720081 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.700488091 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.700527906 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.701183081 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.701473951 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:39.701483011 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:39.707771063 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.725470066 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.725478888 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.725519896 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.725857973 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.725917101 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.725925922 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.726033926 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.726082087 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.726093054 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.738768101 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.738796949 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.770767927 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.771229982 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.771243095 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.771301985 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.771348000 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.771354914 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.771393061 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.774477959 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:39.774502993 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:39.774785995 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:39.775276899 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:39.775290966 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:39.783766031 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:39.783781052 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:39.783863068 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:39.783871889 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.784094095 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:39.784105062 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:39.784260988 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.784270048 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.784888983 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.785135031 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.785286903 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.785372972 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.785435915 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.785458088 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.785789967 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.785944939 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.786545992 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.786633015 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.786734104 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.786756992 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.787713051 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.788268089 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.788435936 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:39.788467884 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:39.788547993 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:39.788702011 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.788707972 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.788806915 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.788816929 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789011002 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:39.789026022 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:39.789199114 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789213896 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789480925 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.789560080 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789695024 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.789761066 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789835930 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.789856911 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.789864063 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789879084 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.789901972 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.793553114 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:39.793576956 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:39.793853998 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:39.794059038 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:39.794071913 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:39.806333065 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.806525946 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.806582928 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.806610107 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.806690931 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.806755066 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.806761026 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.807183981 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.807229042 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.807244062 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.807375908 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.807570934 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.807576895 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.808024883 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.808093071 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.808098078 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.808214903 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.808259964 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.808265924 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.808942080 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.809010029 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.809015989 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.809099913 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.809200048 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.809251070 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.809257984 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.809514046 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.809843063 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.810030937 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.810118914 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.810126066 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.817528963 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:39.817574024 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:39.817784071 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:39.818434000 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:39.818451881 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:39.822510004 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:39.822525978 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:39.822652102 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:39.822967052 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:39.822981119 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:39.827354908 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.831327915 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.831338882 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.841916084 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.841923952 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.841984987 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.842077971 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.842086077 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.842129946 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.851813078 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.887727976 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.887741089 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.887773037 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.887797117 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.887814045 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.887839079 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.887852907 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.922310114 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.922396898 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.922456980 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923012972 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923032999 CET	443	49784	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923043013 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923151970 CET	49784	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923352003 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923502922 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923561096 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923576117 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923604965 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923727036 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923773050 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923789978 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.923823118 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.923827887 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924216032 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924299002 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924350977 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.924356937 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924391031 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.924468040 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924489021 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.924495935 CET	443	49782	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.924504995 CET	49782	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.959101915 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.959119081 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.959237099 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.959292889 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.959332943 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.959352016 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.959362984 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.959377050 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.974714994 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.974807978 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.974838018 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.974869013 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.974877119 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.974903107 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.974925041 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.975083113 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.975119114 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:39.975127935 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.975131035 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.975143909 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.975192070 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.975193977 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.975200891 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.975234985 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.981169939 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.981297970 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:39.981360912 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:39.999978065 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.000039101 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.000499010 CET	49785	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.000519037 CET	443	49785	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.001574993 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.001671076 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.002012968 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.002099991 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.002132893 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.004954100 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.005008936 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.005017996 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.005124092 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.010691881 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.010987997 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.011092901 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.011540890 CET	49786	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.011554956 CET	443	49786	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.043349981 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.056751966 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.056770086 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.073124886 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.073427916 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.073446035 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.074943066 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.075031996 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.075371027 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.075472116 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.075516939 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.075798988 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.075809956 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.075851917 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.076153994 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.076160908 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.076208115 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.076216936 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.076229095 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.076287031 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.076395988 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.076406956 CET	443	49779	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.076420069 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.076458931 CET	49779	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.091767073 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.091859102 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.091902018 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.091950893 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.091970921 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.092057943 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.092066050 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.092266083 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.092307091 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.092319965 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.092329025 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.092375994 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.092843056 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093123913 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093173981 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.093183041 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093198061 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093241930 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.093251944 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093322039 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093359947 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093360901 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.093372107 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.093421936 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.094162941 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.094240904 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.094281912 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.094289064 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.094297886 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.094351053 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.094357967 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.104756117 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.111579895 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.111628056 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.111736059 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.112035990 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.112056017 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.119338036 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.120759010 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.120778084 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.136764050 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.168766975 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.208940029 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209088087 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209131002 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209134102 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.209146976 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209201097 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.209209919 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209259987 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209300995 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209331036 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.209340096 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209382057 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.209522963 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209605932 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.209646940 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.209661007 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210067987 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210114956 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210140944 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.210155010 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210175991 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.210747957 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210800886 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210825920 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.210833073 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.210851908 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.210876942 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.211415052 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.211488962 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.211509943 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.211550951 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.211565971 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.211571932 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.211608887 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.212367058 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.212414026 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.212446928 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.212455034 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.212469101 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.225943089 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.226216078 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.226284027 CET	443	49788	35.190.80.1	192.168.2.16
Oct 31, 2024 01:09:40.226378918 CET	49788	443	192.168.2.16	35.190.80.1
Oct 31, 2024 01:09:40.252554893 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.252630949 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.252640963 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.252686024 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.255155087 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.295759916 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.295778036 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.296035051 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.296087027 CET	443	49783	216.58.206.68	192.168.2.16
Oct 31, 2024 01:09:40.296147108 CET	49783	443	192.168.2.16	216.58.206.68
Oct 31, 2024 01:09:40.326112032 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326175928 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326201916 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326215982 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326246977 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326257944 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326445103 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326488018 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326493025 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326505899 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326534033 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326544046 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326849937 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326900959 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.326910973 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.326958895 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.327428102 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327472925 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327476978 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.327485085 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327517986 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.327523947 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327536106 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327569008 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.327881098 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.327934980 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.327960014 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328010082 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328035116 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328078985 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328085899 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328098059 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328133106 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328722954 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328774929 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328778028 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328784943 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328821898 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328830957 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328870058 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328876019 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.328885078 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.328927040 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.329634905 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329685926 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.329740047 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329786062 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.329853058 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329895973 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329896927 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.329907894 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329936028 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.329946995 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.329989910 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330002069 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330038071 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330722094 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330769062 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330770969 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330781937 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330817938 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330828905 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330868006 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330877066 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330883980 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.330909014 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.330916882 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.341665983 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.369748116 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.369791985 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.369810104 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.369826078 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.369858027 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.369869947 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.385065079 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.385338068 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.385369062 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.386507988 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.386560917 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.391294003 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.391463041 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.391485929 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.392556906 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 01:09:40.396011114 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.396236897 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.396280050 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.399693966 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.399766922 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.400748014 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.400930882 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.400962114 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.401093960 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.435333014 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.439745903 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.439768076 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.443639040 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.443718910 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.443736076 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.443751097 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.443767071 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.443789959 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.443809032 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.443826914 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.443914890 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.443969965 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444021940 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444036961 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.444044113 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444067001 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.444456100 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444489956 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444515944 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.444530010 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444547892 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.444875002 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444894075 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444927931 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.444937944 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.444951057 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.448467970 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.448487043 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.448524952 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.448537111 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.448565006 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.448925018 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.448944092 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.448980093 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.448988914 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449024916 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.449338913 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449357033 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449398041 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.449407101 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449419975 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.449762106 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449780941 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449820042 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.449831009 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.449843884 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.450536013 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.450555086 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.450587034 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.450597048 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.450615883 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.451024055 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451042891 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451082945 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.451092005 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451106071 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451106071 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.451129913 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451159000 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.451168060 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.451180935 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.451741934 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.451780081 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.451976061 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452030897 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452040911 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.452049017 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452088118 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.452169895 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452189922 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452218056 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.452224970 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.452239037 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.487749100 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.503729105 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.503766060 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.526554108 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526603937 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526639938 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526675940 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.526709080 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526763916 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526786089 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.526799917 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.526864052 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.527292013 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.527483940 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.527517080 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.527574062 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.527586937 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.527654886 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.528182983 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.540220976 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.540290117 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.545444012 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.545444012 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.545480013 CET	443	49794	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.545753956 CET	49794	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.549380064 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549426079 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549457073 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549484015 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.549499989 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549531937 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549541950 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.549550056 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549591064 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549593925 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.549602985 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.549649954 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.549989939 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.551158905 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.551235914 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.560432911 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.560466051 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.560519934 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.560528040 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.560540915 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.560575008 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.560636044 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.560733080 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.567980051 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.567987919 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.568310976 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.569652081 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.570252895 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.570274115 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.570419073 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.570907116 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.570907116 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.570924044 CET	443	49787	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.571019888 CET	49787	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.571557045 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.571567059 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.577451944 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:40.577481031 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:40.577568054 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:40.577838898 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:40.577852964 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:40.578157902 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.578166008 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.578433037 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.578622103 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.578633070 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.584570885 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.584620953 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.584683895 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.584899902 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:40.584914923 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:40.592205048 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.593619108 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.593628883 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.594742060 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.594820976 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.597757101 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.597764969 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.606825113 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.606956005 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.607398987 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.607414961 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.615333080 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.640232086 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:40.640588045 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:40.640608072 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:40.641664982 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:40.641741037 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:40.641942978 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.646729946 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.648648024 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.661314011 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.666610003 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.666743040 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.666773081 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.666800976 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.666817904 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.666841030 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.666874886 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.667078018 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.667117119 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.667123079 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.667197943 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.667223930 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.667263985 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.667272091 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.667332888 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.667983055 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668036938 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668066025 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668091059 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.668093920 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668104887 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668128967 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.668890953 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668920994 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668936968 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.668943882 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.668987036 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.668992996 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.669584990 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.669600964 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.669636011 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.669672966 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.669680119 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.669954062 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:40.670075893 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:40.670504093 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.670516968 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.670701027 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:40.670711040 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:40.671457052 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.671557903 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.672380924 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.672472000 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.672560930 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.672573090 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.675334930 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.675404072 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.676270962 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.676357031 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.676460028 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.676471949 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.692761898 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 01:09:40.709346056 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.711205959 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.711638927 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.711667061 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.712012053 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.714194059 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.714272976 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.714365959 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.714391947 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.722768068 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:40.722767115 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.722767115 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.767096043 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.768547058 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.769876003 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.769901037 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.772275925 CET	49796	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.772320032 CET	443	49796	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.783518076 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.783849955 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.783879995 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.783909082 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.783922911 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.783934116 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.783973932 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.784055948 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.784106016 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.793339014 CET	49792	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.793355942 CET	443	49792	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.813510895 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.813590050 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.813807964 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.815943003 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.815962076 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.815977097 CET	49789	443	192.168.2.16	184.28.90.27
Oct 31, 2024 01:09:40.815984964 CET	443	49789	184.28.90.27	192.168.2.16
Oct 31, 2024 01:09:40.827188015 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.827347040 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.827545881 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.830060959 CET	49797	443	192.168.2.16	3.137.102.166
Oct 31, 2024 01:09:40.830082893 CET	443	49797	3.137.102.166	192.168.2.16
Oct 31, 2024 01:09:40.890006065 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.890028954 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.890089035 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.890408993 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:40.890419960 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:40.897337914 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.897423983 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.897505045 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.899148941 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:40.899179935 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:40.911395073 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:40.911422968 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:40.911504030 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:40.914326906 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:40.914344072 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:40.914371967 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.914459944 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.914514065 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.917409897 CET	49798	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:40.917447090 CET	443	49798	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:40.917751074 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.917778015 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.917788982 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.917850971 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.917869091 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.917916059 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.917934895 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.918020010 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.923489094 CET	49795	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.923502922 CET	443	49795	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.937326908 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.937369108 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.937424898 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.937604904 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:40.937618017 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:40.942912102 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:40.942934990 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:40.943114042 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:40.943273067 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:40.943289042 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:40.996674061 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:40.996714115 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:40.996815920 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:40.997030973 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:40.997045040 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.074928045 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.074994087 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.074995995 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.075006962 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.075056076 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.075217009 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.075278997 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.153795004 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:41.153836012 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:41.153904915 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:41.155045033 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:41.155060053 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:41.174644947 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.174841881 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.174856901 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.176315069 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.176395893 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.176743031 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.176817894 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.176960945 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.176968098 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.188024998 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.188227892 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.188258886 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.189697981 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.189780951 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.190092087 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.190195084 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.190270901 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.190284014 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.194473028 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.194483042 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.194535017 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.194566965 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.194582939 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.194595098 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.195593119 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.195780039 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.195786953 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.197458029 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.197532892 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.197844982 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.198041916 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.198055029 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.198402882 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.198434114 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.198447943 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.198456049 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.198506117 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.198602915 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.198689938 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.198837042 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.198844910 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.199489117 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.199563980 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.200423956 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.200505972 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.200556993 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.200563908 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.226777077 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.240240097 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.240283966 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.240328074 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.240339994 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.240360975 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.240381002 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.242753029 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.242760897 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.242760897 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.244256973 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.244328976 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.251981020 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.252031088 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.306776047 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 01:09:41.310205936 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.310345888 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.310417891 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.312855959 CET	49800	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.312870026 CET	443	49800	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.315587997 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.315629959 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.315654993 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.315665960 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.315696955 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.315732956 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.316024065 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.316068888 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.316782951 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317047119 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317089081 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.317091942 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317121983 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317183018 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317193031 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.317204952 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317259073 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317265987 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.317272902 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317306042 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.317313910 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317358971 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.317393064 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.317399979 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.318528891 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.318547964 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.318619967 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.318933964 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.318944931 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.320005894 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.320075035 CET	443	49803	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.320133924 CET	49803	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.331360102 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.331479073 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.331528902 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.333199024 CET	49801	443	192.168.2.16	151.101.1.140
Oct 31, 2024 01:09:41.333214998 CET	443	49801	151.101.1.140	192.168.2.16
Oct 31, 2024 01:09:41.335163116 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.335202932 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.335232019 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.335243940 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.335268021 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.339488983 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.339550972 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.339560986 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.339818001 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.339917898 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.339931965 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.349196911 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.349239111 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.349308014 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.349582911 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.349603891 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.361323118 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.361471891 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.361526966 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.362209082 CET	49802	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.362217903 CET	443	49802	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.366981030 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.367029905 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.367037058 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.367048025 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.367075920 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.371603966 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.371635914 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.371674061 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.371684074 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.371715069 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.373065948 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.373091936 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.373166084 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.373359919 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.373372078 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.412543058 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.432349920 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.432359934 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.432401896 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.432415009 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.432425976 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.432451963 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.432498932 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.433064938 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.433207035 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.435010910 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.435050964 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.435086012 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.435094118 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.435117960 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.435122967 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.435164928 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.435170889 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.451951027 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.451970100 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.452025890 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.452034950 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.452088118 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.454714060 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.454744101 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.454770088 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.454776049 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.454824924 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.468957901 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.469017029 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.469037056 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.469043970 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.469086885 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.469105959 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.469216108 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.469245911 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.469300985 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.469980955 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.469997883 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.470635891 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.470680952 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.470752001 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.471043110 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.471126080 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.471287966 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.471306086 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.471343994 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.471486092 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.471513987 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.471939087 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.471977949 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.471997023 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.472002983 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.472042084 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.485111952 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.485132933 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.485192060 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.485377073 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:41.485392094 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:41.485611916 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.485655069 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.485680103 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.485687017 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.485726118 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.488758087 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.488816977 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.491492033 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.491712093 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.491734028 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.493163109 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.493216991 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.493529081 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.493604898 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.493643999 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.500734091 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.500782967 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.500809908 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.500821114 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.500843048 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.502960920 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.503004074 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.503011942 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.503976107 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.504235029 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.504256964 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.505572081 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.505636930 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.505918980 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.506021023 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.506026983 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.515168905 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.515185118 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.515237093 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.515258074 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.515295982 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.517515898 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.517553091 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.517584085 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.517591953 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.517652035 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.539329052 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.544728994 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.544745922 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.547336102 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.552778959 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.552862883 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.552874088 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.552886009 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.552926064 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.552947044 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.552998066 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.553883076 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.553919077 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.553961992 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.553970098 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.553987980 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.553998947 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.554018021 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.554188013 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.554202080 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.554622889 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.554691076 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.554697037 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.554727077 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.554766893 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.554938078 CET	49793	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.554949045 CET	443	49793	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.555556059 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.555613995 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.556550980 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.556621075 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.556706905 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.559766054 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.559779882 CET	49673	443	192.168.2.16	204.79.197.203
Oct 31, 2024 01:09:41.559789896 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.566790104 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:41.566821098 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:41.567039013 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:41.567168951 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:41.567182064 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:41.572626114 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.572671890 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.572770119 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.572969913 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:41.573004961 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:41.591756105 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.599328995 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.606764078 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.606774092 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.606777906 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.639940977 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640023947 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640077114 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640120983 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640145063 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.640157938 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640181065 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.640209913 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640253067 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640261889 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.640266895 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.640305996 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.640552044 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.654768944 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.665271997 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.666677952 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.666766882 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.673695087 CET	49805	443	192.168.2.16	35.186.225.155
Oct 31, 2024 01:09:41.673722982 CET	443	49805	35.186.225.155	192.168.2.16
Oct 31, 2024 01:09:41.686742067 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.686753035 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.734756947 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.735642910 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.735984087 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.736007929 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.736259937 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.736367941 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.736414909 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.737339973 CET	49808	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.737360001 CET	443	49808	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.737730026 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.737795115 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.738270044 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.738363981 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.738459110 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.738466978 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.748344898 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.748384953 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.748740911 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.748944998 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:41.748963118 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:41.760756969 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.760842085 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.760898113 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.760941029 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.760953903 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.760974884 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.760996103 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.761272907 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.761327028 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.761358023 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.761363029 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.761404991 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.761409998 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762203932 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762250900 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762274981 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.762281895 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762331009 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762336016 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.762346029 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.762397051 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.762402058 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763254881 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763307095 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763354063 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763400078 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763401985 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.763401985 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.763413906 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.763458014 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.771205902 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:41.771598101 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:41.771625042 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:41.772684097 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:41.772778034 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:41.773150921 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:41.773211956 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:41.773284912 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:41.773296118 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:41.782762051 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.814766884 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:41.830296040 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.830544949 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.830559969 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.831908941 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.831969976 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.832302094 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.832361937 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.832453012 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.876279116 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876378059 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876439095 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876496077 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876502037 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.876516104 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876542091 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.876717091 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876861095 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.876912117 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.877088070 CET	49804	443	192.168.2.16	104.17.24.14
Oct 31, 2024 01:09:41.877099991 CET	443	49804	104.17.24.14	192.168.2.16
Oct 31, 2024 01:09:41.878765106 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.878777027 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:41.891074896 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.891237974 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.891298056 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.891856909 CET	49806	443	192.168.2.16	3.136.10.62
Oct 31, 2024 01:09:41.891876936 CET	443	49806	3.136.10.62	192.168.2.16
Oct 31, 2024 01:09:41.920800924 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.921036005 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.921056032 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.922509909 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.922586918 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.922890902 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.922962904 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.923018932 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.925751925 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:41.955358028 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.955620050 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.955636978 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.957071066 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.957150936 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.957468987 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.957554102 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.957598925 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.967331886 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.973756075 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.973769903 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.981615067 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.993102074 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.993128061 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.994599104 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.994750023 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.995775938 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.995862961 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.995973110 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:41.995981932 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:41.999339104 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.005758047 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.005773067 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.007741928 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.007826090 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.010518074 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.010531902 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.010770082 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.015732050 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:42.015803099 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:42.015889883 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:42.016510010 CET	49807	443	192.168.2.16	18.66.102.102
Oct 31, 2024 01:09:42.016522884 CET	443	49807	18.66.102.102	192.168.2.16
Oct 31, 2024 01:09:42.020847082 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.020879030 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.020960093 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.021408081 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.021440983 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.021622896 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.021637917 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.021656036 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.021739006 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.021899939 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.021918058 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.037770987 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.053766012 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.053769112 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.054682970 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.054826975 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.055010080 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.056447983 CET	49811	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.056463957 CET	443	49811	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.075514078 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078403950 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078413010 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078471899 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.078481913 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078543901 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.078736067 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.078774929 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078908920 CET	443	49809	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.078907967 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.078928947 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.078955889 CET	49809	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.084191084 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.084439039 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.084500074 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.085326910 CET	49812	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.085344076 CET	443	49812	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.086276054 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.086515903 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.086546898 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.087629080 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.087692976 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.088388920 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.088577986 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.088690042 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.088782072 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.088840961 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.088974953 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.088995934 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.089926004 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.090006113 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.090792894 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.090878010 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.090939045 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.090977907 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.095241070 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.095448971 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.095463991 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.096888065 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.096965075 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.097253084 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.097332001 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.097413063 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.097419977 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.117084980 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.117305040 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.117314100 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.120829105 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.120901108 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.121196032 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.121351957 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.121367931 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.123330116 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.123790979 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.123892069 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.123948097 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.124609947 CET	49813	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:42.124636889 CET	443	49813	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:42.133761883 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.133781910 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.133810997 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.149862051 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.165864944 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.165890932 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.181744099 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.213783979 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.299716949 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.304625988 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.304688931 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.304723978 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.314464092 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.320420980 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.321635008 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.321680069 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.325321913 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.325396061 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.325489998 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.325710058 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.325741053 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.327332973 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.327368975 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.327447891 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.327496052 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.328139067 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.328160048 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.328527927 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.328736067 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.328746080 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.329145908 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.329185963 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.329246998 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.329673052 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.329687119 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.330432892 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.330493927 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.330503941 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.343142033 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.343209028 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.343230009 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.343554020 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.343600035 CET	443	49816	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.343655109 CET	49816	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.345328093 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.345704079 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.345731020 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.346054077 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346074104 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.346158981 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346359015 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346410036 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.346520901 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346602917 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346626043 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.346735001 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.346754074 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.346792936 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.346807003 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.346813917 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.346875906 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.347059011 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.347090006 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.347681999 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.347712040 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.347826958 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:42.347843885 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:42.348169088 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.348264933 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.348634005 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.348654032 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.350811005 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.350876093 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.350892067 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.357295990 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.357321024 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.357610941 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.357806921 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.357830048 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.361844063 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361862898 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361871004 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361880064 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361910105 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361941099 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.361963987 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.361978054 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.362004995 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.362219095 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.362287045 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.362296104 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.362432957 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.362477064 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.364057064 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.364116907 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.364345074 CET	49817	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.364366055 CET	443	49817	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.367547035 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.367593050 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.367764950 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.367939949 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.367964983 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.373933077 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.373954058 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.373971939 CET	49810	443	192.168.2.16	20.12.23.50
Oct 31, 2024 01:09:42.373976946 CET	443	49810	20.12.23.50	192.168.2.16
Oct 31, 2024 01:09:42.396466017 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.396693945 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.396708012 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.397733927 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.397799015 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.398082972 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.398140907 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.398199081 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.403738976 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.403757095 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.409575939 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.409822941 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.409876108 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.410262108 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.410588980 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.410669088 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.410712004 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.439371109 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.442996979 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.443305969 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.443372011 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.443568945 CET	443	49815	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.443593979 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.443629026 CET	49815	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.446167946 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.446255922 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.446382046 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.446563005 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.446599960 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.451373100 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.451750040 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.451766968 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.451770067 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.487006903 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.487287998 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.487348080 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.487376928 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.498790979 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.503168106 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.503307104 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.503320932 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.514761925 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 01:09:42.524408102 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.524476051 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.524674892 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.525175095 CET	49822	443	192.168.2.16	172.67.74.152
Oct 31, 2024 01:09:42.525219917 CET	443	49822	172.67.74.152	192.168.2.16
Oct 31, 2024 01:09:42.546755075 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.631521940 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.631798029 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.631807089 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.633148909 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.633497000 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.633703947 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.633703947 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.633728027 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.633863926 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.641933918 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.642007113 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.642010927 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.642025948 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.642086029 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.642091990 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.674752951 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.690757990 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.707176924 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.707461119 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.707590103 CET	443	49818	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.707818031 CET	49818	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.713336945 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.713376999 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.713524103 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.713748932 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.713777065 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.762269020 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762283087 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762309074 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762320042 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762332916 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762382030 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.762382030 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.762392044 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.762885094 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.762947083 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.762953997 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.763003111 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.763026953 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.763124943 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.763148069 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.763212919 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.800578117 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.800587893 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.800599098 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.800616026 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.800658941 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.800668955 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.800699949 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.838315964 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.838551044 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.838670015 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.839196920 CET	49824	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.839215040 CET	443	49824	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.841691017 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.841785908 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.841898918 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.842171907 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:42.842202902 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:42.850768089 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.862190962 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.862411976 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.862427950 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.863888025 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.863950014 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.864263058 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.864339113 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.864378929 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.877357006 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.877365112 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.877393007 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.877403975 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.877429962 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.877438068 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.877480984 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.877480984 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.881556034 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.881565094 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.881635904 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.881645918 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.881705999 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.881745100 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.881792068 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.903408051 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.903415918 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.903439999 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.903451920 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.903481007 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.903496981 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.903539896 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.903539896 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.907341003 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.908004045 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.908071041 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.913769007 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.913778067 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:42.923182964 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.923221111 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.923285007 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.923310041 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.923367977 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.931493998 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.931557894 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.931576014 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.935882092 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.935918093 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.935996056 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.935996056 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.936012030 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.960741043 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:42.973723888 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.973943949 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.974005938 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.975049973 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.975123882 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.975414991 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.975485086 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.975584984 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:42.975605011 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:42.976741076 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.976872921 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.988245010 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.988257885 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.988296986 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.988331079 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.988343954 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.988377094 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.988406897 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.996521950 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.996531010 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.996561050 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.996594906 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.996602058 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.996613026 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:42.996646881 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.996678114 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:42.998950958 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.998966932 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.999054909 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:42.999062061 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:42.999109030 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.008455038 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.016709089 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.016746998 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.016773939 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.016779900 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.016798973 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.017152071 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.017173052 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.020956993 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.021034956 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.021497965 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.021671057 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.021718979 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.022525072 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.022574902 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.022614956 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.022635937 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.022667885 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.022825003 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.022902012 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.022907972 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.022978067 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.024760962 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.027833939 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.028326988 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.028347969 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.033293009 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.033371925 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.033386946 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.033438921 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.034997940 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.035047054 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.035108089 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.035108089 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.035115957 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.035212994 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.043951988 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.044015884 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.049426079 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.049467087 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.049493074 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.049509048 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.049540997 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.049598932 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.049627066 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.049912930 CET	49820	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.049942970 CET	443	49820	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.051925898 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.051958084 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.051996946 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.052011967 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.052040100 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.052040100 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.054861069 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.054903984 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.054971933 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.055239916 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.055257082 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.058779001 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.059113026 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.059154987 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.060158968 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.060240030 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.060513020 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.060586929 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.060648918 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.060683966 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.067823887 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.067854881 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.067919970 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.067934036 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.067965031 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.067987919 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.068003893 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.068057060 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.068129063 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.068619013 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.068646908 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.072783947 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.072801113 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.082982063 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.083012104 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.083058119 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.083070993 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.083115101 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.083143950 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.089993954 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.090071917 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.103977919 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.104016066 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.104075909 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.104089022 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.104103088 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.104772091 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.104790926 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.110081911 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:43.110169888 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:43.110219002 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:43.110748053 CET	49823	443	192.168.2.16	18.66.102.64
Oct 31, 2024 01:09:43.110759974 CET	443	49823	18.66.102.64	192.168.2.16
Oct 31, 2024 01:09:43.111051083 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.111082077 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.111115932 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.111131907 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.111174107 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.117810011 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.117897034 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.117897034 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.118092060 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.118297100 CET	49819	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.118314028 CET	443	49819	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.120739937 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.152765036 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.162446022 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.163803101 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.163872004 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.163913965 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.172451019 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.172506094 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.172522068 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.180437088 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.180649042 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.180665016 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.182080984 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.182142019 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.183177948 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.183254957 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.183351994 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.183360100 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.184174061 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.184242010 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.184256077 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.184572935 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.184621096 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.184813976 CET	443	49835	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.184828997 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.184858084 CET	49835	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.187467098 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.187700987 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.187714100 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.188826084 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.188890934 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.189317942 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.189341068 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.189408064 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.189460039 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.189483881 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.189574957 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.189598083 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.190798998 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.190896988 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.191135883 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.191251993 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.191278934 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.191329956 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.192167997 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.192393064 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.192409992 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.193962097 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.194036007 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.194289923 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.194365978 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.194444895 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.194452047 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.210815907 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.211138010 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.211148024 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.211765051 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.211936951 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.211946964 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.212033987 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.212094069 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.212356091 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.212413073 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.212493896 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.212502003 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.213507891 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.213572979 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.213819981 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.213898897 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.213905096 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.213922024 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.231854916 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.231937885 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.231940985 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.231947899 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.231956959 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.248467922 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.263770103 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.263775110 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.263782024 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.279773951 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.280050039 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.311552048 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.311582088 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.311640978 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.311670065 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.311749935 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.328474045 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.329097986 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.329118967 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.330871105 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.331362963 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.331576109 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.331588030 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.334692001 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.337622881 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.337642908 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.338661909 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.338742971 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.340388060 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.340466022 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.340692043 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.340758085 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.340774059 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.357161045 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.357192039 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.375391960 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.389746904 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.399012089 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.400878906 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.400954008 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.400964975 CET	443	49834	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.400974035 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.401000977 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.401019096 CET	49834	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.405772924 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.452244997 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.452698946 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.452756882 CET	443	49836	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.452809095 CET	49836	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.454401016 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.454658985 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.454690933 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.455924988 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.456237078 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.456363916 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.456409931 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.465549946 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.465632915 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.466178894 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.466228008 CET	443	49826	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.466402054 CET	49826	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.467016935 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.467027903 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.467076063 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.468214989 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.468242884 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.468506098 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.468547106 CET	443	49832	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.468554020 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.468597889 CET	49832	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.469856024 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.469868898 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.471026897 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.471045971 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.471118927 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.471332073 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.471344948 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.477858067 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.477912903 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.479849100 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.479880095 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.479945898 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.482372999 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.482383013 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.483594894 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.484133959 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.484738111 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.484750032 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.487596035 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.487607956 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.488029003 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.488101006 CET	443	49828	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.488168001 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.488193989 CET	49828	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.488220930 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.488414049 CET	443	49827	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.488464117 CET	49827	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.493843079 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.500793934 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.509049892 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.509095907 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.509255886 CET	443	49830	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.509259939 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.509308100 CET	49830	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.513780117 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.513789892 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.513998985 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.515079021 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.515089989 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.515685081 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.515703917 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.515773058 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.515911102 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.515921116 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.515995979 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.516432047 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.516438961 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.516444921 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.516514063 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.516577005 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.516872883 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.516880989 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.516940117 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.517005920 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.517015934 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.517277002 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.517307043 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.517406940 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:43.517417908 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:43.628118038 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.629129887 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.629200935 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.629225969 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.642978907 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.642978907 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.642992020 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.643045902 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.643049955 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.643071890 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.643806934 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.643863916 CET	443	49831	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.643928051 CET	49831	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.646822929 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.646898985 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.647145987 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.647350073 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:43.647378922 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:43.648474932 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.648500919 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.648730040 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.648905993 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:43.648917913 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:43.657422066 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.657732964 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.658119917 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.658677101 CET	49839	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:43.658699036 CET	443	49839	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:43.682795048 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.682823896 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.682885885 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.683075905 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:43.683088064 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:43.690763950 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.806328058 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.806615114 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.806667089 CET	443	49838	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:43.806819916 CET	49838	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:43.909940958 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.910181999 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.910212040 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.910556078 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.910953045 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.911034107 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.911118031 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:43.925806046 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.926012993 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.926028967 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.926356077 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.926647902 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.926711082 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:43.926817894 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:43.951361895 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:43.967371941 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.244524002 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.244621038 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.244618893 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.244690895 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.244739056 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.324039936 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.324348927 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.324367046 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.325274944 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.325297117 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.325356007 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.325356960 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.325371981 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.325414896 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.325459957 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.325491905 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.325872898 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.325947046 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.326179981 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.326232910 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.326535940 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.326544046 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.326586962 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.326618910 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.327428102 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.327507019 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.327588081 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.327594995 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.327918053 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.327934027 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.335303068 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.335560083 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.335576057 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.337047100 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.337143898 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.337455988 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.337533951 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.337568998 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.348203897 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.348499060 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.348507881 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.349934101 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.350006104 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.350287914 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.350364923 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.350460052 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.350469112 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.363729000 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.363740921 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.363796949 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.363816023 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.363903046 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.363939047 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.363991976 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.364496946 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.364829063 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.364845991 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.365226030 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.365298033 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.365936041 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.365984917 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.366976976 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.366976976 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.367002964 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.367053032 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.374772072 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.374794006 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.377829075 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.378079891 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.378096104 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.379554987 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.379635096 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.380449057 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.380554914 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.380611897 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.380649090 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.383335114 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.383491039 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.383670092 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.383697033 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.383737087 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.383883953 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.383897066 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.384282112 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.384362936 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.385202885 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.385282040 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.385299921 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.385349989 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.385587931 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.385685921 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.385689020 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.385756969 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.385891914 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.385916948 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.385963917 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.385972023 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.390774012 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.390774012 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.390789032 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.398727894 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.399033070 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.399043083 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.400363922 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.400533915 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.403016090 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.403091908 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.403208017 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.403323889 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.403336048 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.403404951 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.405435085 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.405483961 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.405508041 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.405527115 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.405559063 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.405600071 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.406785965 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.406795979 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.413944006 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.414004087 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.414030075 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.414047003 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.414096117 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.421766996 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.421782017 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.437753916 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.437783957 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.437786102 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.449580908 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.449593067 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.449625015 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.449661016 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.449676037 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.449697971 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.449738979 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.453805923 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.453818083 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.453830004 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.456336021 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.456394911 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.468755007 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.478877068 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.478948116 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.478981018 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.479007006 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.479024887 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.479137897 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.480566025 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.480624914 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.482844114 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.482901096 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.484359980 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.484580994 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.484611988 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.485538006 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.485609055 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.485903025 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.485965014 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.486078978 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.486094952 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.489434958 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.489499092 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.489523888 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.489551067 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.489572048 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.489594936 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.497349024 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.497472048 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.497503996 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.497530937 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.497545958 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.497555971 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.497586012 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.497600079 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.498554945 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.498617887 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.498874903 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.498931885 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.499028921 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.499800920 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.507987022 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.508044958 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.508083105 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.508115053 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.508136034 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.508162022 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.510761976 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.510818005 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.510862112 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.510907888 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.521565914 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.521639109 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.526401997 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.526631117 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.526648998 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.526984930 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.527049065 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.528167963 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.528238058 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.528508902 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.528590918 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.528696060 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.528740883 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.531759977 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.537687063 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.537755013 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.537770033 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.537817001 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.537978888 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.538031101 CET	443	49842	157.240.0.6	192.168.2.16
Oct 31, 2024 01:09:44.538096905 CET	49842	443	192.168.2.16	157.240.0.6
Oct 31, 2024 01:09:44.541018963 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.541052103 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.541130066 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.541383028 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.541399002 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.543344975 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.547770023 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.547785997 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.549276114 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.549305916 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.549510956 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.549685001 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.549700975 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.573414087 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.573479891 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.573499918 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.573533058 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.573550940 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.574152946 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.574234962 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.574246883 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.579754114 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.579777956 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.588354111 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.588391066 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.588423967 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.588433981 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.588460922 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.588464022 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.588505030 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.588515043 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.588565111 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.596008062 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.597943068 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.598030090 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.604846954 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.604865074 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.604916096 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.604954958 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.605606079 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.605642080 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.605835915 CET	443	49845	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.605863094 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.605904102 CET	49845	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.608547926 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.608637094 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.609390974 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.609440088 CET	443	49844	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.609565973 CET	49844	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.610652924 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.610691071 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.610783100 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.610975981 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.610991001 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.612874985 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.612909079 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.612983942 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.613156080 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.613169909 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.613992929 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.614049911 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.614269972 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.614308119 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.614487886 CET	443	49841	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:44.614548922 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.614567041 CET	49841	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:44.617697001 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.617708921 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.617779016 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.618400097 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.618432045 CET	443	49846	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.618489981 CET	49846	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.626760960 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.646306038 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.646370888 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.646678925 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.646934986 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.646976948 CET	443	49843	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.647037983 CET	49843	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.647682905 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.647753954 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.647782087 CET	443	49847	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.648818016 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.648849010 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.649027109 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.649049044 CET	49847	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.649063110 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.649446011 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.649463892 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.655448914 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.655565023 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.655592918 CET	443	49850	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.655899048 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.655916929 CET	49850	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.659599066 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.659643888 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.659706116 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.659749031 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.659786940 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.659847975 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.660002947 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.660022974 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.660135984 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.660155058 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.671710014 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.689773083 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.689785004 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.690622091 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.690701008 CET	443	49849	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.690774918 CET	49849	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.693018913 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.693044901 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.693126917 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.693312883 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.693327904 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.699515104 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.703305006 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.703336000 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.703418970 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.703581095 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.703592062 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.721760988 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.721780062 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.722165108 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.722232103 CET	443	49848	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.722294092 CET	49848	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.723831892 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.723882914 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.723953962 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.724126101 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.724145889 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.724720955 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.724761009 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.724847078 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.725068092 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.725083113 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.748449087 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.748456955 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.748816013 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.748899937 CET	443	49851	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:44.749006987 CET	49851	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:44.750246048 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.750257969 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.750325918 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.750494957 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.750508070 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.751102924 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.751117945 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.751318932 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.751512051 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:44.751522064 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:44.765445948 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.765544891 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.766124964 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.766159058 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.766288996 CET	443	49852	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:44.766345024 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.766360998 CET	49852	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:44.767415047 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.767431021 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.767503977 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.767673969 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:44.767690897 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:44.769144058 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.769155025 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.769308090 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.769506931 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.769521952 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.778857946 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.778871059 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.778934956 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.779467106 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.779498100 CET	443	49853	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:44.779583931 CET	49853	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:44.786866903 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.786938906 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.786953926 CET	443	49854	216.58.206.66	192.168.2.16
Oct 31, 2024 01:09:44.787328005 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.787349939 CET	49854	443	192.168.2.16	216.58.206.66
Oct 31, 2024 01:09:44.789246082 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.789268970 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.789424896 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.789614916 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:44.789628983 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:44.864995956 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 01:09:44.928746939 CET	49678	443	192.168.2.16	20.189.173.10
Oct 31, 2024 01:09:45.168773890 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 01:09:45.389569044 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.389853001 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.389919043 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.390928030 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.391002893 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.392023087 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.392092943 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.392190933 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.392209053 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.415178061 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.415596008 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.415617943 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.416543007 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.416620970 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.416944027 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.417007923 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.417143106 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.417176008 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.439785004 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.462071896 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.462421894 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.462452888 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.463459015 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.463525057 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.463808060 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.463877916 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.463958979 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.463987112 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.470839024 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.495351076 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.495605946 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.495626926 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.497066021 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.497131109 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.497421026 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.497497082 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.497577906 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.497586966 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.516732931 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.517051935 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.517079115 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.517750025 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.517784119 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.518510103 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.518590927 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.518847942 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.518922091 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.518985987 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.519006014 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.520838022 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.521003008 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.521011114 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.521533012 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.521598101 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.522538900 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.522608042 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.522800922 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.522878885 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.522974968 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.522986889 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.530930042 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.531151056 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.531203985 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.532730103 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.532826900 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.533193111 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.533281088 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.533344030 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.533381939 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.541491985 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.541744947 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.541760921 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.542285919 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.542377949 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.542469978 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.542772055 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.542846918 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.543243885 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.543302059 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.543365955 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.543637037 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.543785095 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.543790102 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.543872118 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.543976068 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.544018030 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.544035912 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.544044018 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.549752951 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.565762043 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.565774918 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.565776110 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.565805912 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.571918011 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.572253942 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.572284937 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.572594881 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.572670937 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.573191881 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.573462963 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.573462963 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.573523998 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.573638916 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.581820011 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.581845999 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.593046904 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.593429089 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.593441963 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.597131968 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.597315073 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.597556114 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.597556114 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.597568989 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.597629070 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.597790956 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.598524094 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.599798918 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.599813938 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.600321054 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.600483894 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.601290941 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.601345062 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.601492882 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.601612091 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.601660013 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.601677895 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.601690054 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.601727009 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.602704048 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.602804899 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.603102922 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.603102922 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.603125095 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.603168964 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.606802940 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.607008934 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.607018948 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.608006954 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.608315945 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.608315945 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.608383894 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.608419895 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.613759041 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.613760948 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.613769054 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.614166021 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.615576029 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.615591049 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.616394997 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.617482901 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.617484093 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.617537022 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.617599010 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.631578922 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.636603117 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.636857033 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.636868954 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.638427973 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.638617992 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.638623953 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.638679981 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.638772964 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.638894081 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.638942003 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.639178038 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.639215946 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.639571905 CET	49856	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.639609098 CET	443	49856	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.640578985 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.640608072 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.642256975 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.642369032 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.642383099 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.645775080 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.645781994 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.645782948 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.645798922 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.645807981 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.645828009 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.649318933 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.649359941 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.649525881 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.649660110 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.649671078 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.651355982 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.661746979 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.661756992 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.661770105 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.661802053 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.692807913 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.692807913 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.692837954 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.692871094 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.692902088 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.708807945 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.728537083 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.728616953 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.728641987 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.728657961 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.728722095 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.728763103 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.740780115 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.772783041 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 01:09:45.772790909 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.782967091 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.792399883 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.792414904 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.792668104 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.793132067 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.793175936 CET	443	49858	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.793323040 CET	49858	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.804301977 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.813369989 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.820969105 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.824217081 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.824419022 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.827399969 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.827403069 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.827433109 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.827497959 CET	443	49862	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.827641010 CET	49862	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.827759981 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.827866077 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.827874899 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.837033987 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.837049007 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.839575052 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.839648008 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.839854002 CET	443	49861	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.839879990 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.839914083 CET	49861	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.847084045 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.847121954 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.847279072 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.847383022 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.847409010 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.851906061 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.851953030 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.853521109 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853529930 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853559017 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.853569984 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.853585005 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853615999 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.853626966 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853632927 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.853646994 CET	443	49860	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.853668928 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853677988 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.853682041 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.853683949 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.853697062 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.853754044 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.853758097 CET	49860	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.853857994 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.854228973 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.854651928 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.854718924 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.854980946 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.854984999 CET	49868	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.855016947 CET	443	49868	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.855366945 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.855406046 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.857351065 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.857402086 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.857562065 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.857687950 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.857733011 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.867772102 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.867779016 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.867798090 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.867810011 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.868170023 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.868238926 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.868427038 CET	443	49863	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.868474007 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.868489027 CET	49863	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.868489981 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.868552923 CET	443	49859	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.868666887 CET	49859	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.871213913 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.871371984 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.871449947 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.871485949 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.871526957 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.871534109 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.871577978 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.871583939 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.871756077 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.871762037 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.871843100 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.871857882 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.875164986 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.875233889 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.875608921 CET	443	49866	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:45.875655890 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.875658035 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.875689983 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.875709057 CET	49866	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:45.875866890 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.876004934 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:45.876034021 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:45.882122993 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.890000105 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.890086889 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.890134096 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.890173912 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.890218019 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.896689892 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.896729946 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.896934032 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.896945000 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.897125006 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.899079084 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.899230957 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.899239063 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.899671078 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.899710894 CET	443	49857	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.899749994 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.899766922 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.899801016 CET	49857	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.900474072 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.900621891 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.901417971 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.901423931 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.901452065 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.901454926 CET	443	49865	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.901464939 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.901551008 CET	49865	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.901554108 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.901834965 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.901849985 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.902142048 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.902205944 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.902371883 CET	443	49869	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:45.902447939 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.902448893 CET	49869	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:45.903568029 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.903626919 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.903768063 CET	443	49864	142.250.186.102	192.168.2.16
Oct 31, 2024 01:09:45.903836012 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.903836012 CET	49864	443	192.168.2.16	142.250.186.102
Oct 31, 2024 01:09:45.905111074 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.905127048 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.905256033 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.905524969 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:45.905536890 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:45.931757927 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.931772947 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.934143066 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.934175014 CET	443	49867	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:45.934292078 CET	49867	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:45.946805000 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.946820021 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.947562933 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.947683096 CET	443	49870	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.947904110 CET	49870	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.949651957 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.949688911 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.949871063 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.950109005 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:45.950120926 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:45.976933956 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977015018 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977058887 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.977071047 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977118015 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977160931 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.977161884 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.977515936 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977658987 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.977677107 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.977890015 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.978254080 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.978286028 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.978324890 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.978338957 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.978379965 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.978579998 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.987689018 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.987726927 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.987804890 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.987804890 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.987822056 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.995886087 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.996217966 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:45.996225119 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:45.996356010 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.003817081 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:46.003952980 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.009110928 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:46.009427071 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.014341116 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:46.014425039 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:46.014602900 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.014614105 CET	443	49855	157.240.253.1	192.168.2.16
Oct 31, 2024 01:09:46.014642954 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.014703989 CET	49855	443	192.168.2.16	157.240.253.1
Oct 31, 2024 01:09:46.489283085 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:46.489327908 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:46.489386082 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.489414930 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:46.489626884 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:46.489641905 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:46.490248919 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.490267992 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.490638018 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.490952969 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.491029024 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.491086006 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.497401953 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.497797012 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.497809887 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.498774052 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.498927116 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.499350071 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.499411106 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.499512911 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.531342030 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.533792973 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.547338009 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.549803972 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.549812078 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.596756935 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.689892054 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.690149069 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.690166950 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.691607952 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.691675901 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.691946030 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.692013025 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.692097902 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.692107916 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.694643021 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.695764065 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.695841074 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.697089911 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.697191954 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.697945118 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.698072910 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.698185921 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.698204041 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.717952013 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.718180895 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.718202114 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.719155073 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.719341040 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.719368935 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.719643116 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.719707966 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.720014095 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.720091105 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.720201015 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.720227957 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.720813036 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.720890045 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.721164942 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.721251965 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.721280098 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.727360964 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.727566957 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.727576017 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.728091002 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.728161097 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.729089975 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.729145050 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.729268074 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.729343891 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.729430914 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.729439020 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:46.740756035 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.740772009 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.745598078 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.745652914 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.745712042 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.746167898 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.746186972 CET	443	49872	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.746196032 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.746231079 CET	49872	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.750924110 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.751157999 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.751189947 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.752711058 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.752765894 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.753138065 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.753242970 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.753341913 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.753357887 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.767333984 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.768529892 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.768575907 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.768640041 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.768651962 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.768663883 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.768755913 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.768763065 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.769748926 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.769785881 CET	443	49871	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:46.769855976 CET	49871	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:46.770622969 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.770893097 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.770924091 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.771254063 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.771341085 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.771756887 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.771764994 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.771780014 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.771799088 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:46.771821022 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.771879911 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.771929026 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.772063017 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.772094965 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.772166967 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.772552013 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.772619009 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.772735119 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.772748947 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.772844076 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.772859097 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.782948971 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.783152103 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.783160925 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.783509970 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.783757925 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.783818007 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.783852100 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.791388035 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.791577101 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.791591883 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.793052912 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.793114901 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.793370962 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.793468952 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.793473005 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.793540955 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.803752899 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.819766045 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.819765091 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.819766998 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.831347942 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:46.835800886 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.835807085 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:46.835824966 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:46.883766890 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:46.941617966 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.941698074 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.941778898 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.942437887 CET	49876	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.942482948 CET	443	49876	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.975918055 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.976001024 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.976818085 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.976849079 CET	443	49873	142.250.186.70	192.168.2.16
Oct 31, 2024 01:09:46.976963997 CET	49873	443	192.168.2.16	142.250.186.70
Oct 31, 2024 01:09:46.979773045 CET	49680	80	192.168.2.16	192.229.211.108
Oct 31, 2024 01:09:46.985800982 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.985869884 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.985939980 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.985949039 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.985964060 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.986031055 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.986848116 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.986896038 CET	443	49878	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:46.987008095 CET	49878	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:46.993685961 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.011007071 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.034670115 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.041801929 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.041826010 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.042004108 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.042061090 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.042280912 CET	443	49874	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.042380095 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.042406082 CET	49874	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.052788019 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.057782888 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.057792902 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.058060884 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.058099985 CET	443	49877	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.058176994 CET	49877	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.064054012 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.075287104 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.089751959 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.089782000 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.089978933 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.090063095 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.090300083 CET	443	49875	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.090364933 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.090383053 CET	49875	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.105752945 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.105758905 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.105768919 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.105779886 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.105950117 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.106019974 CET	443	49881	172.217.18.4	192.168.2.16
Oct 31, 2024 01:09:47.106077909 CET	49881	443	192.168.2.16	172.217.18.4
Oct 31, 2024 01:09:47.106822968 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.106889963 CET	443	49879	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.106945038 CET	49879	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.109914064 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.109947920 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.110029936 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.110256910 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.110270023 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.112174034 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.112401009 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.112425089 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.113506079 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.113585949 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.113897085 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.113964081 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.114073038 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.114092112 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.121784925 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.121795893 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.122227907 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.122298956 CET	443	49880	142.250.186.130	192.168.2.16
Oct 31, 2024 01:09:47.122354031 CET	49880	443	192.168.2.16	142.250.186.130
Oct 31, 2024 01:09:47.124490976 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.124516010 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.124627113 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.124844074 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.124857903 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.129381895 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:47.129431009 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:47.129523993 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:47.129641056 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.129681110 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.129762888 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.130059004 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.130074024 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.130892038 CET	49740	443	192.168.2.16	172.217.16.196
Oct 31, 2024 01:09:47.130903006 CET	443	49740	172.217.16.196	192.168.2.16
Oct 31, 2024 01:09:47.141693115 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.141721964 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.141796112 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.142055035 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.142071962 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.153589964 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.153618097 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.153677940 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.155123949 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.155145884 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.155271053 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.155719042 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.155736923 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.155829906 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.156023026 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.156037092 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.156092882 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.156416893 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.156457901 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.156508923 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.156636000 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.156656027 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.156903028 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.156910896 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.157035112 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.157434940 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.157449961 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.157941103 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.157955885 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.158201933 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:47.158215046 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:47.158584118 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.158602953 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.159008026 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.159023046 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.161672115 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.161705017 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.161761045 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.161906004 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:47.161916971 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:47.161964893 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:47.162599087 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.162600994 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:47.162615061 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:47.162622929 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.162673950 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:47.162904024 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:47.162918091 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:47.163161039 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:47.163175106 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:47.169768095 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.319035053 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.320717096 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.320820093 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.321072102 CET	49882	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.321089029 CET	443	49882	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.324429035 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.324450016 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.324592113 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.324861050 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.324872017 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.647917032 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.648160934 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.648184061 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.651787996 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.651860952 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.652188063 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.652332067 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.652338982 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.652368069 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.695745945 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.695756912 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.735547066 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.735791922 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.735832930 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.736231089 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.736661911 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.736727953 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.736881971 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.736912966 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.736948967 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.736957073 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.742759943 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.765435934 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.765671015 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.765705109 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.765908957 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.766072035 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.766128063 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.766136885 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.766357899 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.766422033 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.766462088 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.766474962 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.766702890 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.766762018 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.766792059 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.766818047 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.807338953 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.821753025 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.821777105 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.867969990 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.868066072 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.868150949 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.868464947 CET	49886	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.868485928 CET	443	49886	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.893333912 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.893431902 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.893729925 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.894582033 CET	49893	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.894606113 CET	443	49893	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.896641016 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.896682978 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.896862984 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.897002935 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.897484064 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.897522926 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.897522926 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.897538900 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.897969007 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.897989988 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.898055077 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.898226976 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.898258924 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:47.898271084 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:47.898298025 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.899279118 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.899348021 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.900218010 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.900322914 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.900348902 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.920821905 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.920927048 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.920957088 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.920983076 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.920986891 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.920999050 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.921034098 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.921046972 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.921084881 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.921092033 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.921103954 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.921149015 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.922107935 CET	49894	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:47.922131062 CET	443	49894	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:47.924662113 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.924809933 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.924879074 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.924904108 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.924987078 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.925035000 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.925045013 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.925123930 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.925148964 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.925230026 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.925761938 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.925839901 CET	443	49883	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:47.926091909 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:47.926110029 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:47.926130056 CET	49883	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:47.937699080 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.937928915 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.937944889 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.939018011 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.939093113 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.939440966 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.939507008 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.939666986 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.939678907 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:47.947329998 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.949790955 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.949807882 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:47.952442884 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.952655077 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.952678919 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.953744888 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.953835011 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.960532904 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.960628033 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:47.960736036 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:47.971482038 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.975831985 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.975845098 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.976332903 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.977010965 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.977087021 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.977164030 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.981796980 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:47.994823933 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.995846987 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.995857954 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.996397972 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.996459007 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.997394085 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.997438908 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.997782946 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:47.999269009 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.999389887 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:47.999547005 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:47.999555111 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.001121044 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.001327991 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.001466990 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.001486063 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.001827955 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.001985073 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.002010107 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.002707958 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.002770901 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.002887964 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.003333092 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:48.003788948 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.003861904 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.003923893 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.004089117 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.004095078 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.004396915 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.004511118 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.004512072 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.005069017 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.005239010 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.005275965 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.005594015 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.005656958 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.006140947 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.006213903 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.006228924 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.006285906 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.006408930 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.006416082 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.007239103 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.007301092 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.007373095 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.013319016 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.013514996 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.013524055 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.013778925 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:48.013792992 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:48.014494896 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.014583111 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.014883995 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.014940977 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.015012026 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.015033960 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.023333073 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.031601906 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.032413006 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.032444000 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.033471107 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.033552885 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.037655115 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.037720919 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.039647102 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.039660931 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.044771910 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.044785976 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.044794083 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.047329903 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.051378012 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.051402092 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.051475048 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.051485062 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.052294970 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.052305937 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.052334070 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.052370071 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.052376032 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.052413940 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.055331945 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.060776949 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.060785055 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.060789108 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.060817003 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.060821056 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:48.060825109 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.092782974 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.095902920 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.108788013 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.108813047 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.115566969 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:48.115681887 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:48.115787029 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:48.116724968 CET	49895	443	192.168.2.16	99.83.205.94
Oct 31, 2024 01:09:48.116739988 CET	443	49895	99.83.205.94	192.168.2.16
Oct 31, 2024 01:09:48.121881008 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.121979952 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.122081041 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.122386932 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.122421026 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.139642000 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.139699936 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.139812946 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.141860962 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.141900063 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.153727055 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:48.154990911 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:48.155076981 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:48.157861948 CET	49898	443	192.168.2.16	216.239.32.21
Oct 31, 2024 01:09:48.157881021 CET	443	49898	216.239.32.21	192.168.2.16
Oct 31, 2024 01:09:48.170586109 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.170608997 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.170665026 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.171649933 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.171659946 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.171716928 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.171722889 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.172626019 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.172669888 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.172679901 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.172686100 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.172735929 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.221405029 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.247409105 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.247627020 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.248394012 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.248410940 CET	443	49890	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.248595953 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.248595953 CET	49890	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.249169111 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.249298096 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.249362946 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.251290083 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.251377106 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.251585960 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.257014990 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.257036924 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.257127047 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.257219076 CET	49897	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.257260084 CET	443	49897	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.259387016 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.262573957 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.262586117 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.262758017 CET	49889	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.262775898 CET	443	49889	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.267091990 CET	49905	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.267122984 CET	443	49905	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.267190933 CET	49905	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.267483950 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.267494917 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.267553091 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.269397020 CET	49905	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:48.269412041 CET	443	49905	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:48.269743919 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.269757032 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.270663977 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.270709991 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.270783901 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.272243023 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.272274971 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.274153948 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.274178982 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.274286032 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.274462938 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.274477959 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.289287090 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289315939 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289340019 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289371967 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.289426088 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.289808989 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289819002 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289858103 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289881945 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.289890051 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.289999962 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.290045977 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.290091038 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.290118933 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.290148973 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.290170908 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.290188074 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.291048050 CET	49888	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.291058064 CET	443	49888	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.291353941 CET	49896	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.291372061 CET	443	49896	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.293816090 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.294778109 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.294831038 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.294900894 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.294948101 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.294960976 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.295005083 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.298382044 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.298420906 CET	443	49891	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.298491955 CET	49891	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.301255941 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.301327944 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.301485062 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.302362919 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.302380085 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.302489996 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.303462982 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.303476095 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.303762913 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.303800106 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.307450056 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.307476997 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.307588100 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.307837963 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:48.307852030 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:48.308758974 CET	49912	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.308784008 CET	443	49912	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.308850050 CET	49912	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.309087992 CET	49912	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.309101105 CET	443	49912	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.312997103 CET	49913	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.313030005 CET	443	49913	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.313213110 CET	49913	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.313366890 CET	49913	443	192.168.2.16	54.246.144.89
Oct 31, 2024 01:09:48.313390017 CET	443	49913	54.246.144.89	192.168.2.16
Oct 31, 2024 01:09:48.314809084 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.314824104 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.315099955 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:48.315144062 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:48.315232038 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:48.315666914 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:48.315697908 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:48.315746069 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.315819025 CET	443	49885	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.315917015 CET	49885	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.336754084 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.336828947 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.336889029 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.336911917 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.336935043 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.336975098 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.336983919 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.337958097 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.338155031 CET	443	49892	157.240.0.35	192.168.2.16
Oct 31, 2024 01:09:48.338270903 CET	49892	443	192.168.2.16	157.240.0.35
Oct 31, 2024 01:09:48.341460943 CET	49916	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.341486931 CET	443	49916	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.341661930 CET	49916	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.341845989 CET	49916	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:48.341862917 CET	443	49916	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:48.346746922 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.346755981 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.347090960 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.347155094 CET	443	49884	142.250.185.194	192.168.2.16
Oct 31, 2024 01:09:48.347202063 CET	49884	443	192.168.2.16	142.250.185.194
Oct 31, 2024 01:09:48.495549917 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.495862007 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.495879889 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.496445894 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.496824026 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.496879101 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.496965885 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.502965927 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.503196001 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.503216982 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.503592014 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.504017115 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.504089117 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.504127026 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.529889107 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.530109882 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.530128002 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.530473948 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.530849934 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.530920029 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.530986071 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.538774967 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.538793087 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.547333956 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.554776907 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.575330973 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.597871065 CET	49920	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.597908020 CET	443	49920	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.598001957 CET	49920	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.598201036 CET	49920	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.598217010 CET	443	49920	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.620946884 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.621225119 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.621288061 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.621925116 CET	49900	443	192.168.2.16	151.101.193.140
Oct 31, 2024 01:09:48.621938944 CET	443	49900	151.101.193.140	192.168.2.16
Oct 31, 2024 01:09:48.646797895 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.646879911 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.646919012 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.646936893 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.646949053 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647010088 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647058964 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.647068024 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647111893 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.647340059 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647425890 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647449970 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647497892 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.647507906 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.647588968 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.682068110 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682136059 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682192087 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682193995 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.682209969 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682254076 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682265043 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.682276964 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682329893 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.682337999 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.682455063 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.683075905 CET	49901	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.683084011 CET	443	49901	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.738408089 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.738662958 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.738691092 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.739850044 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.740144014 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.740314960 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.740324020 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.763602972 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.763711929 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.763731003 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.763756037 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.763772964 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.763814926 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.763823032 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.764245987 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.764272928 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.764298916 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.764306068 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.764513016 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.764826059 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.764974117 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765003920 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765026093 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.765033007 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765108109 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.765330076 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765397072 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765434980 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.765450001 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765505075 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.765551090 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.765558004 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.766285896 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.766324997 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.766330957 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.783360004 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.792752981 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.808779955 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.808809042 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.856806040 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.859910011 CET	49921	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.859950066 CET	443	49921	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.860023022 CET	49921	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.860260963 CET	49921	443	192.168.2.16	104.16.102.112
Oct 31, 2024 01:09:48.860277891 CET	443	49921	104.16.102.112	192.168.2.16
Oct 31, 2024 01:09:48.867347956 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.867553949 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.867571115 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.868602037 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.868674040 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.869070053 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.869136095 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.869225025 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.869234085 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880670071 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880731106 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880759954 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880784988 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.880794048 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880810976 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.880858898 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.880877018 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881094933 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881129980 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881145000 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.881155014 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881177902 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.881227016 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881318092 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.881326914 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.881959915 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882025957 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882033110 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882050037 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882080078 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882086039 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882095098 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882107973 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882138968 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882803917 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882850885 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882910013 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882958889 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.882965088 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.882975101 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.883021116 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.883882046 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.883919954 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.883932114 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.883939981 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.883954048 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.885055065 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.885092020 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.885107040 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.885113955 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.885128021 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.886440992 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.886625051 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.886636972 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.887741089 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.887798071 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.888063908 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.888128042 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.888168097 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.899158955 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.899476051 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.899491072 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.900484085 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.900542021 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.900823116 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.900886059 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.900948048 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.900955915 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.907841921 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908149958 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908212900 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.908277035 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908421993 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908476114 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.908490896 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908643007 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908730984 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908766031 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.908781052 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.908835888 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.908848047 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.916846991 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.917099953 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.917119026 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.918570995 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.918652058 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.918932915 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.919025898 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.919047117 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.920790911 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.935333014 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.935775995 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.935775995 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.935789108 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.937433004 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.937639952 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.937649965 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.941850901 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.941917896 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.942192078 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.942295074 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.942301035 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.942445993 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.951755047 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.951771975 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.951792955 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.963367939 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.967778921 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.967799902 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.983772993 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.983840942 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:48.983848095 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:48.997726917 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.997767925 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.997788906 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.997801065 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.997826099 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.997837067 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.997844934 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.997889042 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998068094 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998116016 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998284101 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998328924 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998600006 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998661995 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998759985 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998810053 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998837948 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998884916 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998886108 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.998895884 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.998925924 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999337912 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999393940 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999608040 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999650955 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999722004 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999794960 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999794960 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999798059 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999808073 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999838114 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999881983 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999928951 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:48.999937057 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:48.999986887 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.000576019 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000618935 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000643015 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.000650883 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000662088 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000679016 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.000693083 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.000695944 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000705004 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.000705957 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.000750065 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001472950 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001526117 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001528978 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001538038 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001569033 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001593113 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001600027 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001609087 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001638889 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001641989 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001683950 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.001691103 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.001847982 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.002298117 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002376080 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.002381086 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002389908 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002419949 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.002464056 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002507925 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002507925 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.002521992 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.002547026 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.002563000 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.003212929 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.003268957 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.003283978 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.003292084 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.003308058 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.003325939 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.015777111 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.025588036 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.025808096 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.025882959 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.025913954 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026031017 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026109934 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.026124001 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026216030 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026278019 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.026289940 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026424885 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026706934 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.026719093 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026875973 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.026968956 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027019978 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.027034998 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027085066 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.027096987 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027229071 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027292013 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.027303934 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027832985 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.027909994 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.027921915 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.028012991 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.028105974 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.028110027 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.028136969 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.028430939 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.028559923 CET	443	49902	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.029603958 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:49.029833078 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:49.029860020 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:49.030241013 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:49.030678988 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:49.030742884 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:49.030853987 CET	49911	443	192.168.2.16	150.171.27.10
Oct 31, 2024 01:09:49.031778097 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:49.036000013 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036101103 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036134005 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036147118 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.036156893 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036210060 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036252975 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.036262035 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036303997 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.036705017 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.036762953 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.037246943 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.037297964 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.037307024 CET	443	49904	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.037344933 CET	49904	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.037731886 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.040503979 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.040565014 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.040992022 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.041065931 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.041697025 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.041842937 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.042078018 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.042175055 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.042232990 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.058410883 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058510065 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058540106 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058566093 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058567047 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.058576107 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058602095 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.058610916 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058634996 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058677912 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.058686972 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.058747053 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.059010029 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.075331926 CET	443	49911	150.171.27.10	192.168.2.16
Oct 31, 2024 01:09:49.076224089 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076308012 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076345921 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076376915 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076385975 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.076396942 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076410055 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.076755047 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.076832056 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.076838017 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.077022076 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.077074051 CET	49910	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.077080011 CET	443	49910	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.079879045 CET	49902	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.083342075 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.088937044 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.093832970 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.093892097 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.093934059 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.093950033 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.093977928 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.093992949 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.094482899 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.094546080 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.094553947 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.094780922 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.094834089 CET	49909	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.094842911 CET	443	49909	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.095756054 CET	49914	443	192.168.2.16	150.171.28.10
Oct 31, 2024 01:09:49.095777035 CET	443	49914	150.171.28.10	192.168.2.16
Oct 31, 2024 01:09:49.097568989 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:49.097656012 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:49.097912073 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:49.098174095 CET	49903	443	192.168.2.16	75.2.57.54
Oct 31, 2024 01:09:49.098186970 CET	443	49903	75.2.57.54	192.168.2.16
Oct 31, 2024 01:09:49.105132103 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.105400085 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.105422020 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.105770111 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.106138945 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.106204987 CET	443	49908	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.106280088 CET	49908	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.110318899 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.110532045 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.110543966 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.111535072 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.111598015 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.111783981 CET	49906	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.111790895 CET	443	49906	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.112010956 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.112070084 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.112195969 CET	49907	443	192.168.2.16	157.240.253.35
Oct 31, 2024 01:09:49.112220049 CET	443	49907	157.240.253.35	192.168.2.16
Oct 31, 2024 01:09:49.114232063 CET	443	49905	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:49.114442110 CET	49905	443	192.168.2.16	18.244.18.32
Oct 31, 2024 01:09:49.114460945 CET	443	49905	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:49.114598989 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.114655972 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.114690065 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.114732981 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.114759922 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.114763975 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.114779949 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.114790916 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.114800930 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.114821911 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115024090 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115041971 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115077972 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115083933 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115096092 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115119934 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115204096 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115221977 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115278959 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115287066 CET	443	49899	104.16.103.112	192.168.2.16
Oct 31, 2024 01:09:49.115380049 CET	49899	443	192.168.2.16	104.16.103.112
Oct 31, 2024 01:09:49.115690947 CET	443	49905	18.244.18.32	192.168.2.16
Oct 31, 2024 01:09:49.116005898 CET	49905	443	192.168.2.16	18.244.18.32

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 01:09:31.417680025 CET	192.168.2.16	1.1.1.1	0x252	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:31.417886019 CET	192.168.2.16	1.1.1.1	0x1008	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:33.318756104 CET	192.168.2.16	1.1.1.1	0xe44d	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.319009066 CET	192.168.2.16	1.1.1.1	0xef24	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:33.673049927 CET	192.168.2.16	1.1.1.1	0xdbb7	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.673265934 CET	192.168.2.16	1.1.1.1	0x8142	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:34.204312086 CET	192.168.2.16	1.1.1.1	0x5ee6	Standard query (0)	static.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.204531908 CET	192.168.2.16	1.1.1.1	0x4509	Standard query (0)	static.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:34.563536882 CET	192.168.2.16	1.1.1.1	0x73f6	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.563536882 CET	192.168.2.16	1.1.1.1	0xb52	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:34.685198069 CET	192.168.2.16	1.1.1.1	0x7bfa	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.685199022 CET	192.168.2.16	1.1.1.1	0x50f	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 31, 2024 01:09:35.510279894 CET	192.168.2.16	1.1.1.1	0x25c5	Standard query (0)	o13855.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:35.510279894 CET	192.168.2.16	1.1.1.1	0xf68b	Standard query (0)	o13855.ingest.sentry.io	65	IN (0x0001)	false
Oct 31, 2024 01:09:36.255781889 CET	192.168.2.16	1.1.1.1	0xf8b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.255912066 CET	192.168.2.16	1.1.1.1	0x47eb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:36.515044928 CET	192.168.2.16	1.1.1.1	0x5ed2	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.515747070 CET	192.168.2.16	1.1.1.1	0x18c5	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:37.311979055 CET	192.168.2.16	1.1.1.1	0x1eec	Standard query (0)	chunk-composing.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:37.311979055 CET	192.168.2.16	1.1.1.1	0xef90	Standard query (0)	chunk-composing.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:37.980413914 CET	192.168.2.16	1.1.1.1	0xf619	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:37.980746984 CET	192.168.2.16	1.1.1.1	0x700d	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:38.006603956 CET	192.168.2.16	1.1.1.1	0x941a	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:38.006772995 CET	192.168.2.16	1.1.1.1	0x8a09	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:38.658951998 CET	192.168.2.16	1.1.1.1	0xc219	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:38.659555912 CET	192.168.2.16	1.1.1.1	0x5923	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.087011099 CET	192.168.2.16	1.1.1.1	0xb469	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.087177992 CET	192.168.2.16	1.1.1.1	0x69ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.750606060 CET	192.168.2.16	1.1.1.1	0xd471	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.750741959 CET	192.168.2.16	1.1.1.1	0x9728	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.773178101 CET	192.168.2.16	1.1.1.1	0x5c47	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.773340940 CET	192.168.2.16	1.1.1.1	0x6d3d	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.775638103 CET	192.168.2.16	1.1.1.1	0x8e3c	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.775783062 CET	192.168.2.16	1.1.1.1	0xb128	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.779861927 CET	192.168.2.16	1.1.1.1	0x1ed9	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.780006886 CET	192.168.2.16	1.1.1.1	0x2225	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.809495926 CET	192.168.2.16	1.1.1.1	0x7d08	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.809643984 CET	192.168.2.16	1.1.1.1	0xdb2f	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:39.810197115 CET	192.168.2.16	1.1.1.1	0x5683	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.810319901 CET	192.168.2.16	1.1.1.1	0x2db5	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.569802999 CET	192.168.2.16	1.1.1.1	0xfa9a	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.569957972 CET	192.168.2.16	1.1.1.1	0x6a6a	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.570646048 CET	192.168.2.16	1.1.1.1	0x8acf	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.570801020 CET	192.168.2.16	1.1.1.1	0xb336	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.576987028 CET	192.168.2.16	1.1.1.1	0xe9c	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577142954 CET	192.168.2.16	1.1.1.1	0x1c03	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.880203009 CET	192.168.2.16	1.1.1.1	0x39dd	Standard query (0)	tag.tapad.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.880485058 CET	192.168.2.16	1.1.1.1	0x2fc4	Standard query (0)	tag.tapad.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.881335020 CET	192.168.2.16	1.1.1.1	0xe5be	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.881730080 CET	192.168.2.16	1.1.1.1	0x7e12	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.899486065 CET	192.168.2.16	1.1.1.1	0x2f16	Standard query (0)	collector-22324.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.901040077 CET	192.168.2.16	1.1.1.1	0xafd2	Standard query (0)	collector-22324.us.tvsquared.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.934983969 CET	192.168.2.16	1.1.1.1	0xa1a5	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.935112953 CET	192.168.2.16	1.1.1.1	0x4383	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 31, 2024 01:09:40.974139929 CET	192.168.2.16	1.1.1.1	0x9aa6	Standard query (0)	cdn.metadata.io	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.974421978 CET	192.168.2.16	1.1.1.1	0x4398	Standard query (0)	cdn.metadata.io	65	IN (0x0001)	false
Oct 31, 2024 01:09:41.339483023 CET	192.168.2.16	1.1.1.1	0x938c	Standard query (0)	pixel-config.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.339673042 CET	192.168.2.16	1.1.1.1	0x9b13	Standard query (0)	pixel-config.reddit.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:41.365092039 CET	192.168.2.16	1.1.1.1	0x5877	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.365291119 CET	192.168.2.16	1.1.1.1	0xd900	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:41.460618019 CET	192.168.2.16	1.1.1.1	0x2224	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.460787058 CET	192.168.2.16	1.1.1.1	0xfbfe	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:41.558860064 CET	192.168.2.16	1.1.1.1	0x452a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.559009075 CET	192.168.2.16	1.1.1.1	0xf9bd	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 31, 2024 01:09:41.740566015 CET	192.168.2.16	1.1.1.1	0x2692	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.740710020 CET	192.168.2.16	1.1.1.1	0x615c	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Oct 31, 2024 01:09:42.058047056 CET	192.168.2.16	1.1.1.1	0x816b	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.307279110 CET	192.168.2.16	1.1.1.1	0xba92	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.307416916 CET	192.168.2.16	1.1.1.1	0x9082	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 01:09:42.347347975 CET	192.168.2.16	1.1.1.1	0x2b34	Standard query (0)	ct.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.347479105 CET	192.168.2.16	1.1.1.1	0x9a9a	Standard query (0)	ct.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:43.470463037 CET	192.168.2.16	1.1.1.1	0x12cb	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.470602989 CET	192.168.2.16	1.1.1.1	0x8944	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 01:09:43.505064964 CET	192.168.2.16	1.1.1.1	0x86bf	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.506153107 CET	192.168.2.16	1.1.1.1	0xb16c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 31, 2024 01:09:43.507685900 CET	192.168.2.16	1.1.1.1	0xdb9a	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.507839918 CET	192.168.2.16	1.1.1.1	0xeae9	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:44.540589094 CET	192.168.2.16	1.1.1.1	0xb7f4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.540729046 CET	192.168.2.16	1.1.1.1	0xfe56	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:44.650844097 CET	192.168.2.16	1.1.1.1	0xa8ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.650991917 CET	192.168.2.16	1.1.1.1	0xf9ea	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:44.694638014 CET	192.168.2.16	1.1.1.1	0x199d	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.694771051 CET	192.168.2.16	1.1.1.1	0x38ad	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:45.642093897 CET	192.168.2.16	1.1.1.1	0x7b9b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:45.642093897 CET	192.168.2.16	1.1.1.1	0x63da	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:45.839688063 CET	192.168.2.16	1.1.1.1	0xb1db	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:45.839814901 CET	192.168.2.16	1.1.1.1	0x759	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:47.132447004 CET	192.168.2.16	1.1.1.1	0x4bfd	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.132862091 CET	192.168.2.16	1.1.1.1	0x52ce	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:47.151257038 CET	192.168.2.16	1.1.1.1	0x7983	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.151452065 CET	192.168.2.16	1.1.1.1	0xa5ca	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:47.151813984 CET	192.168.2.16	1.1.1.1	0x1d8a	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.152148962 CET	192.168.2.16	1.1.1.1	0xe750	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:47.153162956 CET	192.168.2.16	1.1.1.1	0x54d1	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.153311014 CET	192.168.2.16	1.1.1.1	0x72e6	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.130212069 CET	192.168.2.16	1.1.1.1	0x5e1	Standard query (0)	p.tvpixel.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.130460024 CET	192.168.2.16	1.1.1.1	0x2b6c	Standard query (0)	p.tvpixel.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.304433107 CET	192.168.2.16	1.1.1.1	0xb6b	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.304614067 CET	192.168.2.16	1.1.1.1	0x5507	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.324111938 CET	192.168.2.16	1.1.1.1	0x6b1c	Standard query (0)	sdk.iad-01.braze.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.324273109 CET	192.168.2.16	1.1.1.1	0xb3e9	Standard query (0)	sdk.iad-01.braze.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.476488113 CET	192.168.2.16	1.1.1.1	0xc134	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.476660967 CET	192.168.2.16	1.1.1.1	0xad7b	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.478235960 CET	192.168.2.16	1.1.1.1	0xa216	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.478387117 CET	192.168.2.16	1.1.1.1	0xd547	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:48.588315964 CET	192.168.2.16	1.1.1.1	0xa3b1	Standard query (0)	telemetry.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.588490009 CET	192.168.2.16	1.1.1.1	0xee38	Standard query (0)	telemetry.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:49.363607883 CET	192.168.2.16	1.1.1.1	0x46d6	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.363782883 CET	192.168.2.16	1.1.1.1	0x19ad	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:49.437640905 CET	192.168.2.16	1.1.1.1	0x41a4	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.437978983 CET	192.168.2.16	1.1.1.1	0xfae9	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:50.327656984 CET	192.168.2.16	1.1.1.1	0xd714	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:50.327934027 CET	192.168.2.16	1.1.1.1	0x7e40	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 31, 2024 01:09:54.470582962 CET	192.168.2.16	1.1.1.1	0x4a28	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:08.279483080 CET	192.168.2.16	1.1.1.1	0xe731	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:31.826642990 CET	192.168.2.16	1.1.1.1	0x12fd	Standard query (0)	www.canva.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:31.826935053 CET	192.168.2.16	1.1.1.1	0xa6bc	Standard query (0)	www.canva.com	65	IN (0x0001)	false
Oct 31, 2024 01:10:38.675359011 CET	192.168.2.16	1.1.1.1	0xeb2b	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:38.675487995 CET	192.168.2.16	1.1.1.1	0xb90c	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 01:09:31.425076962 CET	1.1.1.1	192.168.2.16	0x252	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:31.425076962 CET	1.1.1.1	192.168.2.16	0x252	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:31.425719023 CET	1.1.1.1	192.168.2.16	0x1008	No error (0)	www.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:33.325939894 CET	1.1.1.1	192.168.2.16	0xef24	No error (0)	static.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:33.326550007 CET	1.1.1.1	192.168.2.16	0xe44d	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.326550007 CET	1.1.1.1	192.168.2.16	0xe44d	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.679650068 CET	1.1.1.1	192.168.2.16	0xdbb7	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.679650068 CET	1.1.1.1	192.168.2.16	0xdbb7	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:33.679848909 CET	1.1.1.1	192.168.2.16	0x8142	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:34.211816072 CET	1.1.1.1	192.168.2.16	0x4509	No error (0)	static.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:34.212109089 CET	1.1.1.1	192.168.2.16	0x5ee6	No error (0)	static.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.212109089 CET	1.1.1.1	192.168.2.16	0x5ee6	No error (0)	static.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.570362091 CET	1.1.1.1	192.168.2.16	0x73f6	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.570362091 CET	1.1.1.1	192.168.2.16	0x73f6	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:34.570621014 CET	1.1.1.1	192.168.2.16	0xb52	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:34.692286968 CET	1.1.1.1	192.168.2.16	0x7bfa	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:35.517379999 CET	1.1.1.1	192.168.2.16	0x25c5	No error (0)	o13855.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.262486935 CET	1.1.1.1	192.168.2.16	0x47eb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:36.262504101 CET	1.1.1.1	192.168.2.16	0xf8b	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.523139954 CET	1.1.1.1	192.168.2.16	0x5ed2	No error (0)	chunk-composing.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.523139954 CET	1.1.1.1	192.168.2.16	0x5ed2	No error (0)	chunk-composing.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:36.523551941 CET	1.1.1.1	192.168.2.16	0x18c5	No error (0)	chunk-composing.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:37.319319963 CET	1.1.1.1	192.168.2.16	0xef90	No error (0)	chunk-composing.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:37.319442987 CET	1.1.1.1	192.168.2.16	0x1eec	No error (0)	chunk-composing.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:37.319442987 CET	1.1.1.1	192.168.2.16	0x1eec	No error (0)	chunk-composing.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:37.986978054 CET	1.1.1.1	192.168.2.16	0xf619	No error (0)	google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:37.987359047 CET	1.1.1.1	192.168.2.16	0x700d	No error (0)	google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:38.013273954 CET	1.1.1.1	192.168.2.16	0x941a	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:38.013273954 CET	1.1.1.1	192.168.2.16	0x941a	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:38.014281034 CET	1.1.1.1	192.168.2.16	0x8a09	No error (0)	www.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:38.665704966 CET	1.1.1.1	192.168.2.16	0xc219	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.093684912 CET	1.1.1.1	192.168.2.16	0xb469	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.093751907 CET	1.1.1.1	192.168.2.16	0x69ea	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:39.757685900 CET	1.1.1.1	192.168.2.16	0xd471	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.757685900 CET	1.1.1.1	192.168.2.16	0xd471	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.757917881 CET	1.1.1.1	192.168.2.16	0x9728	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:39.783256054 CET	1.1.1.1	192.168.2.16	0x8e3c	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.783256054 CET	1.1.1.1	192.168.2.16	0x8e3c	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.783269882 CET	1.1.1.1	192.168.2.16	0xb128	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.783269882 CET	1.1.1.1	192.168.2.16	0xb128	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:39.783269882 CET	1.1.1.1	192.168.2.16	0xb128	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:39.785936117 CET	1.1.1.1	192.168.2.16	0x5c47	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.785936117 CET	1.1.1.1	192.168.2.16	0x5c47	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.785936117 CET	1.1.1.1	192.168.2.16	0x5c47	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.115	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.785936117 CET	1.1.1.1	192.168.2.16	0x5c47	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.64	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.785936117 CET	1.1.1.1	192.168.2.16	0x5c47	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.114	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787251949 CET	1.1.1.1	192.168.2.16	0x1ed9	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787251949 CET	1.1.1.1	192.168.2.16	0x1ed9	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787251949 CET	1.1.1.1	192.168.2.16	0x1ed9	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787251949 CET	1.1.1.1	192.168.2.16	0x1ed9	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787251949 CET	1.1.1.1	192.168.2.16	0x1ed9	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.787715912 CET	1.1.1.1	192.168.2.16	0x2225	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.806071997 CET	1.1.1.1	192.168.2.16	0x6d3d	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.817070007 CET	1.1.1.1	192.168.2.16	0x7d08	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.820699930 CET	1.1.1.1	192.168.2.16	0x2db5	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.821751118 CET	1.1.1.1	192.168.2.16	0x5683	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:39.821751118 CET	1.1.1.1	192.168.2.16	0x5683	No error (0)	collectoru.us.tvsquared.com		3.137.102.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:39.821751118 CET	1.1.1.1	192.168.2.16	0x5683	No error (0)	collectoru.us.tvsquared.com		3.136.10.62	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576790094 CET	1.1.1.1	192.168.2.16	0x6a6a	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576945066 CET	1.1.1.1	192.168.2.16	0xfa9a	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576945066 CET	1.1.1.1	192.168.2.16	0xfa9a	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576945066 CET	1.1.1.1	192.168.2.16	0xfa9a	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576945066 CET	1.1.1.1	192.168.2.16	0xfa9a	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.576945066 CET	1.1.1.1	192.168.2.16	0xfa9a	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577450991 CET	1.1.1.1	192.168.2.16	0x8acf	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577450991 CET	1.1.1.1	192.168.2.16	0x8acf	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577450991 CET	1.1.1.1	192.168.2.16	0x8acf	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577450991 CET	1.1.1.1	192.168.2.16	0x8acf	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577450991 CET	1.1.1.1	192.168.2.16	0x8acf	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.577824116 CET	1.1.1.1	192.168.2.16	0xb336	No error (0)	alb.reddit.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.583750963 CET	1.1.1.1	192.168.2.16	0xe9c	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.583750963 CET	1.1.1.1	192.168.2.16	0xe9c	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.583750963 CET	1.1.1.1	192.168.2.16	0xe9c	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.583750963 CET	1.1.1.1	192.168.2.16	0xe9c	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.583750963 CET	1.1.1.1	192.168.2.16	0xe9c	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.584172964 CET	1.1.1.1	192.168.2.16	0x1c03	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.888042927 CET	1.1.1.1	192.168.2.16	0xe5be	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.888042927 CET	1.1.1.1	192.168.2.16	0xe5be	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.888508081 CET	1.1.1.1	192.168.2.16	0x7e12	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:40.895514965 CET	1.1.1.1	192.168.2.16	0x39dd	No error (0)	tag.tapad.com		35.186.225.155	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.907040119 CET	1.1.1.1	192.168.2.16	0x2f16	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.907040119 CET	1.1.1.1	192.168.2.16	0x2f16	No error (0)	collectoru.us.tvsquared.com		3.136.10.62	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.907040119 CET	1.1.1.1	192.168.2.16	0x2f16	No error (0)	collectoru.us.tvsquared.com		3.137.102.166	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.910728931 CET	1.1.1.1	192.168.2.16	0xafd2	No error (0)	collector-22324.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.941643953 CET	1.1.1.1	192.168.2.16	0xa1a5	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.941643953 CET	1.1.1.1	192.168.2.16	0xa1a5	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.941643953 CET	1.1.1.1	192.168.2.16	0xa1a5	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.942352057 CET	1.1.1.1	192.168.2.16	0x4383	No error (0)	api.ipify.org			65	IN (0x0001)	false
Oct 31, 2024 01:09:40.986840010 CET	1.1.1.1	192.168.2.16	0x9aa6	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:40.986840010 CET	1.1.1.1	192.168.2.16	0x9aa6	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.64	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.986840010 CET	1.1.1.1	192.168.2.16	0x9aa6	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.115	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.986840010 CET	1.1.1.1	192.168.2.16	0x9aa6	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.114	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.986840010 CET	1.1.1.1	192.168.2.16	0x9aa6	No error (0)	d1w725hft9421a.cloudfront.net		18.66.102.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:40.994379044 CET	1.1.1.1	192.168.2.16	0x4398	No error (0)	cdn.metadata.io	d1w725hft9421a.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.346863985 CET	1.1.1.1	192.168.2.16	0x938c	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.346863985 CET	1.1.1.1	192.168.2.16	0x938c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.346863985 CET	1.1.1.1	192.168.2.16	0x938c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.346863985 CET	1.1.1.1	192.168.2.16	0x938c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.346863985 CET	1.1.1.1	192.168.2.16	0x938c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.348366976 CET	1.1.1.1	192.168.2.16	0x9b13	No error (0)	pixel-config.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372081041 CET	1.1.1.1	192.168.2.16	0x5877	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372081041 CET	1.1.1.1	192.168.2.16	0x5877	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372081041 CET	1.1.1.1	192.168.2.16	0x5877	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372081041 CET	1.1.1.1	192.168.2.16	0x5877	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372081041 CET	1.1.1.1	192.168.2.16	0x5877	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.372695923 CET	1.1.1.1	192.168.2.16	0xd900	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.468566895 CET	1.1.1.1	192.168.2.16	0x2224	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.468566895 CET	1.1.1.1	192.168.2.16	0x2224	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.468566895 CET	1.1.1.1	192.168.2.16	0x2224	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.468566895 CET	1.1.1.1	192.168.2.16	0x2224	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.566265106 CET	1.1.1.1	192.168.2.16	0xf9bd	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.566265106 CET	1.1.1.1	192.168.2.16	0xf9bd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:41.566265106 CET	1.1.1.1	192.168.2.16	0xf9bd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:41.566277981 CET	1.1.1.1	192.168.2.16	0x452a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:41.566277981 CET	1.1.1.1	192.168.2.16	0x452a	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.747237921 CET	1.1.1.1	192.168.2.16	0x2692	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.747237921 CET	1.1.1.1	192.168.2.16	0x2692	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.747237921 CET	1.1.1.1	192.168.2.16	0x2692	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:41.747942924 CET	1.1.1.1	192.168.2.16	0x615c	No error (0)	api.ipify.org			65	IN (0x0001)	false
Oct 31, 2024 01:09:42.065326929 CET	1.1.1.1	192.168.2.16	0x816b	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:42.314040899 CET	1.1.1.1	192.168.2.16	0xba92	No error (0)	ad.doubleclick.net		142.250.186.102	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.314059019 CET	1.1.1.1	192.168.2.16	0x9082	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:42.356625080 CET	1.1.1.1	192.168.2.16	0x2b34	No error (0)	ct.canva.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.356625080 CET	1.1.1.1	192.168.2.16	0x2b34	No error (0)	ct.canva.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.356625080 CET	1.1.1.1	192.168.2.16	0x2b34	No error (0)	ct.canva.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:42.356625080 CET	1.1.1.1	192.168.2.16	0x2b34	No error (0)	ct.canva.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.476931095 CET	1.1.1.1	192.168.2.16	0x12cb	No error (0)	ad.doubleclick.net		142.250.186.70	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.477035999 CET	1.1.1.1	192.168.2.16	0x8944	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:43.511778116 CET	1.1.1.1	192.168.2.16	0x86bf	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:43.512831926 CET	1.1.1.1	192.168.2.16	0xb16c	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 31, 2024 01:09:43.514540911 CET	1.1.1.1	192.168.2.16	0xeae9	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:43.514944077 CET	1.1.1.1	192.168.2.16	0xdb9a	No error (0)	adservice.google.com		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.548551083 CET	1.1.1.1	192.168.2.16	0xfe56	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:44.548795938 CET	1.1.1.1	192.168.2.16	0xb7f4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:44.548795938 CET	1.1.1.1	192.168.2.16	0xb7f4	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.658927917 CET	1.1.1.1	192.168.2.16	0xf9ea	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:44.659251928 CET	1.1.1.1	192.168.2.16	0xa8ef	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:44.702644110 CET	1.1.1.1	192.168.2.16	0x38ad	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:44.702667952 CET	1.1.1.1	192.168.2.16	0x199d	No error (0)	adservice.google.com		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:45.648763895 CET	1.1.1.1	192.168.2.16	0x63da	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:45.648864031 CET	1.1.1.1	192.168.2.16	0x7b9b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:45.648864031 CET	1.1.1.1	192.168.2.16	0x7b9b	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:45.846374989 CET	1.1.1.1	192.168.2.16	0xb1db	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:45.846570969 CET	1.1.1.1	192.168.2.16	0x759	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:47.139106035 CET	1.1.1.1	192.168.2.16	0x4bfd	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:47.139537096 CET	1.1.1.1	192.168.2.16	0x52ce	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:47.141066074 CET	1.1.1.1	192.168.2.16	0x6962	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:47.141066074 CET	1.1.1.1	192.168.2.16	0x6962	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.141066074 CET	1.1.1.1	192.168.2.16	0x6962	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160415888 CET	1.1.1.1	192.168.2.16	0x7983	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160415888 CET	1.1.1.1	192.168.2.16	0x7983	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.246.144.89	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160415888 CET	1.1.1.1	192.168.2.16	0x7983	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.171.122.26	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160429001 CET	1.1.1.1	192.168.2.16	0x1d8a	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160429001 CET	1.1.1.1	192.168.2.16	0x1d8a	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160439014 CET	1.1.1.1	192.168.2.16	0xa5ca	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160723925 CET	1.1.1.1	192.168.2.16	0x54d1	No error (0)	sb.scorecardresearch.com		18.244.18.32	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160723925 CET	1.1.1.1	192.168.2.16	0x54d1	No error (0)	sb.scorecardresearch.com		18.244.18.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160723925 CET	1.1.1.1	192.168.2.16	0x54d1	No error (0)	sb.scorecardresearch.com		18.244.18.38	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:47.160723925 CET	1.1.1.1	192.168.2.16	0x54d1	No error (0)	sb.scorecardresearch.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.137096882 CET	1.1.1.1	192.168.2.16	0x5e1	No error (0)	p.tvpixel.com		75.2.57.54	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.137096882 CET	1.1.1.1	192.168.2.16	0x5e1	No error (0)	p.tvpixel.com		99.83.205.94	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.311974049 CET	1.1.1.1	192.168.2.16	0xb6b	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.311974049 CET	1.1.1.1	192.168.2.16	0xb6b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.246.144.89	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.311974049 CET	1.1.1.1	192.168.2.16	0xb6b	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.171.122.26	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.312530994 CET	1.1.1.1	192.168.2.16	0x5507	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.313813925 CET	1.1.1.1	192.168.2.16	0x5887	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.313813925 CET	1.1.1.1	192.168.2.16	0x5887	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.313813925 CET	1.1.1.1	192.168.2.16	0x5887	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.331804991 CET	1.1.1.1	192.168.2.16	0x6b1c	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.332075119 CET	1.1.1.1	192.168.2.16	0xb3e9	No error (0)	sdk.iad-01.braze.com	sdk.iad-01.braze.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.483187914 CET	1.1.1.1	192.168.2.16	0xad7b	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.483211040 CET	1.1.1.1	192.168.2.16	0xc134	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.485008955 CET	1.1.1.1	192.168.2.16	0xa216	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.485008955 CET	1.1.1.1	192.168.2.16	0xa216	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.485102892 CET	1.1.1.1	192.168.2.16	0xd547	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.485102892 CET	1.1.1.1	192.168.2.16	0xd547	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:48.597022057 CET	1.1.1.1	192.168.2.16	0xa3b1	No error (0)	telemetry.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.597022057 CET	1.1.1.1	192.168.2.16	0xa3b1	No error (0)	telemetry.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:48.597449064 CET	1.1.1.1	192.168.2.16	0xee38	No error (0)	telemetry.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:09:49.371159077 CET	1.1.1.1	192.168.2.16	0x46d6	No error (0)	sb.scorecardresearch.com		18.244.18.38	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.371159077 CET	1.1.1.1	192.168.2.16	0x46d6	No error (0)	sb.scorecardresearch.com		18.244.18.32	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.371159077 CET	1.1.1.1	192.168.2.16	0x46d6	No error (0)	sb.scorecardresearch.com		18.244.18.27	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.371159077 CET	1.1.1.1	192.168.2.16	0x46d6	No error (0)	sb.scorecardresearch.com		18.244.18.122	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:09:49.444439888 CET	1.1.1.1	192.168.2.16	0x41a4	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:49.444439888 CET	1.1.1.1	192.168.2.16	0x41a4	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:49.445030928 CET	1.1.1.1	192.168.2.16	0xfae9	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:49.445030928 CET	1.1.1.1	192.168.2.16	0xfae9	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:50.334258080 CET	1.1.1.1	192.168.2.16	0xd714	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:50.334258080 CET	1.1.1.1	192.168.2.16	0xd714	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:50.336277008 CET	1.1.1.1	192.168.2.16	0x7e40	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:50.336277008 CET	1.1.1.1	192.168.2.16	0x7e40	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:09:54.479093075 CET	1.1.1.1	192.168.2.16	0x4a28	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:10:08.287833929 CET	1.1.1.1	192.168.2.16	0xe731	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 01:10:31.835273981 CET	1.1.1.1	192.168.2.16	0x12fd	No error (0)	www.canva.com		104.16.103.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:31.835273981 CET	1.1.1.1	192.168.2.16	0x12fd	No error (0)	www.canva.com		104.16.102.112	A (IP address)	IN (0x0001)	false
Oct 31, 2024 01:10:31.835308075 CET	1.1.1.1	192.168.2.16	0xa6bc	No error (0)	www.canva.com			65	IN (0x0001)	false
Oct 31, 2024 01:10:38.682214022 CET	1.1.1.1	192.168.2.16	0xeb2b	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49698	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:32 UTC	785	OUT	GET /design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:32 UTC	1337	IN	HTTP/1.1 303 See Other Date: Thu, 31 Oct 2024 00:09:32 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Location: /login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor CF-Ray: 8daf6ab7fd723ab6-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; Path=/; Max-Age=31536000; Expires=Fri, 31 Oct 2025 00:09:32 GMT; Secure; HttpOnly; SameSite=NONE Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: deny x-request-id: 8daf6ab7fd723ab6 x-xss-protection: 1; mode=block Server-Timing: cfCacheStatus;desc="DYNAMIC" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GxpyU5BkDTf31wArbgq56ciKwzG4eWDcj3iIqDpGMlbVCAkJg%2FSpU7OEsTRcqCBLBv6cgZ0K0ViYo7ZFAPh6lFmhZdSDjGqm%2BnjEaRIQ5gvdW7ZgU49ILCjMMU8iwGM%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:32 UTC	1253	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 43 50 41 3d 63 6e 76 61 6e 62 6c 43 72 47 66 33 66 5f 35 34 4c 4d 47 75 6f 4a 55 39 47 39 57 61 33 39 48 67 73 35 6d 37 2d 5f 6e 73 6a 48 6e 57 73 4f 56 4e 78 52 7a 46 58 46 52 4c 5f 67 30 36 4c 36 4f 62 6c 4f 72 37 76 71 6f 4d 50 6d 55 66 33 61 4a 34 41 32 63 43 53 65 51 75 52 63 2d 74 73 48 68 61 72 30 30 5f 57 38 4c 78 78 4f 4f 63 6c 55 73 6c 5f 57 77 38 6b 53 6e 44 69 36 43 48 38 48 57 63 69 30 77 4f 6b 70 62 6d 69 6a 75 42 4b 56 78 52 6f 4e 59 37 6b 53 63 54 6c 73 4e 74 59 53 33 6d 55 77 6b 6d 77 55 52 74 51 Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Set-Cookie: CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQ
2024-10-31 00:09:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49701	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:32 UTC	1680	OUT	GET /login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor HTTP/1.1 Host: www.canva.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:33 UTC	1344	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:33 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6abd5a378c58-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-FQdNSBo0uNRrt3OeCc+jAQ'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8daf6abd5a378c58&app=login&policyHash=67581e7e content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; content-security-policy: base-uri 'self'; object-src 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval' 'nonce-FQdNSBo0uNRrt3OeCc+jAQ'; report-uri https://csp.canva.com/_cspreport?source=web2&requestId=8daf6abd5a378c58&app=login&policyHash=67581e7e referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: deny x-request-id: 8daf6abd5a378c58 x-robots-tag: noindex
2024-10-31 00:09:33 UTC	430	IN	Data Raw: 78 2d 78 73 73 2d 70 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 3a 20 63 66 43 61 63 68 65 53 74 61 74 75 73 3b 64 65 73 63 3d 22 44 59 4e 41 4d 49 43 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 5a 71 7a 57 6d 48 42 4e 42 6f 49 6e 6b 36 25 32 46 42 41 5a 34 4b 4c 54 6d 6a 25 32 46 56 77 69 51 6d 4b 7a 51 50 4e 48 37 32 47 72 5a 69 25 32 42 79 48 25 32 42 58 4e 76 47 79 48 72 39 43 25 32 46 39 6d 56 32 44 54 47 4a 57 36 6e 69 49 77 69 52 56 59 50 46 6b 77 6b 38 4a 25 32 46 41 37 48 61 Data Ascii: x-xss-protection: 1; mode=blockServer-Timing: cfCacheStatus;desc="DYNAMIC"Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ZqzWmHBNBoInk6%2FBAZ4KLTmj%2FVwiQmKzQPNH72GrZi%2ByH%2BXNvGyHr9C%2F9mV2DTGJW6niIwiRVYPFkwk8J%2FA7Ha
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 37 66 38 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 74 68 65 6d 65 20 6c 69 67 68 74 20 63 6c 61 73 73 69 63 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 74 6f 20 79 6f 75 72 20 43 61 6e 76 61 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 2d 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6c 6f 67 69 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 Data Ascii: 7f82<!DOCTYPE html><html dir="ltr" lang="en" class="theme light classic"><head><meta charset="utf-8"><title>Login to your Canva account</title><meta name="app-name" content="login"/><meta name="viewport" content="width=device-width, initial-scale=1"><li
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 36 2c 75 2b 30 30 66 38 2d 30 31 34 38 2c 75 2b 30 31 34 61 2d 30 31 37 65 2c 75 2b 30 31 39 32 2c 75 2b 30 31 62 35 2d 30 31 62 36 2c 75 2b 30 31 66 63 2d 30 31 66 64 2c 75 2b 30 32 31 38 2d 30 32 31 62 2c 75 2b 30 32 33 37 2c 75 2b 30 32 63 36 2d 30 32 63 37 2c 75 2b 30 32 63 39 2c 75 2b 30 32 64 38 2d 30 32 64 64 2c 75 2b 31 65 38 30 2d 31 65 38 35 2c 75 2b 31 65 39 65 2c 75 2b 31 65 66 32 2d 31 65 66 33 2c 75 2b 32 30 33 30 2c 75 2b 32 30 33 39 2d 32 30 33 61 2c 75 2b 32 30 61 63 2c 75 2b 32 30 62 61 2c 75 2b 32 31 31 33 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 61 6e 76 61 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 Data Ascii: 6,u+00f8-0148,u+014a-017e,u+0192,u+01b5-01b6,u+01fc-01fd,u+0218-021b,u+0237,u+02c6-02c7,u+02c9,u+02d8-02dd,u+1e80-1e85,u+1e9e,u+1ef2-1ef3,u+2030,u+2039-203a,u+20ac,u+20ba,u+2113}@font-face{font-display:swap;font-family:Canva Sans;font-style:normal;font-we
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 46 5c 75 30 30 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 22 2c 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 75 30 30 32 46 5c 75 30 30 32 46 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 5c 75 30 30 32 46 73 74 61 74 69 63 5c 75 30 30 32 46 69 6d 61 67 65 73 5c 75 30 30 32 46 63 61 6e 76 61 5f 6c 6f 67 6f 5f 31 30 30 78 31 30 30 40 32 78 2e 70 6e 67 22 2c 22 66 6f 75 6e 64 69 6e 67 44 61 74 65 22 3a 22 32 30 31 32 22 2c 22 61 64 64 72 65 73 73 22 3a 7b 22 40 74 79 70 65 22 3a 22 50 6f 73 74 61 6c 41 64 64 72 65 73 73 22 2c 22 73 74 72 65 65 74 41 64 64 72 65 73 73 22 3a 22 31 31 30 20 4b 69 70 70 61 78 20 53 74 72 65 65 74 22 2c 22 61 64 64 72 65 73 73 4c 6f 63 61 6c 69 74 79 22 3a 22 53 75 72 72 79 20 48 69 6c 6c 73 22 2c 22 61 64 64 72 65 73 73 52 Data Ascii: F\u002Fwww.canva.com","logo":"https:\u002F\u002Fstatic.canva.com\u002Fstatic\u002Fimages\u002Fcanva_logo_100x100@2x.png","foundingDate":"2012","address":{"@type":"PostalAddress","streetAddress":"110 Kippax Street","addressLouserty":"Surry Hills","addressR
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 66 5f 7a 61 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 66 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 72 5f 65 67 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 61 73 5f 69 6e 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 61 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 Data Ascii: te" href="https://www.canva.com/af_za/login/" hreflang="af"><link rel="alternate" href="https://www.canva.com/ar_eg/login/" hreflang="ar"><link rel="alternate" href="https://www.canva.com/as_in/login/" hreflang="as"><link rel="alternate" href="https://www
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 41 52 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 63 6f 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 2d 43 4f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 65 73 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 73 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 65 73 5f 6d 78 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 Data Ascii: /login/" hreflang="es-AR"><link rel="alternate" href="https://www.canva.com/es_co/login/" hreflang="es-CO"><link rel="alternate" href="https://www.canva.com/es_es/login/" hreflang="es"><link rel="alternate" href="https://www.canva.com/es_mx/login/" hrefla
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 72 5f 68 72 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 75 5f 68 75 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 75 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 68 79 5f 61 6d 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 68 79 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 Data Ascii: ink rel="alternate" href="https://www.canva.com/hr_hr/login/" hreflang="hr"><link rel="alternate" href="https://www.canva.com/hu_hu/login/" hreflang="hu"><link rel="alternate" href="https://www.canva.com/hy_am/login/" hreflang="hy"><link rel="alternate" h
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 2e 63 6f 6d 2f 6d 67 5f 6d 67 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 6b 5f 6d 6b 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 6b 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 6c 5f 69 6e 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 6d 6c 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 6d 6e 5f 6d 6e 2f 6c 6f 67 69 6e 2f 22 20 68 72 Data Ascii: .com/mg_mg/login/" hreflang="mg"><link rel="alternate" href="https://www.canva.com/mk_mk/login/" hreflang="mk"><link rel="alternate" href="https://www.canva.com/ml_in/login/" hreflang="ml"><link rel="alternate" href="https://www.canva.com/mn_mn/login/" hr
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 72 75 5f 72 75 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 72 75 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 64 5f 69 6e 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 64 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 73 69 5f 6c 6b 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 73 69 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 Data Ascii: link rel="alternate" href="https://www.canva.com/ru_ru/login/" hreflang="ru"><link rel="alternate" href="https://www.canva.com/sd_in/login/" hreflang="sd"><link rel="alternate" href="https://www.canva.com/si_lk/login/" hreflang="si"><link rel="alternate"
2024-10-31 00:09:33 UTC	1369	IN	Data Raw: 61 2e 63 6f 6d 2f 75 6b 5f 75 61 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 75 6b 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 75 72 5f 70 6b 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 75 72 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 75 7a 5f 75 7a 2f 6c 6f 67 69 6e 2f 22 20 68 72 65 66 6c 61 6e 67 3d 22 75 7a 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 2f 76 69 5f 76 6e 2f 6c 6f 67 69 6e 2f 22 20 68 Data Ascii: a.com/uk_ua/login/" hreflang="uk"><link rel="alternate" href="https://www.canva.com/ur_pk/login/" hreflang="ur"><link rel="alternate" href="https://www.canva.com/uz_uz/login/" hreflang="uz"><link rel="alternate" href="https://www.canva.com/vi_vn/login/" h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49703	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:33 UTC	582	OUT	GET /web/779f535dfc7e9155.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	1350	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: text/css Content-Length: 98098 Connection: close CF-Ray: 8daf6ac39865a915-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 153139 Cache-Control: public, max-age=31556926 ETag: "cbf02aeee058ce5360a37fc290aed4be" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Tue, 29 Oct 2024 05:22:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 30 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 4qyg9DI9B7gbqfNxtu0VIp8ZlEfvGRb+oHfzm/CKqOqPS64O+9twmCH5Stkr3pfhRkV6wQcifQs= x-amz-replication-status: COMPLETED x-amz-request-id: 1RF5ETY3HEQYFGHP x-amz-server-side-encryption: AES256 x-amz-version-id: IVslpMvPTbm.0m3d5DU5vQcvisNzUOYm X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 66 41 78 76 6d 4c 55 6b 56 46 36 39 51 2e 48 71 6e 6a 55 43 50 4a 77 53 67 53 45 4e 55 4f 79 42 79 66 64 4c 58 39 66 43 46 64 30 2d 31 37 33 30 33 33 33 33 37 34 2d 31 2e 30 2e 31 2e 31 2d 33 78 61 66 6a 44 47 4e 69 5f 44 4f 38 6e 33 6e 6b 45 4b 35 55 47 39 31 7a 56 66 71 78 33 6c 66 37 68 58 68 54 4a 4d 57 4e 5f 2e 7a 68 79 74 42 5f 58 58 32 36 2e 47 4c 63 51 4f 43 34 79 6c 55 41 64 33 6b 76 38 58 69 38 55 52 57 6b 49 48 68 54 54 64 4b 70 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=fAxvmLUkVF69Q.HqnjUCPJwSgSENUOyByfdLX9fCFd0-1730333374-1.0.1.1-3xafjDGNi_DO8n3nkEK5UG91zVfqx3lf7hXhTJMWN_.zhytB_XX26.GLcQOC4ylUAd3kv8Xi8URWkIHhTTdKpA; path=/; expires=Thu, 31-Oct-24 00:39:34 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:34 UTC	605	IN	Data Raw: 2e 74 68 65 6d 65 7b 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 76 61 72 28 2d 2d 34 68 2d 6d 5f 41 29 7d 2e 6c 69 67 68 74 7b 2d 2d 34 68 2d 6d 5f 41 3a 6c 69 67 68 74 3b 2d 2d 5a 70 61 2d 4b 41 3a 23 30 30 63 34 63 63 3b 2d 2d 65 47 56 62 6e 67 3a 23 38 62 33 64 66 66 3b 2d 2d 4d 35 5f 70 76 41 3a 23 37 37 33 31 64 38 3b 2d 2d 62 6f 4b 4b 57 67 3a 23 36 31 32 64 61 65 3b 2d 2d 6f 71 75 72 64 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 64 31 70 39 39 77 3a 23 66 66 66 3b 2d 2d 31 37 4c 66 48 77 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 45 67 57 67 66 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 58 33 2d 2d 5a 67 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 78 66 79 38 Data Ascii: .theme{color-scheme:var(--4h-m_A)}.light{--4h-m_A:light;--Zpa-KA:#00c4cc;--eGVbng:#8b3dff;--M5_pvA:#7731d8;--boKKWg:#612dae;--oqurdw:rgba(64,87,109,.07);--d1p99w:#fff;--17LfHw:rgba(36,49,61,.4);--EgWgfg:rgba(13,18,22,0);--X3--Zg:rgba(64,87,109,.07);--xfy8
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 30 64 31 32 31 36 3b 2d 2d 54 5a 4f 49 37 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 31 35 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 72 67 62 61 28 36 34 2c 38 37 2c 31 30 39 2c 2e 30 37 29 3b 2d 2d 38 45 78 35 67 41 3a 23 36 31 32 64 61 65 3b 2d 2d 73 70 49 50 32 41 3a 72 67 62 61 28 33 36 2c 34 39 2c 36 31 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e 36 29 3b 2d 2d 51 Data Ascii: gba(13,18,22,0);--QeQ0Dw:#0d1216;--TZOI7A:rgba(36,49,61,.4);--SZMkXA:rgba(165,112,255,.15);--1zesEA:rgba(165,112,255,.15);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:rgba(64,87,109,.07);--8Ex5gA:#612dae;--spIP2A:rgba(36,49,61,.4);--KtXlRg:rgba(17,23,29,.6);--Q
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 29 3b 2d 2d 54 70 35 34 56 77 3a 23 66 30 66 31 66 35 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 32 34 30 2c 32 34 31 2c 32 34 35 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 32 34 30 2c 32 34 31 2c 32 34 35 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 66 36 66 37 66 38 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 36 2c 32 34 37 2c 32 34 38 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 66 66 66 3b 2d 2d 50 6a 36 47 5a 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 66 66 66 3b 2d 2d 46 36 46 32 4e 51 3a 68 73 6c 61 28 30 2c 30 25 Data Ascii: );--Tp54Vw:#f0f1f5;--pf_JRQ:rgba(240,241,245,.7);--ys5XGg:rgba(240,241,245,0);--dVucJw:#f6f7f8;--u6VULg:rgba(246,247,248,.7);--cm5OeQ:rgba(246,247,248,0);--C-q6Ig:#fff;--Pj6GZQ:hsla(0,0%,100%,.7);--r6MHXQ:hsla(0,0%,100%,0);--4RaSjg:#fff;--F6F2NQ:hsla(0,0%
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3b 2d 2d 54 77 69 4c 63 67 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 30 29 3b 2d 2d 51 65 51 30 44 77 3a 23 66 66 66 3b 2d 2d 54 5a 4f 49 37 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 53 5a 4d 6b 58 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 31 7a 65 73 45 41 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 33 29 3b 2d 2d 41 4d 78 52 67 77 3a 72 67 62 61 28 31 36 35 2c 31 31 32 2c 32 35 35 2c 2e 32 29 3b 2d 2d 42 5a 36 30 4a 77 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 35 29 3b 2d 2d 38 45 78 35 67 41 3a 23 66 66 66 3b 2d 2d 73 70 49 50 32 41 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 3b 2d 2d 4b 74 58 6c 52 67 3a 72 67 62 61 28 31 37 2c 32 33 2c 32 39 2c 2e Data Ascii: ;--TwiLcg:hsla(0,0%,100%,0);--QeQ0Dw:#fff;--TZOI7A:hsla(0,0%,100%,.4);--SZMkXA:rgba(165,112,255,.3);--1zesEA:rgba(165,112,255,.3);--AMxRgw:rgba(165,112,255,.2);--BZ60Jw:hsla(0,0%,100%,.15);--8Ex5gA:#fff;--spIP2A:hsla(0,0%,100%,.4);--KtXlRg:rgba(17,23,29,.
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3b 2d 2d 54 70 35 34 56 77 3a 23 30 64 31 32 31 36 3b 2d 2d 70 66 5f 4a 52 51 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 2e 37 29 3b 2d 2d 79 73 35 58 47 67 3a 72 67 62 61 28 31 33 2c 31 38 2c 32 32 2c 30 29 3b 2d 2d 64 56 75 63 4a 77 3a 23 31 38 31 39 31 62 3b 2d 2d 75 36 56 55 4c 67 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 63 6d 35 4f 65 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 43 2d 71 36 49 67 3a 23 31 38 31 39 31 62 3b 2d 2d 50 6a 36 47 5a 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 2e 37 29 3b 2d 2d 72 36 4d 48 58 51 3a 72 67 62 61 28 32 34 2c 32 35 2c 32 37 2c 30 29 3b 2d 2d 34 52 61 53 6a 67 3a 23 32 35 32 36 32 37 3b 2d 2d 46 36 46 32 4e 51 3a 72 67 62 61 28 33 37 2c 33 38 2c 33 39 2c 2e 37 29 3b Data Ascii: ;--Tp54Vw:#0d1216;--pf_JRQ:rgba(13,18,22,.7);--ys5XGg:rgba(13,18,22,0);--dVucJw:#18191b;--u6VULg:rgba(24,25,27,.7);--cm5OeQ:rgba(24,25,27,0);--C-q6Ig:#18191b;--Pj6GZQ:rgba(24,25,27,.7);--r6MHXQ:rgba(24,25,27,0);--4RaSjg:#252627;--F6F2NQ:rgba(37,38,39,.7);
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 50 4f 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 59 6e 52 71 54 51 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 65 6e 64 7d 2e 71 46 35 70 55 41 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 5a 6f 49 74 4f 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 7d 2e 46 33 71 39 44 51 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 7d 2e 53 5f 61 70 59 51 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 61 72 74 7d 2e 6a 30 44 33 45 77 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 51 5f 43 4d 71 41 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 65 6e 64 7d 2e 68 4c 30 64 49 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 7d 2e 6c 69 67 68 74 7b 2d 2d 78 70 46 6b 31 41 3a Data Ascii: POw{align-items:flex-start}.YnRqTQ{align-items:end}.qF5pUA{align-items:flex-end}.ZoItOA{align-self:stretch}.F3q9DQ{align-self:center}.S_apYQ{align-self:start}.j0D3Ew{align-self:flex-start}.Q_CMqA{align-self:end}.hL0dIg{align-self:flex-end}.light{--xpFk1A:
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 29 7d 2e 4e 55 4b 65 54 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 59 55 4c 6c 77 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 76 37 48 56 49 67 29 7d 2e 57 6f 46 32 72 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 64 5a 55 53 41 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 4f 51 32 67 70 41 29 7d 2e 5f 31 39 4e 42 71 41 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 31 4d 4f 30 49 51 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 73 34 51 70 41 29 7d 2e 5f 65 44 37 39 77 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 56 4e 58 70 53 77 29 7d 2e 72 43 69 32 39 41 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 7d 2e 44 4c 39 4b 6f 51 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: )}.NUKeTg{background-color:var(--pYULlw);color:var(--v7HVIg)}.WoF2rw{background-color:var(--ydZUSA);color:var(--OQ2gpA)}._19NBqA{background-color:var(--1MO0IQ);color:var(--fs4QpA)}._eD79w{color:var(--VNXpSw)}.rCi29A{border-radius:4px}.DL9KoQ{border-radius
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 4f 77 7b 2d 2d 61 73 37 68 55 67 3a 76 61 72 28 2d 2d 7a 4f 58 31 58 51 29 3b 2d 2d 53 78 51 36 53 77 3a 76 61 72 28 2d 2d 61 73 37 68 55 67 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 5f 36 4d 75 34 4f 77 7b 2d 2d 6b 58 65 53 37 41 3a 76 61 72 28 2d 2d 61 73 37 68 55 67 29 3b 2d 2d 53 78 51 36 53 77 3a 76 61 72 28 2d 2d 6b 58 65 53 37 41 29 7d 7d 2e 75 4e 33 45 49 41 7b 2d 2d 59 52 62 73 63 67 3a 72 6f 77 3b 2d 2d 7a 79 48 4d 4a 77 3a 76 61 72 28 2d 2d 59 52 62 73 63 67 29 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 7a 79 48 4d 4a 77 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 75 4e 33 45 49 41 7b 2d 2d 77 52 4a 37 35 41 3a 76 61 72 28 2d 2d 59 52 Data Ascii: Ow{--as7hUg:var(--zOX1XQ);--SxQ6Sw:var(--as7hUg)}}@media (min-width:1200px){._6Mu4Ow{--kXeS7A:var(--as7hUg);--SxQ6Sw:var(--kXeS7A)}}.uN3EIA{--YRbscg:row;--zyHMJw:var(--YRbscg);flex-direction:var(--zyHMJw)}@media (min-width:600px){.uN3EIA{--wRJ75A:var(--YR
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 2d 2d 71 7a 42 6b 35 67 3a 76 61 72 28 2d 2d 6e 7a 39 68 73 67 29 3b 2d 2d 4d 65 6b 6c 37 77 3a 76 61 72 28 2d 2d 71 7a 42 6b 35 67 29 3b 2d 2d 45 6f 55 70 52 51 3a 76 61 72 28 2d 2d 4a 6d 47 74 56 77 29 3b 2d 2d 58 31 35 57 38 41 3a 76 61 72 28 2d 2d 45 6f 55 70 52 51 29 3b 2d 2d 78 6a 42 7a 6c 41 3a 76 61 72 28 2d 2d 50 41 32 34 64 67 29 3b 2d 2d 43 31 5f 6d 6b 77 3a 76 61 72 28 2d 2d 78 6a 42 7a 6c 41 29 3b 2d 2d 42 2d 7a 35 72 77 3a 76 61 72 28 2d 2d 52 71 58 71 35 77 29 3b 2d 2d 75 32 69 56 6d 67 3a 76 61 72 28 2d 2d 42 2d 7a 35 72 77 29 3b 2d 2d 52 52 57 34 44 77 3a 76 61 72 28 2d 2d 33 42 36 73 4b 77 29 3b 2d 2d 6f 71 41 34 79 67 3a 76 61 72 28 2d 2d 52 52 57 34 44 77 29 3b 2d 2d 57 2d 45 64 38 67 3a 76 61 72 28 2d 2d 6f 35 58 54 6b 77 29 3b 2d 2d Data Ascii: --qzBk5g:var(--nz9hsg);--Mekl7w:var(--qzBk5g);--EoUpRQ:var(--JmGtVw);--X15W8A:var(--EoUpRQ);--xjBzlA:var(--PA24dg);--C1_mkw:var(--xjBzlA);--B-z5rw:var(--RqXq5w);--u2iVmg:var(--B-z5rw);--RRW4Dw:var(--3B6sKw);--oqA4yg:var(--RRW4Dw);--W-Ed8g:var(--o5XTkw);--

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49704	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	871	OUT	GET /web/images/856bac30504ecac8dbd38dbee61de1f1.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:34 UTC	1188	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: image/svg+xml Content-Length: 2532 Connection: close CF-Ray: 8daf6ac42ca22cb5-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 552440 Cache-Control: public, max-age=31556926 ETag: "856bac30504ecac8dbd38dbee61de1f1" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Tue, 08 Oct 2024 09:19:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 09 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lk6iiAueBQFpkqJ/qLb+SDum9R64c5Arbr+lBpBFtXUxIH6gijidHzPAHLFPksOsM1CsPH+j+K0= x-amz-replication-status: COMPLETED x-amz-request-id: J8G9T3AP948MWS29 x-amz-server-side-encryption: AES256 x-amz-version-id: i2JDH6Fz4MltcDNllQLm7Ntkqub8pIyU X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 4c 74 34 78 51 38 5a 43 43 58 46 4d 4e 46 6b 7a 46 64 71 52 34 4f 44 56 30 64 48 72 72 6a 63 4e 51 73 47 48 6d 43 46 72 47 64 25 32 46 7a 50 5a 43 70 58 59 44 39 6e 66 39 74 6b 63 74 6d 56 59 67 32 25 32 46 55 54 76 33 75 33 56 50 61 43 35 70 64 43 31 73 6a 48 6e 62 4b 46 77 6b 54 55 79 4d 63 49 53 76 42 33 71 55 75 32 78 4b 4a 6a 77 37 76 37 46 76 67 43 41 57 34 53 49 77 63 55 63 35 47 45 74 58 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lLt4xQ8ZCCXFMNFkzFdqR4ODV0dHrrjcNQsGHmCFrGd%2FzPZCpXYD9nf9tkctmVYg2%2FUTv3u3VPaC5pdC1sjHnbKFwkTUyMcISvB3qUu2xKJjw7v7FvgCAW4SIwcUc5GEtXU%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:34 UTC	1202	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 39 2e 34 34 34 20 31 38 2e 30 39 36 63 2d 2e 31 33 36 20 30 2d 2e 32 36 2e 30 38 38 2d 2e 33 32 34 2e 32 37 32 2d 2e 38 32 20 32 2e 33 34 2d 31 2e 39 32 38 20 33 2e 37 33 32 2d 32 2e 38 34 20 33 2e 37 33 32 2d 2e 35 32 34 20 30 2d 2e 37 33 36 2d 2e 35 38 34 2d 2e 37 33 36 2d 31 2e 35 20 30 2d 32 2e 32 39 32 20 31 2e 33 37 32 2d 37 2e 31 35 32 20 32 2e 30 36 34 2d 39 2e 33 36 38 2e 30 38 2d 2e 32 36 38 2e 31 33 32 2d 2e 35 30 38 2e 31 33 32 2d Data Ascii: <svg width="80" height="30" viewBox="0 0 80 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M79.444 18.096c-.136 0-.26.088-.324.272-.82 2.34-1.928 3.732-2.84 3.732-.524 0-.736-.584-.736-1.5 0-2.292 1.372-7.152 2.064-9.368.08-.268.132-.508.132-
2024-10-31 00:09:34 UTC	1330	IN	Data Raw: 34 2e 33 33 36 2d 34 2e 36 36 38 20 38 2e 35 32 34 2d 38 2e 38 36 38 20 38 2e 35 32 34 2d 33 2e 38 31 32 20 30 2d 35 2e 38 32 34 2d 33 2e 31 37 32 2d 35 2e 38 32 34 2d 38 2e 31 38 34 43 34 2e 30 36 38 20 38 2e 33 31 32 20 39 2e 33 38 20 32 2e 34 20 31 33 2e 33 32 20 32 2e 34 63 31 2e 38 38 34 20 30 20 32 2e 37 38 34 20 31 2e 32 20 32 2e 37 38 34 20 33 2e 30 34 20 30 20 32 2e 32 32 38 2d 31 2e 32 34 34 20 33 2e 32 36 34 2d 31 2e 32 34 34 20 34 2e 31 31 32 20 30 20 2e 32 36 2e 32 31 36 2e 35 31 36 2e 36 34 34 2e 35 31 36 20 31 2e 37 31 32 20 30 20 33 2e 37 32 38 2d 32 2e 30 31 32 20 33 2e 37 32 38 2d 34 2e 37 35 36 53 31 37 2e 30 30 34 2e 35 36 20 31 33 2e 30 36 34 2e 35 36 43 36 2e 35 35 32 2e 35 36 20 30 20 37 2e 31 31 32 20 30 20 31 35 2e 35 30 38 63 30 Data Ascii: 4.336-4.668 8.524-8.868 8.524-3.812 0-5.824-3.172-5.824-8.184C4.068 8.312 9.38 2.4 13.32 2.4c1.884 0 2.784 1.2 2.784 3.04 0 2.228-1.244 3.264-1.244 4.112 0 .26.216.516.644.516 1.712 0 3.728-2.012 3.728-4.756S17.004.56 13.064.56C6.552.56 0 7.112 0 15.508c0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49709	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	571	OUT	GET /web/e5aa5e318fd5dfa0.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	1357	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: text/javascript Content-Length: 42391 Connection: close CF-Ray: 8daf6ac5ad552e72-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 152961 Cache-Control: public, max-age=31556926 ETag: "7a4ddde5084e819729ce5f7b17c0194f" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Tue, 29 Oct 2024 05:22:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 30 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: N6zQa+5/yC0fbqV5quAhsC95YtixGxASUM7ZWBWidnDiAXu7IVbW36grZkfhel+XpO5OJdfZqks= x-amz-replication-status: COMPLETED x-amz-request-id: QRHCVJ1SVA994WP5 x-amz-server-side-encryption: AES256 x-amz-version-id: VjTKDyg1ZdtZiFufkEinvIclJN4yPWZm X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	777	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 65 65 6d 6c 35 56 65 74 56 46 78 50 5f 6d 2e 6d 72 56 4c 65 49 46 42 57 72 34 36 6f 46 53 46 6b 44 37 65 2e 4b 54 6f 6e 33 33 30 2d 31 37 33 30 33 33 33 33 37 34 2d 31 2e 30 2e 31 2e 31 2d 30 55 47 6d 6b 76 4c 4b 59 74 76 79 65 6c 35 33 44 62 36 43 61 30 4f 48 59 51 62 46 6b 65 47 39 6c 4c 38 49 73 6b 66 4f 6a 5a 75 59 69 5f 65 41 6d 30 6e 73 6e 49 37 76 54 43 45 2e 76 31 72 56 47 74 61 61 4b 53 48 31 47 6d 6c 4e 33 6f 45 77 36 34 65 4a 6a 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=eeml5VetVFxP_m.mrVLeIFBWr46oFSFkD7e.KTon330-1730333374-1.0.1.1-0UGmkvLKYtvyel53Db6Ca0OHYQbFkeG9lL8IskfOjZuYi_eAm0nsnI7vTCE.v1rVGtaaKSH1GmlN3oEw64eJjw; path=/; expires=Thu, 31-Oct-24 00:39:34 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 42 51 6b 4f 43 51 5c 22 3a 5c 22 7b 30 7d 4b 5c 22 2c 5c 22 6d 59 44 31 4a 67 5c 22 3a 5c 22 43 6f 6e 66 69 72 6d 5c 22 2c 5c 22 6c 48 4f 75 4b 77 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 43 6f 6c 6f 72 69 6e 67 42 6f 6f 6b 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c 22 3a 5c 22 43 68 61 6e 67 65 20 65 6d 61 69 6c 5c 22 2c 5c 22 33 44 58 6e 43 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 44 69 73 6e 65 79 20 63 6f 6c 6c 65 63 74 69 6f 6e 3c 2f 73 70 61 6e 3e 5c Data Ascii: (function() { const messages = JSON.parse("{\"BQkOCQ\":\"{0}K\",\"mYD1Jg\":\"Confirm\",\"lHOuKw\":\"Log back in to discover <span>ColoringBook</span>\",\"nGBlYg\":\"Change email\",\"3DXnCQ\":\"Log in or sign up to discover <span>Disney collection</span>\
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 5c 22 57 54 64 56 6e 41 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4e 65 77 20 50 6f 70 75 6c 61 72 20 4d 75 73 69 63 20 74 72 61 63 6b 73 20 26 20 66 61 6e 20 6b 69 74 73 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 6a 70 33 33 31 67 5c 22 3a 5c 22 57 65 e2 80 99 76 65 20 72 75 6e 20 69 6e 74 6f 20 61 20 74 65 63 68 6e 69 63 61 6c 20 69 73 73 75 65 20 6f 6e 20 6f 75 72 20 65 6e 64 2e 20 54 72 79 20 61 67 61 69 6e 20 69 6e 20 61 20 66 65 77 20 6d 6f 6d 65 6e 74 73 2e 5c 22 2c 5c 22 33 62 78 46 49 67 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 43 6f 6c 6f 72 69 7a 65 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 52 54 56 59 50 41 5c 22 3a 5c 22 41 70 72 Data Ascii: \"WTdVnA\":\"Log back in to discover <span>New Popular Music tracks & fan kits</span>\",\"jp331g\":\"Weve run into a technical issue on our end. Try again in a few moments.\",\"3bxFIg\":\"Log back in to discover <span>Colorize</span>\",\"RTVYPA\":\"Apr
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 75 65 20 77 69 74 68 20 57 65 43 68 61 74 5c 22 2c 5c 22 4c 49 6a 70 56 41 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4d 61 67 69 63 20 45 72 61 73 65 72 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 37 4b 51 4e 34 51 5c 22 3a 5c 22 7b 30 7d 4b 5c 22 2c 5c 22 2f 42 36 6f 5a 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 63 72 65 61 74 65 20 61 20 50 6f 73 74 65 72 5c 22 2c 5c 22 61 6b 4d 41 64 41 5c 22 3a 5c 22 50 69 63 6b 20 75 70 20 77 68 65 72 65 20 79 6f 75 20 6c 65 66 74 20 6f 66 66 20 6f 72 20 63 6f 6e 74 69 6e 75 65 20 61 73 20 61 6e 6f 74 68 65 72 20 75 73 65 72 2e 5c 22 2c 5c 22 56 44 34 79 63 51 5c 22 3a 5c 22 7b 30 7d 4d 5c 22 2c 5c 22 61 6b Data Ascii: ue with WeChat\",\"LIjpVA\":\"Log in or sign up to discover <span>Magic Eraser</span>\",\"7KQN4Q\":\"{0}K\",\"/B6oZQ\":\"Log in or sign up to create a Poster\",\"akMAdA\":\"Pick up where you left off or continue as another user.\",\"VD4ycQ\":\"{0}M\",\"ak
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 57 69 2d 46 69 20 6e 65 74 77 6f 72 6b 2c 20 74 75 72 6e 20 6f 66 66 20 61 6e 79 20 56 50 4e 73 2c 20 6f 72 20 75 73 65 20 61 6e 6f 74 68 65 72 20 62 72 6f 77 73 65 72 2e 20 49 66 20 79 6f 75 20 73 74 69 6c 6c 20 6e 65 65 64 20 68 65 6c 70 2c 20 63 6f 6e 74 61 63 74 20 75 73 20 77 69 74 68 20 74 68 65 20 65 72 72 6f 72 20 63 6f 64 65 20 7b 30 7d 2e 5c 22 2c 5c 22 4b 49 51 56 46 41 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 41 69 56 4f 4f 56 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 57 33 72 6e 44 67 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 4d 69 63 72 6f 73 6f 66 74 5c 22 2c 5c 22 31 6d 6f 2f 4a 51 5c 22 3a 5c 22 57 65 20 72 65 64 69 72 65 63 74 65 64 20 79 6f 75 20 74 6f 20 43 61 6e Data Ascii: Wi-Fi network, turn off any VPNs, or use another browser. If you still need help, contact us with the error code {0}.\",\"KIQVFA\":\"Log back in to discover <span>AiVOOV</span>\",\"W3rnDg\":\"Continue with Microsoft\",\"1mo/JQ\":\"We redirected you to Can
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3e 2c 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 31 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 3c 2f 61 3e 2c 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 32 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 43 68 69 6c 64 72 65 6e e2 80 99 73 20 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 3c 2f 61 3e 20 61 6e 64 20 74 68 65 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 33 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 50 65 72 Data Ascii: >, <a href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Privacy Policy</a>, <a href=\\\"{2}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Childrens Privacy Policy</a> and the <a href=\\\"{3}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Per
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 68 20 79 6f 75 72 20 70 61 73 73 6b 65 79 20 6f 72 20 69 74 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 52 6a 2f 50 31 41 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 7b 30 7d 20 74 6f 20 6c 6f 67 20 69 6e 20 74 6f 20 7b 31 7d 2e 5c 22 2c 5c 22 36 53 54 4c 31 67 5c 22 3a 5c 22 4e 6f 74 68 69 6e 67 20 68 61 70 70 65 6e 65 64 3f 5c 22 2c 5c 22 6c 6e 58 49 7a 41 5c 22 3a 5c 22 4e 53 57 20 53 69 67 6e 20 55 70 5c 22 2c 5c 22 66 45 6f 77 70 77 5c 22 3a 5c 22 4c 61 73 74 20 74 69 6d 65 20 79 6f 75 20 75 73 65 64 20 57 65 43 68 61 74 20 74 6f 20 6c 6f 67 20 69 6e 2e 5c 22 2c 5c 22 38 2f 37 72 51 51 5c 22 3a 5c 22 41 75 67 Data Ascii: h your passkey or it was not found. Please try another method below.\",\"Rj/P1A\":\"Last time you used {0} to log in to {1}.\",\"6STL1g\":\"Nothing happened?\",\"lnXIzA\":\"NSW Sign Up\",\"fEowpw\":\"Last time you used WeChat to log in.\",\"8/7rQQ\":\"Aug
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 72 65 73 73 2e 5c 22 2c 5c 22 73 72 52 31 57 77 5c 22 3a 5c 22 45 78 70 61 6e 64 20 e2 80 9c 7b 30 7d e2 80 9d 5c 22 2c 5c 22 55 74 4c 6f 35 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 43 61 6e 76 61 20 74 68 72 6f 75 67 68 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2c 20 74 68 65 6e 20 77 65 e2 80 99 6c 6c 20 62 72 69 6e 67 20 79 6f 75 20 72 69 67 68 74 20 62 61 63 6b 20 68 65 72 65 2e 5c 22 2c 5c 22 67 31 4a 52 6a 51 5c 22 3a 5c 22 54 68 65 72 65 20 77 61 73 20 61 6e 20 65 72 72 6f 72 20 77 68 65 6e 20 63 68 65 63 6b 69 6e 67 20 79 6f 75 72 20 63 6f 64 65 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 5c 22 2c 5c 22 7a 73 58 51 53 67 5c 22 3a 5c 22 53 65 6e 64 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 65 6d 61 Data Ascii: ress.\",\"srR1Ww\":\"Expand {0}\",\"UtLo5Q\":\"Log in or sign up to Canva through your browser, then well bring you right back here.\",\"g1JRjQ\":\"There was an error when checking your code. Please try again.\",\"zsXQSg\":\"Send confirmation ema
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 22 2c 5c 22 56 32 54 73 65 77 5c 22 3a 5c 22 e4 ba ac e5 85 ac e5 ae 89 e5 a4 87 31 31 30 31 30 35 30 32 30 33 39 30 37 33 e5 8f b7 5c 22 2c 5c 22 78 53 74 36 6f 51 5c 22 3a 5c 22 4e 6f 74 20 75 73 69 6e 67 20 43 61 6e 76 61 20 66 6f 72 20 77 6f 72 6b 3f 5c 22 2c 5c 22 76 52 69 41 56 67 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 63 72 65 61 74 65 20 61 20 43 56 5c 22 2c 5c 22 61 2f 63 63 45 67 5c 22 3a 5c 22 49 20 75 6e 64 65 72 73 74 61 6e 64 5c 22 2c 5c 22 65 59 57 54 36 67 5c 22 3a 5c 22 43 6c 65 61 72 5c 22 2c 5c 22 38 74 41 61 7a 41 5c 22 3a 5c 22 42 65 63 61 75 73 65 20 79 6f 75 e2 80 99 72 65 20 75 73 69 6e 67 20 61 20 63 6f 6d 70 61 6e 79 20 65 6d 61 69 6c 2c 20 77 65 e2 80 99 6c 6c 20 61 73 73 75 6d 65 20 74 68 Data Ascii: ",\"V2Tsew\":\"11010502039073\",\"xSt6oQ\":\"Not using Canva for work?\",\"vRiAVg\":\"Log in or sign up to create a CV\",\"a/ccEg\":\"I understand\",\"eYWT6g\":\"Clear\",\"8tAazA\":\"Because youre using a company email, well assume th
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 20 79 65 61 72 20 72 61 6e 67 65 5c 22 2c 5c 22 47 7a 6d 6a 56 67 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4d 61 67 69 63 20 4d 65 64 69 61 20 66 6f 72 20 56 69 64 65 6f 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 43 47 6e 4e 6a 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 74 6f 20 43 61 6e 76 61 20 77 69 74 68 20 74 68 65 20 61 63 63 6f 75 6e 74 20 63 75 72 72 65 6e 74 6c 79 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 7b 30 7d 2e 5c 22 2c 5c 22 58 53 32 73 49 41 5c 22 3a 5c 22 57 65 20 63 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 67 20 79 6f 75 20 69 6e 20 76 69 61 20 53 53 4f 20 6f 6e 20 74 68 69 73 20 70 61 67 65 2e 20 50 6c 65 61 73 65 20 67 6f 20 74 6f 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 2f 6c 6f Data Ascii: year range\",\"GzmjVg\":\"Log back in to discover <span>Magic Media for Video</span>\",\"CGnNjQ\":\"Log in to Canva with the account currently associated with {0}.\",\"XS2sIA\":\"We couldnt log you in via SSO on this page. Please go to <a href=\\\"/lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49706	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	795	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:34 UTC	1350	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6ac5a81ae84b-DFW CF-Cache-Status: HIT Age: 137622 Cache-Control: public, max-age=31556926 ETag: W/"91258797204803263e4c46f8400f1bda" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Mon, 14 Oct 2024 22:43:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: n/tgAv7nhdMK8+ZDRGJEaCxpKxVhLFJZMQK/5RvJNADTgttBr37iBiAAR/bcmMUlTegrHaZW7D4= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: 4BC7Q2FFFT5VZFJY x-amz-server-side-encryption: AES256 x-amz-version-id: tozEOUZEBcqjRpGz85aK0Lg42bZme1w8 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sygutlRLkQnNKmJ0nqUsEJTX62MU4pT8xfO6lOx%2BAHuglpGzoduSWyeXIsrJir82KciiRMUIhBEHC5q5Gc01%2F7KzmfM%2FaVUjvJ1ceFVtpUMrvUX67bBZBAh2b3GeDAMbUSc%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:34 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 7ffa/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 4a 28 6e 29 2c 75 72 6c 3a 4b 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 79 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 73 74 6f 72 79 22 3a 21 66 Data Ascii: Data:{method:J(n),url:K(n)},startTimestamp:Date.now()};return W("fetch",{...e}),t.apply(y,n).then((t=>(W("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw W("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}))}();break;case"history":!f
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 79 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 47 3b 6c 65 74 20 56 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 51 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 6e 7c 7c 21 6e 2e 74 61 67 4e 61 Data Ascii: GET"}function K(t=[]){return"string"==typeof t[0]?t[0]:"Request"in y&&h(t[0],Request)?t[0].url:String(t[0])}let G;let V,Q;function Y(t,n=!1){return e=>{if(!e\|\|Q===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n=t.target;if(!n\|\|!n.tagNa
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 65 3d 65 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 4f 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 22 2c 21 30 29 7d 63 61 74 63 68 28 74 Data Ascii: e=et(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ot(t){if(t&&t.__sentry_captured__)return!0;try{O(t,"__sentry_captured__",!0)}catch(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49708	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	571	OUT	GET /web/79679fd80f393deb.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: text/javascript Content-Length: 22333 Connection: close CF-Ray: 8daf6ac5aea2e5fa-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 75246 Cache-Control: public, max-age=31556926 ETag: "c92f01b6df44fdd9db0e80496ff01291" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Wed, 30 Oct 2024 03:11:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: VEFooGhgs9KiPpTWGcwMuWDmqKlNE+8lb5ulMkoLl2XGOYMD5DD5j9RU/WvgVze8pRy5qYG1Ya8= x-amz-replication-status: COMPLETED x-amz-request-id: 4GABQRFW06W20HAH x-amz-server-side-encryption: AES256 x-amz-version-id: wlfFoWpeFUMGZTFIxx24cuXtl9BZPV5q X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	773	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 79 2e 75 33 72 44 39 62 72 50 41 54 54 79 51 4c 66 4a 62 70 54 37 44 38 6a 57 4f 57 43 70 69 49 62 39 58 56 51 35 4d 41 50 6c 6b 2d 31 37 33 30 33 33 33 33 37 34 2d 31 2e 30 2e 31 2e 31 2d 6c 70 5f 38 59 53 79 78 39 6b 42 62 68 53 66 65 53 73 55 75 54 74 32 4d 61 58 66 49 6b 58 33 59 6b 48 73 6a 4e 6c 41 64 65 69 72 61 6d 66 76 66 4a 30 4b 4b 54 63 37 6d 4b 31 77 6d 65 6e 49 34 37 56 6d 41 7a 65 62 78 70 55 33 49 6b 44 37 7a 49 71 70 70 73 77 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=y.u3rD9brPATTyQLfJbpT7D8jWOWCpiIb9XVQ5MAPlk-1730333374-1.0.1.1-lp_8YSyx9kBbhSfeSsUuTt2MaXfIkX3YkHsjNlAdeiramfvfJ0KKTc7mK1wmenI47VmAzebxpU3IkD7zIqppsw; path=/; expires=Thu, 31-Oct-24 00:39:34 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:34 UTC	609	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6e 2c 66 2c 73 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 63 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 73 2c 63 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define canno
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 2d 31 5d 3b 65 5b 75 5d 3d 5b 74 2c 6e 2c 66 5d 7d 7d 2c 63 2e 6e 3d 65 3d 3e 7b 76 61 72 20 72 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 28 29 3d 3e 65 2e 64 65 66 61 75 6c 74 3a 28 29 3d 3e 65 3b 72 65 74 75 72 6e 20 63 2e 64 28 72 2c 7b 61 3a 72 7d 29 2c 72 7d 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 65 3d 3e 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 3d 3e 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 2c 63 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 31 26 6e 29 65 3d 74 68 69 73 28 65 29 3b 69 66 28 38 26 6e 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 6e 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c Data Ascii: -1];e[u]=[t,n,f]}},c.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return c.d(r,{a:r}),r},t=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,c.t=function(e,n){if(1&n)e=this(e);if(8&n)return e;if("object"==typeof e&&e){if(4&n&&e.__esModul
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 37 66 35 33 31 2e 6a 73 22 3b 69 66 28 31 35 30 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 64 62 36 31 30 63 37 31 31 37 37 65 35 31 34 2e 6a 73 22 3b 69 66 28 36 36 32 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 30 32 65 31 37 31 35 62 37 34 39 63 31 35 62 2e 6a 73 22 3b 69 66 28 31 35 35 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 34 66 39 31 30 30 34 38 30 30 61 63 35 31 64 2e 6a 73 22 3b 69 66 28 39 38 38 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 34 64 39 38 64 66 35 39 38 32 37 33 61 37 34 2e 6a 73 22 3b 69 66 28 36 36 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 39 39 62 66 30 65 37 36 30 35 64 38 30 39 35 2e 6a 73 22 3b 69 66 28 32 38 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 38 66 63 31 62 32 61 36 31 64 38 61 34 35 62 2e 6a 73 22 3b 69 66 28 39 35 37 Data Ascii: 7f531.js";if(1505===e)return"7db610c71177e514.js";if(6629===e)return"d02e1715b749c15b.js";if(1555===e)return"a4f91004800ac51d.js";if(9888===e)return"f4d98df598273a74.js";if(6631===e)return"899bf0e7605d8095.js";if(283===e)return"28fc1b2a61d8a45b.js";if(957
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 32 32 30 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 32 36 34 66 32 35 38 30 30 38 36 63 38 64 31 2e 6a 73 22 3b 69 66 28 39 39 38 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 64 38 34 36 38 34 36 31 33 64 37 32 39 35 33 2e 6a 73 22 3b 69 66 28 31 32 39 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 37 64 64 37 32 64 39 37 61 63 30 36 62 61 37 2e 6a 73 22 3b 69 66 28 37 39 39 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 62 38 39 39 65 65 64 35 39 63 62 35 62 62 66 2e 6a 73 22 3b 69 66 28 35 35 30 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 61 31 38 35 63 30 64 37 33 64 34 39 65 63 63 2e 6a 73 22 3b 69 66 28 31 36 37 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 36 30 34 35 62 65 35 36 66 66 65 61 66 63 61 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 35 32 39 35 3d 3d 3d 65 Data Ascii: 2206===e)return"4264f2580086c8d1.js";if(9985===e)return"0d84684613d72953.js";if(1294===e)return"97dd72d97ac06ba7.js";if(7999===e)return"4b899eed59cb5bbf.js";if(5500===e)return"6a185c0d73d49ecc.js";if(1675===e)return"76045be56ffeafca.vendor.js";if(5295===e
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 65 37 64 66 34 34 30 32 36 32 2e 6a 73 22 3b 69 66 28 38 33 32 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 35 38 31 65 32 39 33 39 30 32 66 31 35 33 63 2e 6a 73 22 3b 69 66 28 36 35 38 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 30 63 30 35 35 66 64 66 62 34 32 34 37 39 30 2e 6a 73 22 3b 69 66 28 39 38 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 64 64 66 65 33 61 64 38 63 33 30 63 33 36 33 36 2e 6a 73 22 7d 2c 63 2e 6d 69 6e 69 43 73 73 46 3d 65 3d 3e 7b 69 66 28 38 36 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 38 39 32 32 31 37 34 64 33 36 38 63 32 62 64 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 7b 38 38 35 3a 31 2c 34 30 34 33 3a 31 2c 31 37 36 31 3a 31 2c 31 36 37 35 3a 31 2c 33 38 38 34 3a 31 2c 35 31 33 36 3a 31 2c 39 32 39 3a 31 7d 5b 65 5d 29 72 65 74 75 72 6e Data Ascii: e7df440262.js";if(8326===e)return"1581e293902f153c.js";if(6584===e)return"40c055fdfb424790.js";if(984===e)return"ddfe3ad8c30c3636.js"},c.miniCssF=e=>{if(869===e)return"c8922174d368c2bd.ltr.css";if({885:1,4043:1,1761:1,1675:1,3884:1,5136:1,929:1}[e])return
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 63 73 73 22 3b 69 66 28 35 34 31 36 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 62 62 39 35 38 31 32 36 38 32 66 35 30 36 34 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 37 31 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 31 34 37 65 34 63 33 34 31 33 38 39 38 63 32 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 39 37 36 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 30 39 33 63 35 66 30 33 37 32 36 37 65 30 62 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 37 32 30 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 66 63 38 31 63 39 31 39 37 39 64 34 30 64 66 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 33 39 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 63 36 30 34 37 33 33 37 35 32 35 39 33 30 36 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 35 36 35 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 36 63 38 39 36 Data Ascii: css";if(5416===e)return"4bb95812682f5064.ltr.css";if(7131===e)return"a147e4c3413898c2.ltr.css";if(9765===e)return"9093c5f037267e0b.ltr.css";if(7208===e)return"cfc81c91979d40df.ltr.css";if(4397===e)return"4c60473375259306.ltr.css";if(5654===e)return"76c896
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 39 66 39 38 34 36 62 64 65 62 66 33 37 37 36 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 31 35 35 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 33 36 66 32 65 66 35 62 37 36 61 32 64 36 30 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 39 38 38 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 32 65 66 66 34 32 37 37 30 39 39 31 37 35 36 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 36 36 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 31 39 61 32 35 39 66 30 39 66 66 66 65 36 39 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 39 35 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 66 64 35 30 39 64 37 62 65 35 34 33 65 37 36 38 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 34 30 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 36 63 35 32 61 62 38 66 31 35 31 34 62 64 39 2e 72 74 Data Ascii: ===e)return"89f9846bdebf3776.rtl.css";if(1555===e)return"e36f2ef5b76a2d60.rtl.css";if(9888===e)return"42eff42770991756.rtl.css";if(6631===e)return"119a259f09fffe69.rtl.css";if(957===e)return"fd509d7be543e768.rtl.css";if(5401===e)return"46c52ab8f1514bd9.rt
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3a 22 2c 63 2e 6c 3d 28 65 2c 72 2c 74 2c 73 29 3d 3e 7b 69 66 28 21 6e 5b 65 5d 29 7b 76 61 72 20 69 2c 61 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 66 6f 72 28 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 75 3d 30 3b 75 3c 6f 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 64 3d 6f 5b 75 5d 3b 69 66 28 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 66 2b 74 29 7b 69 3d 64 3b 62 72 65 61 6b 7d 7d 69 66 28 21 69 29 7b 69 66 28 61 3d 21 30 2c 28 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 Data Ascii: :",c.l=(e,r,t,s)=>{if(!n[e]){var i,a;if(void 0!==t)for(var o=document.getElementsByTagName("script"),u=0;u<o.length;u++){var d=o[u];if(d.getAttribute("src")==e\|\|d.getAttribute("data-webpack")==f+t){i=d;break}}if(!i){if(a=!0,(i=document.createElement("scri
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 72 65 66 65 74 63 68 22 5d 5b 68 72 65 66 5d 27 29 29 7b 63 6f 6e 73 74 20 65 3d 4f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 65 26 26 6c 2e 70 75 73 68 28 65 29 7d 6c 65 74 20 62 3d 65 3d 3e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 66 2c 69 29 7b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 6c 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6c 5b 74 5d 2e 65 6e 64 73 57 69 74 68 28 65 29 29 72 65 74 75 72 6e 20 6c 2e 73 70 6c 69 63 65 28 74 2c 31 29 2c 6f 28 65 2c 72 2c 66 2c 69 29 3b 69 66 28 74 29 7b 69 66 28 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 29 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 6b 28 Data Ascii: refetch"][href]')){const e=O.getAttribute("href");e&&l.push(e)}let b=e=>document.head.appendChild(e);e.l=function(e,r,f,i){for(let t=0;t<l.length;t++)if(l[t].endsWith(e))return l.splice(t,1),o(e,r,f,i);if(t){if(0===u.length)Promise.resolve().then((()=>{k(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49710	104.16.79.73	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	614	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8daf6ac5bb33ea0a-DFW
2024-10-31 00:09:34 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49707	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	570	OUT	GET /web/0af438d079413358.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	1358	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: text/javascript Content-Length: 401404 Connection: close CF-Ray: 8daf6ac5b9993593-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 232462 Cache-Control: public, max-age=31556926 ETag: "d5986af74a004bc41eea9f12ab9ae673" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Fri, 25 Oct 2024 01:33:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: RyMHqPGd1fIuReTAX5yyEHtOX+ROCNbxUa+7f4+QTzQrTF6jxIA1pRrGoTcjGHJduoDkbji/bIk= x-amz-replication-status: COMPLETED x-amz-request-id: 6F65W3B5VB8Y2CFZ x-amz-server-side-encryption: AES256 x-amz-version-id: XMCzz70j.MUEwiaN1uyiYMmlUa19NICL X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	783	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 68 36 30 6a 49 48 6c 6e 35 32 31 33 58 30 39 4e 73 48 54 44 46 6d 62 73 50 7a 56 55 42 52 76 78 65 69 74 7a 4d 61 42 51 43 6b 6f 2d 31 37 33 30 33 33 33 33 37 34 2d 31 2e 30 2e 31 2e 31 2d 5a 55 4f 5a 36 6b 67 32 4f 65 72 35 66 4c 6f 63 6a 72 67 34 62 5f 4c 62 6a 31 6e 57 54 32 62 44 69 42 6f 4d 69 37 70 52 75 41 61 6f 56 43 4e 48 62 65 6a 41 6a 56 47 78 72 77 71 79 6a 6f 35 31 69 57 35 31 37 72 4f 44 50 50 6f 69 35 49 4f 52 55 67 5f 51 75 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=h60jIHln5213X09NsHTDFmbsPzVUBRvxeitzMaBQCko-1730333374-1.0.1.1-ZUOZ6kg2Oer5fLocjrg4b_Lbj1nWT2bDiBoMi7pRuAaoVCNHbejAjVGxrwqyjo51iW517rODPPoi5IORUg_Qug; path=/; expires=Thu, 31-Oct-24 00:39:34 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:34 UTC	597	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 30 61 66 34 33 38 64 30 37 39 34 31 33 33 35 38 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 32 33 32 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 72 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see 0af438d079413358.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serial
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 74 28 69 2c 6f 29 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 6e 2e 62 69 6e 64 28 74 2c 65 2c 72 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 74 68 69 73 2c 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 69 3a 6f 2c 74 2e 63 61 63 68 65 2e 63 72 65 61 74 65 28 29 2c 74 2e 73 65 72 69 61 6c 69 7a 65 72 29 7d 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 66 2c 48 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 74 68 69 73 2e 63 61 63 68 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d Data Ascii: t(i,o)),o}function a(e,t,n,r,i){return n.bind(t,e,r,i)}function l(e,t){return a(e,this,1===e.length?i:o,t.cache.create(),t.serializer)}n.d(t,{A:()=>f,H:()=>r});var s=function(){return JSON.stringify(arguments)};function u(){this.cache=Object.create(null)}
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 5b 65 2e 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 3d 32 5d 3d 22 45 4d 50 54 59 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 3d 33 5d 3d 22 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 34 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 3d 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 3d 36 5d 3d 22 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 54 59 4c 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 4e Data Ascii: [e.EMPTY_ARGUMENT=2]="EMPTY_ARGUMENT",e[e.MALFORMED_ARGUMENT=3]="MALFORMED_ARGUMENT",e[e.EXPECT_ARGUMENT_TYPE=4]="EXPECT_ARGUMENT_TYPE",e[e.INVALID_ARGUMENT_TYPE=5]="INVALID_ARGUMENT_TYPE",e[e.EXPECT_ARGUMENT_STYLE=6]="EXPECT_ARGUMENT_STYLE",e[e.INVALID_N
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 49 4e 47 5f 4f 54 48 45 52 5f 43 4c 41 55 53 45 3d 32 32 5d 3d 22 4d 49 53 53 49 4e 47 5f 4f 54 48 45 52 5f 43 4c 41 55 53 45 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 3d 32 33 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 22 2c 65 5b 65 2e 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 3d 32 35 5d 3d 22 49 4e 56 41 4c 49 44 5f 54 41 47 5f 4e 41 4d 45 22 2c 65 5b 65 2e 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 3d 32 36 5d 3d 22 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 22 2c 65 5b 65 2e 55 4e 43 4c 4f 53 45 44 5f 54 41 47 3d 32 37 5d 3d 22 55 4e 43 4c 4f 53 45 44 5f 54 41 47 22 7d 28 72 7c 7c 28 72 3d 7b 7d 29 29 7d 2c 36 35 39 31 33 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: ING_OTHER_CLAUSE=22]="MISSING_OTHER_CLAUSE",e[e.INVALID_TAG=23]="INVALID_TAG",e[e.INVALID_TAG_NAME=25]="INVALID_TAG_NAME",e[e.UNMATCHED_CLOSING_TAG=26]="UNMATCHED_CLOSING_TAG",e[e.UNCLOSED_TAG=27]="UNCLOSED_TAG"}(r\|\|(r={}))},659137:(e,t,n)=>{"use strict";
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 2c 6d 3d 21 21 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 2c 67 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 64 65 50 6f 69 6e 74 41 74 2c 79 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 2c 62 3d 21 21 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 2c 5f 3d 21 21 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3f 4e 75 6d 62 65 72 2e 69 73 53 61 66 65 49 6e 74 65 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 69 73 46 69 6e 69 74 65 28 65 29 26 26 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 3d 3d 3d 65 26 26 4d 61 Data Ascii: String.fromCodePoint,m=!!Object.fromEntries,g=!!String.prototype.codePointAt,y=!!String.prototype.trimStart,b=!!String.prototype.trimEnd,_=!!Number.isSafeInteger?Number.isSafeInteger:function(e){return"number"==typeof e&&isFinite(e)&&Math.floor(e)===e&&Ma
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 70 7b 50 61 74 74 65 72 6e 5f 53 79 6e 74 61 78 7d 5d 2a 29 22 2c 22 79 75 22 29 3b 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 52 2e 6c 61 73 74 49 6e 64 65 78 3d 74 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 52 2e 65 78 65 63 28 65 29 5b 31 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 22 22 7d 7d 65 6c 73 65 20 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 3b 3b 29 7b 76 61 72 20 72 3d 4f 28 65 2c 74 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 4c 28 72 29 7c 7c 44 28 72 29 29 62 72 65 61 6b 3b 6e 2e 70 75 73 68 28 72 29 2c 74 2b 3d 72 3e 3d 36 35 35 33 36 3f 32 3a 31 7d 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 7d 3b 76 61 72 20 41 3d 66 75 Data Ascii: p{Pattern_Syntax}]*)","yu");E=function(e,t){var n;return R.lastIndex=t,null!==(n=R.exec(e)[1])&&void 0!==n?n:""}}else E=function(e,t){for(var n=[];;){var r=O(e,t);if(void 0===r\|\|L(r)\|\|D(r))break;n.push(r),t+=r>=65536?2:1}return k.apply(void 0,n)};var A=fu
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 28 29 3b 74 68 69 73 2e 62 75 6d 70 28 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 28 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 62 75 6d 70 49 66 28 22 2f 3e 22 29 29 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 61 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 22 3c 22 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 3e 22 29 2c 6c 6f 63 61 74 69 6f 6e 3a 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 49 66 28 22 3e 22 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 70 61 72 73 65 4d 65 73 73 61 67 65 28 65 2b 31 2c 74 2c 21 30 29 3b 69 66 28 69 2e 65 72 72 29 72 65 Data Ascii: ePosition();this.bump();var r=this.parseTagName();if(this.bumpSpace(),this.bumpIf("/>"))return{val:{type:a.wD.literal,value:"<".concat(r,"/>"),location:h(n,this.clonePosition())},err:null};if(this.bumpIf(">")){var i=this.parseMessage(e+1,t,!0);if(i.err)re
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 61 72 20 69 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 51 75 6f 74 65 28 74 29 3b 69 66 28 69 29 72 2b 3d 69 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 55 6e 71 75 6f 74 65 64 28 65 2c 74 29 3b 69 66 28 6f 29 72 2b 3d 6f 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 68 69 73 2e 74 72 79 50 61 72 73 65 4c 65 66 74 41 6e 67 6c 65 42 72 61 63 6b 65 74 28 29 3b 69 66 28 21 6c 29 62 72 65 61 6b 3b 72 2b 3d 6c 7d 7d 7d 76 61 72 20 73 3d 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 3b 72 65 74 75 72 6e 7b 76 61 6c 3a 7b 74 79 70 65 3a 61 2e 77 44 2e 6c 69 74 65 72 61 6c 2c 76 61 6c 75 65 3a 72 2c 6c 6f 63 61 74 69 6f 6e 3a 73 7d 2c 65 72 72 3a 6e 75 6c 6c 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 79 Data Ascii: ar i=this.tryParseQuote(t);if(i)r+=i;else{var o=this.tryParseUnquoted(e,t);if(o)r+=o;else{var l=this.tryParseLeftAngleBracket();if(!l)break;r+=l}}}var s=h(n,this.clonePosition());return{val:{type:a.wD.literal,value:r,location:s},err:null}},e.prototype.try
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 20 72 3d 74 68 69 73 2e 70 61 72 73 65 49 64 65 6e 74 69 66 69 65 72 49 66 50 6f 73 73 69 62 6c 65 28 29 2e 76 61 6c 75 65 3b 69 66 28 21 72 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 6f 2e 6f 2e 4d 41 4c 46 4f 52 4d 45 44 5f 41 52 47 55 4d 45 4e 54 2c 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 69 66 28 74 68 69 73 2e 62 75 6d 70 53 70 61 63 65 28 29 2c 74 68 69 73 2e 69 73 45 4f 46 28 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 6f 2e 6f 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 43 4c 4f 53 49 4e 47 5f 42 52 41 43 45 2c 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 3b 73 77 69 74 63 68 28 74 68 69 73 2e 63 68 61 72 28 29 29 7b 63 61 73 65 20 31 32 Data Ascii: r=this.parseIdentifierIfPossible().value;if(!r)return this.error(o.o.MALFORMED_ARGUMENT,h(n,this.clonePosition()));if(this.bumpSpace(),this.isEOF())return this.error(o.o.EXPECT_ARGUMENT_CLOSING_BRACE,h(n,this.clonePosition()));switch(this.char()){case 12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49713	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	639	OUT	GET /web/images/856bac30504ecac8dbd38dbee61de1f1.svg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:34 UTC	1188	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: image/svg+xml Content-Length: 2532 Connection: close CF-Ray: 8daf6ac8fb044602-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 552440 Cache-Control: public, max-age=31556926 ETag: "856bac30504ecac8dbd38dbee61de1f1" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Tue, 08 Oct 2024 09:19:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 09 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: lk6iiAueBQFpkqJ/qLb+SDum9R64c5Arbr+lBpBFtXUxIH6gijidHzPAHLFPksOsM1CsPH+j+K0= x-amz-replication-status: COMPLETED x-amz-request-id: J8G9T3AP948MWS29 x-amz-server-side-encryption: AES256 x-amz-version-id: i2JDH6Fz4MltcDNllQLm7Ntkqub8pIyU X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 35 5a 35 79 5a 65 55 78 55 45 63 61 59 76 4b 4a 7a 50 4d 5a 55 55 49 4a 4b 53 65 32 6d 37 5a 6f 32 39 4e 58 49 36 6e 4a 4b 6c 50 4e 79 6e 69 31 49 58 6f 6a 4a 44 6c 4f 59 48 33 66 54 38 50 25 32 46 33 33 30 4c 78 69 76 59 67 62 37 44 53 38 25 32 46 62 25 32 42 4c 34 56 62 7a 38 72 44 55 4c 50 53 78 48 33 33 59 66 49 35 69 6f 67 41 53 41 79 4c 25 32 42 51 5a 35 6e 25 32 42 6e 34 55 76 58 33 46 25 32 46 75 42 68 57 32 5a 73 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5Z5yZeUxUEcaYvKJzPMZUUIJKSe2m7Zo29NXI6nJKlPNyni1IXojJDlOYH3fT8P%2F330LxivYgb7DS8%2Fb%2BL4Vbz8rDULPSxH33YfI5iogASAyL%2BQZ5n%2Bn4UvX3F%2FuBhW2Zs4%3D"}],"group":"cf-nel","max_age":
2024-10-31 00:09:34 UTC	1194	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 33 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 39 2e 34 34 34 20 31 38 2e 30 39 36 63 2d 2e 31 33 36 20 30 2d 2e 32 36 2e 30 38 38 2d 2e 33 32 34 2e 32 37 32 2d 2e 38 32 20 32 2e 33 34 2d 31 2e 39 32 38 20 33 2e 37 33 32 2d 32 2e 38 34 20 33 2e 37 33 32 2d 2e 35 32 34 20 30 2d 2e 37 33 36 2d 2e 35 38 34 2d 2e 37 33 36 2d 31 2e 35 20 30 2d 32 2e 32 39 32 20 31 2e 33 37 32 2d 37 2e 31 35 32 20 32 2e 30 36 34 2d 39 2e 33 36 38 2e 30 38 2d 2e 32 36 38 2e 31 33 32 2d 2e 35 30 38 2e 31 33 32 2d Data Ascii: <svg width="80" height="30" viewBox="0 0 80 30" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M79.444 18.096c-.136 0-.26.088-.324.272-.82 2.34-1.928 3.732-2.84 3.732-.524 0-.736-.584-.736-1.5 0-2.292 1.372-7.152 2.064-9.368.08-.268.132-.508.132-
2024-10-31 00:09:34 UTC	1338	IN	Data Raw: 34 2d 31 2e 35 34 38 20 34 2e 33 33 36 2d 34 2e 36 36 38 20 38 2e 35 32 34 2d 38 2e 38 36 38 20 38 2e 35 32 34 2d 33 2e 38 31 32 20 30 2d 35 2e 38 32 34 2d 33 2e 31 37 32 2d 35 2e 38 32 34 2d 38 2e 31 38 34 43 34 2e 30 36 38 20 38 2e 33 31 32 20 39 2e 33 38 20 32 2e 34 20 31 33 2e 33 32 20 32 2e 34 63 31 2e 38 38 34 20 30 20 32 2e 37 38 34 20 31 2e 32 20 32 2e 37 38 34 20 33 2e 30 34 20 30 20 32 2e 32 32 38 2d 31 2e 32 34 34 20 33 2e 32 36 34 2d 31 2e 32 34 34 20 34 2e 31 31 32 20 30 20 2e 32 36 2e 32 31 36 2e 35 31 36 2e 36 34 34 2e 35 31 36 20 31 2e 37 31 32 20 30 20 33 2e 37 32 38 2d 32 2e 30 31 32 20 33 2e 37 32 38 2d 34 2e 37 35 36 53 31 37 2e 30 30 34 2e 35 36 20 31 33 2e 30 36 34 2e 35 36 43 36 2e 35 35 32 2e 35 36 20 30 20 37 2e 31 31 32 20 30 20 Data Ascii: 4-1.548 4.336-4.668 8.524-8.868 8.524-3.812 0-5.824-3.172-5.824-8.184C4.068 8.312 9.38 2.4 13.32 2.4c1.884 0 2.784 1.2 2.784 3.04 0 2.228-1.244 3.264-1.244 4.112 0 .26.216.516.644.516 1.712 0 3.728-2.012 3.728-4.756S17.004.56 13.064.56C6.552.56 0 7.112 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49712	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:34 UTC	587	OUT	GET /web/images/cff149ee1e9d2be50ac77bcd86769d05.woff2 HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:34 UTC	1352	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:34 GMT Content-Type: font/woff2 Content-Length: 38848 Connection: close CF-Ray: 8daf6ac90dbae7d7-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 565421 Cache-Control: public, max-age=31556926 ETag: "cff149ee1e9d2be50ac77bcd86769d05" Expires: Fri, 31 Oct 2025 05:58:20 GMT Last-Modified: Wed, 11 Sep 2024 10:59:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 12 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: DYcqRxpLxXIhF9SgV0HCcaG8g2+7oahJsNRo8Sjhs0JuHpZTcrESKxE70rxZBENcLJv8XDURLPk= x-amz-replication-status: COMPLETED x-amz-request-id: JRDCCS8JMWGYVS0Z x-amz-server-side-encryption: AES256 x-amz-version-id: 3dCxs8UrAWF3nyYbBS0P29FBI5qsgg13 X-Content-Type-Options: nosniff
2024-10-31 00:09:34 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 68 44 71 6a 76 2e 4e 54 31 75 52 63 37 50 64 54 76 53 4d 53 4b 38 76 4b 64 39 4f 54 78 62 67 6d 45 79 37 7a 76 71 6d 30 4a 59 30 2d 31 37 33 30 33 33 33 33 37 34 2d 31 2e 30 2e 31 2e 31 2d 56 56 6b 6b 58 52 67 63 67 79 59 44 2e 57 2e 34 58 65 6f 4e 73 73 6d 7a 5a 34 44 74 7a 4d 6f 2e 38 55 52 59 71 55 2e 63 4c 36 6a 79 50 67 31 42 36 73 35 5a 53 45 2e 4c 51 39 79 51 62 49 53 59 76 58 5a 4c 54 51 35 37 77 74 59 48 42 62 67 5a 74 6c 72 69 37 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 34 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=hDqjv.NT1uRc7PdTvSMSK8vKd9OTxbgmEy7zvqm0JY0-1730333374-1.0.1.1-VVkkXRgcgyYD.W.4XeoNssmzZ4DtzMo.8URYqU.cL6jyPg1B6s5ZSE.LQ9yQbISYvXZLTQ57wtYHBbgZtlri7Q; path=/; expires=Thu, 31-Oct-24 00:39:34 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:34 UTC	611	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 97 c0 00 13 00 00 00 01 25 28 00 00 97 4c 00 01 02 8f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 88 11 1b 81 91 6a 1c 90 18 3f 48 56 41 52 88 5e 3f 4d 56 41 52 5a 06 60 3f 53 54 41 54 24 27 28 00 83 4e 2f 81 00 0a ff 44 e6 7c 30 81 fc 00 01 36 02 24 03 87 7c 0b 84 00 00 04 20 05 85 3e 07 20 5b 94 15 71 80 a1 57 1d 8c db 06 f0 73 67 74 59 7f 8d 8a b1 0b 43 cf 6d e3 c8 58 3d 65 9d 8d 88 60 e3 00 08 7e 39 cc f8 ff 3f 2d e9 90 a1 09 ee 01 68 5b 55 e7 74 bb 2d 88 5c 14 91 51 de 7a 6b 6d d4 c8 2c cf d9 6b 16 cd b1 52 50 34 da d0 b1 a3 25 5a 23 5f 31 71 08 11 19 48 a7 10 f9 41 87 50 cd 54 0e 73 23 0f b8 51 e8 11 11 3b cf d3 0f f1 84 0c d7 5b a6 dc 17 48 7c aa 85 43 08 b4 c0 ce 69 0c a1 e3 ec 41 57 ba e5 fe b9 56 Data Ascii: wOF2%(Lj?HVAR^?MVARZ`?STAT$'(N/D\|06$\| > [qWsgtYCmX=e`~9?-h[Ut-\Qzkm,kRP4%Z#_1qHAPTs#Q;[H\|CiAWV
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: b5 f6 44 ed 45 5c 56 c4 28 35 2a 81 00 89 4f 32 f3 d3 37 e7 ff 39 33 b3 3a d9 6c 36 0a 24 84 42 c5 04 b8 f7 3e f7 5f ff f8 d6 39 bb a4 46 45 1c af a4 a5 9e aa ca ff e8 56 fd c0 cc 0a 8c b8 06 d1 c4 31 09 84 84 30 41 6c 8d 35 67 3d ec 99 b4 f7 ae a8 bc 3a 2f ba ab d7 4c 08 a5 33 e9 b5 62 0f 02 13 a0 fd fc 37 e7 ff af 08 12 b4 f4 20 b7 e5 aa d9 13 fd fa 6a c8 15 ff 75 ef 11 a3 46 29 84 86 84 10 9f c8 98 65 b2 67 8f 58 66 22 43 b8 b2 65 95 0d d3 33 3d a4 9f 23 a2 7f c3 79 8b c3 ff 77 fc ef 1e 49 fb 40 86 4f 10 3e 10 4a 0b 24 18 8d ba b9 ba 88 2e f7 7b 53 df 56 02 e0 93 65 38 42 2e 1d 20 15 22 4a 39 ce 11 44 44 14 22 32 37 6b 22 56 44 ac 88 28 c2 13 d8 7d ce fa 00 4c 48 54 ed fb bb 61 e5 36 2d ac ea a4 88 ff 72 a4 89 6d 7e b2 2e c0 01 81 16 b7 f9 cb 7e ca 3f Data Ascii: DE\V(5*O2793:l6$B>_9FEV10Al5g=:/L3b7 juF)egXf"Ce3=#ywI@O>J$.{SVe8B. "J9DD"27k"VD(}LHTa6-rm~.~?
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: 67 ef 7b 6d b6 29 76 3a 99 eb cf cf a4 3b b4 ba 3d 83 da 98 d4 31 5d c4 b4 8a 59 19 bb 8b 78 0b a6 e3 bd 91 7e 19 1c 90 dc 5d 24 6e 91 0c 76 c6 a6 98 b0 72 e2 9d 2e fa 9b 93 57 af 65 30 a6 11 d1 2a 9f 8e 8e e6 a4 9e cb 6c 6e 85 63 56 0b 87 3a ee 62 f1 b6 c3 c5 db 8e 76 56 f7 53 12 7b e6 72 c7 4d 76 5c ee bd 94 0a 06 49 00 a3 20 9f ad b0 d5 4a 5a df 70 d6 af b6 ef 5e ed bc f2 88 f1 ef 5b d8 ea 76 72 71 bb b0 77 bb bc 7d bb 12 0a c5 9d db 4b 5b 77 13 8f 5f a3 c6 0a 7d e7 1a b3 be cb fd 49 29 5e dc cf ac 3f 9f f9 ff 17 1c 2f c7 85 ff 7d 11 59 12 d2 12 b1 de cc f0 55 73 3f 8c ad 45 d6 35 af 4b bb ce 89 58 49 dd 18 eb 9b 13 7f ad 4f ac e9 8b c8 73 b3 10 d1 99 d7 7a ce 9e ba 37 7c be 7a fb db 95 10 10 02 00 82 75 d4 57 a3 34 a1 99 d3 04 08 00 4d 6d 06 bc d9 16 Data Ascii: g{m)v:;=1]Yx~]$nvr.We0*lncV:bvVS{rMv\I JZp^[vrqw}K[w_}I)^?/}YUs?E5KXIOsz7\|zuW4Mm
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: d5 28 2d 7b 39 3d 08 19 74 14 ac bb 8d 17 23 5b 2e 4d 38 68 ca 77 06 50 50 72 48 56 81 60 ca ee 63 bc fb 48 51 ff c5 43 b4 7b 85 1c 62 3e e7 7d 84 b2 58 fa 1b 1e e8 b6 82 5b b5 7e 57 04 70 95 74 4d 4f 9e 9d ee 9d 9a 6e d3 75 ea 43 66 0c 7f b0 cc 4e 4e 54 2f 5c f1 3b 5f 87 71 a3 81 0e 8d 03 5f 66 9a 58 53 5f 43 68 71 a5 7b de d6 eb 15 57 5a f6 92 50 64 81 ed 06 f2 0d 7f cd 38 6b 96 59 db e6 b4 1b 59 7b 73 6a ca 74 17 82 9b 35 bd 1f 38 a7 8b 5c d9 f1 23 3a 4b 81 cb 82 d2 1e 75 eb e1 49 6c 88 4b 98 80 f6 b4 e4 88 e7 cf 80 90 43 52 35 7e a1 a4 9d 94 91 71 21 4c ac 47 87 65 34 9f 7a a5 ad 90 d4 c4 1b 2f d8 21 ed 2f 37 0a ca f9 f9 0c 0f 03 b2 23 98 ee 78 40 79 95 89 81 ce 72 5f 8b 2b 36 b4 5d 1d a9 6d 8a 33 da 3c 85 6d 1c 30 ea 36 77 78 07 75 59 0e 42 9e 84 02 Data Ascii: (-{9=t#[.M8hwPPrHV`cHQC{b>}X[~WptMOnuCfNNT/\;_q_fXS_Chq{WZPd8kYY{sjt58\#:KuIlKCR5~q!LGe4z/!/7#x@yr_+6]m3<m06wxuYB
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: d3 22 96 10 d0 0e 99 52 24 77 b6 2f 99 4c 2f 6b c0 11 f3 e3 d8 1c d9 12 64 87 c1 38 42 4b 6b 65 51 60 a3 8b 9f 2e 9b 04 f4 c0 df d3 ac f6 14 7d 70 82 b1 56 90 62 16 20 99 34 47 07 fa 88 e0 b0 8e e0 e4 0e e2 60 a8 e7 d8 b1 6b 23 84 ad 7f 56 c4 b3 45 cd 4b 75 0f fd f0 90 4b a4 70 70 10 05 3f ec cc 33 58 bc 35 8f ea b1 1a 38 73 ea 19 82 f4 14 45 9a ca d2 94 00 6d 37 4f 2b 64 6b fa bf 6c 48 d9 e4 96 a0 9a d1 f2 54 01 c2 6b cd 15 62 1f 41 71 a1 65 3c 52 9b 6a 13 b7 ae 7e 4a 58 b1 45 7e 50 32 9f 39 cb ec 0e 43 8e 99 6c 60 56 01 b5 a1 b0 fc fb 45 fb c5 ab 4d 8a 07 19 72 70 a5 3e 89 b1 b7 98 be 0a 79 91 15 d9 55 cf 3c 80 80 10 b8 ee a3 ad b1 fb fb 1d dc e8 c8 92 49 85 3b b9 77 37 45 d5 48 94 7f 93 f6 6e e4 0a 43 86 1b 49 d8 ac 37 e2 8d f4 bd e7 65 a8 6c 46 8a ed Data Ascii: "R$w/L/kd8BKkeQ`.}pVb 4G`k#VEKuKpp?3X58sEm7O+dklHTkbAqe<Rj~JXE~P29Cl`VEMrp>yU<I;w7EHnCI7elF
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: f9 3a af f9 76 8c 1d e0 6f 27 2a bb f0 b7 fb 44 95 3d f6 52 b2 c1 33 11 fd be 13 93 02 98 e2 b0 db 49 29 b7 a2 e2 5a e0 e3 4d 68 c1 44 4f 5c 05 27 1c fe 04 54 9c 09 91 43 5f 19 54 c1 53 b4 71 68 4a 0b c3 3f 04 55 99 5a 88 87 de 69 dc 86 78 13 44 1b 82 2e 48 48 08 fa f0 85 c6 5d 58 28 e1 61 45 c4 43 e4 53 5b d1 f1 64 e4 b8 8a 86 88 1f 29 a5 60 1a 81 fc 04 09 30 8d 0b 9f e3 a2 8d a8 ad 89 af ce f8 da 1c 89 ae a7 e4 88 71 21 a7 20 a7 38 32 e3 3c 71 75 a4 2f 65 c9 2f b1 5f 00 4f 36 bc 77 cf 63 42 82 71 43 89 08 02 4b 59 dd ed 98 82 70 c0 25 91 a8 0f 66 cd 02 14 52 96 a3 21 c2 ad 03 15 c3 12 c4 50 0b e0 ce f8 d1 83 7a a0 02 21 79 44 cb 81 fa 16 9a 25 f4 e9 9a 37 82 11 21 d1 0b 20 17 a4 ac b3 d0 04 26 6d 5c 2e c9 dd 0b e1 6d 3d 96 73 2a 43 b3 32 00 c2 05 98 3d Data Ascii: :vo'D=R3I)ZMhDO\'TC_TSqhJ?UZixD.HH]X(aECS[d)`0q! 82<qu/e/_O6wcBqCKYp%fR!Pz!yD%7! &m\.m=sC2=
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: bf ab 84 87 15 3a e5 ac a0 81 76 bf 99 1d f4 71 98 93 9c e2 26 3f f3 87 b3 25 88 9f 60 36 16 60 85 b7 6d 80 28 c2 9a 53 94 ac 6d a2 32 1f 55 91 09 09 cf 15 91 92 bf 92 07 b7 fa 46 c8 2c 17 ed d0 20 21 11 45 5f 21 43 e2 5a 2e c1 62 e2 8d 90 4a e9 1c 86 14 0b f1 3a cb 4f 4c 12 fb 02 18 aa 21 a6 69 03 25 16 64 2d cc 8c 0c b2 32 32 b4 80 3f 28 c9 c8 d0 4a 14 9c c9 e8 bc cf 8a 6c 5d 09 1c 69 0a 0e 9c 7f b7 07 9d 64 79 8a 54 a8 bb ee 5e 9b 6e 7d 06 5d 34 6a b2 88 8a a2 e8 4b e2 74 62 7e 59 52 da 4a 63 d4 c6 78 02 5a fb 91 e0 bd 2a 0f 1a 46 d0 28 94 48 4a 48 3c bd 1c 96 d2 86 b3 58 6e 19 4d a5 d6 19 68 f3 cb 18 a1 88 f7 a3 46 47 e7 f1 d7 fa 4c bf 2a 81 b8 cd 9f c5 9b 29 28 4f 63 ab 42 d7 8a ff 48 f5 47 98 6a c4 79 64 11 0e ac b6 88 c7 48 95 67 a4 2e 10 71 8f 12 Data Ascii: :vq&?%`6`m(Sm2UF, !E_!CZ.bJ:OL!i%d-22?(Jl]idyT^n}]4jKtb~YRJcxZF(HJH<XnMhFGL)(OcBHGjydHg.q
2024-10-31 00:09:34 UTC	1369	IN	Data Raw: ad 6d 63 7d 7b bf 7b d1 4e 1f bd 61 e3 96 e5 47 e9 3b fd 9d bb 78 f4 bd 67 d9 f7 83 bd 17 83 97 1c 89 91 97 8d c7 07 77 cc 1d bc 08 65 ef ef 88 8f 5e 1b 8f ff 21 1e ee 98 87 a3 c1 a3 ec f0 0e 0c bf 74 2d 9d 7e 73 66 f0 38 2d 09 d9 fa 29 e4 55 2c fa 36 cc 7c 50 15 1a 8d e1 2f 7f b4 52 7e bc 52 5e ae 0d bf 96 ba b2 f1 a1 73 97 36 5e 7f 6e 8b 3d b8 63 f9 fe 8e 3a b8 b3 b9 73 17 ec cb 70 a8 44 c3 7b 66 46 f7 c1 5d 9d ce 6d eb 8f 5f 20 bd f2 02 e9 f1 8b da d9 dd a5 0b 2f 96 3a b4 15 bd 7d e4 78 fa f6 d2 e9 3b 4b 97 9e 95 98 73 d3 42 cf 6b dd a9 f0 31 d7 d5 e7 ef 38 e4 53 37 1c d7 ee 71 52 ef a4 c9 da 46 f3 4e 47 bf 47 d2 5e 94 6e b2 af 13 44 e2 c0 62 80 3f e4 6e b6 fe 86 9d 7b f6 61 22 6a f4 37 5d 98 06 5e ea d9 72 05 0f f6 9b 0c a2 d1 b6 aa 73 79 6f da 6e b3 Data Ascii: mc}{{NaG;xgwe^!t-~sf8-)U,6\|P/R~R^s6^n=c:spD{fF]m_ /:}x;KsBk18S7qRFNGG^nDb?n{a"j7]^rsyon
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 1b db b9 84 14 89 26 9b d8 51 2c 87 ac c0 5a f9 18 a7 3c be 71 8d 9f dd 7e d4 9e 7c 99 58 95 a7 46 bb 1d 1b 3d fa 57 d0 a4 c6 31 6c 34 71 b4 12 5a cd a8 8e 99 74 6a 46 87 90 b4 a1 ba a8 41 50 ff 50 e1 5d fb ee c7 ea 15 cb 04 cb c0 ea ec ab b5 61 35 cc d4 a1 52 9f d4 3a 7f 20 08 49 a2 e5 e7 f1 f2 12 2f 0e be 07 2f 2c d2 12 2d b8 66 22 f8 a9 07 06 a3 6a 09 90 22 64 79 b9 80 b8 8e ea cb 22 fe d7 2d 8e 7c 9e a2 9b f9 4d 40 34 1d 60 b5 af 48 90 2f 9f 68 b2 8e e0 5f 2d b4 45 f4 4f 3e f7 f0 8f 82 f6 86 48 d1 03 95 1c 32 06 95 f7 40 89 cb 02 e5 09 a9 16 8b 25 e9 7e d2 7e e8 75 38 ed d7 9e 5f 14 5f af 7c 8a e8 18 d1 d8 53 2f 51 4f ad ae b5 09 f9 ec 1f f6 a7 31 de 1b 2c 68 d9 df 2b 0e 38 d4 e6 ff a4 aa b9 4f 17 d8 3f b3 9d ff b5 c5 ee f0 f8 57 79 1e 6a 50 d4 64 85 Data Ascii: &Q,Z<q~\|XF=W1l4qZtjFAPP]a5R: I//,-f"j"dy"-\|M@4`H/h_-EO>H2@%~~u8__\|S/QO1,h+8O?WyjPd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49716	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	566	OUT	GET /web/d423b058a335b47b.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:35 UTC	1354	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 421 Connection: close CF-Ray: 8daf6acaaf1f46c8-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 512594 Cache-Control: public, max-age=31556926 ETag: "9facc5c348cf06e3f14be6fbf3671fce" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Fri, 25 Oct 2024 01:33:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: FPQSRY5wr+MRre4zb+I+OHISJDsAQtJbrFo59khcs+NAQBKNNwc04lJhAWgK36PB+0gwTmpu6ZT8cWAe4U/U1UR7TpMaz2g0986nVuoncXo= x-amz-replication-status: COMPLETED x-amz-request-id: 6F69745SM93W7DXX x-amz-server-side-encryption: AES256 x-amz-version-id: H8.8KFWXf9rxR7RH4JWvYAiJYBRYpSey
2024-10-31 00:09:35 UTC	808	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 56 68 6e 65 32 59 75 48 4c 5f 49 4e 39 78 58 58 6b 6c 62 52 38 71 7a 52 33 73 76 70 42 69 32 2e 78 67 77 39 56 72 61 33 79 6b 34 2d 31 37 33 30 33 33 33 33 37 35 2d 31 2e 30 2e 31 2e 31 2d 45 68 4e 34 39 57 38 4e 49 56 33 38 38 2e 73 52 34 6e 57 56 75 53 6f 53 72 76 55 58 59 75 31 62 34 63 67 79 6c 56 41 43 41 6b 53 6d 4a 64 46 68 6c 75 6f 64 30 33 74 45 52 42 74 58 6b 6c 6e 71 4a 76 70 44 44 51 37 59 54 57 66 57 64 66 79 4f 35 6b 44 59 49 41 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 35 20 47 4d 54 3b 20 64 6f 6d 61 69 6e Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: __cf_bm=Vhne2YuHL_IN9xXXklbR8qzR3svpBi2.xgw9Vra3yk4-1730333375-1.0.1.1-EhN49W8NIV388.sR4nWVuSoSrvUXYu1b4cgylVACAkSmJdFhluod03tERBtXklnqJvpDDQ7YTWfWdfyO5kDYIA; path=/; expires=Thu, 31-Oct-24 00:39:35 GMT; domain
2024-10-31 00:09:35 UTC	421	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 31 35 30 35 22 3a 7b 22 6a 73 22 3a 5b 22 65 66 37 32 65 66 39 64 34 39 35 66 33 61 35 36 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1505":{"js":["ef72ef9d495f3a56.strings.js"],"css":[]},"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49718	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	570	OUT	GET /web/4bb9c51951d1d716.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:35 UTC	1356	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 40118 Connection: close CF-Ray: 8daf6acb4dc93ac4-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 498572 Cache-Control: public, max-age=31556926 ETag: "309da0150010c8298c2f4c4e4a2a070d" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Wed, 16 Oct 2024 00:52:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 17 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: wEu9K3XwI6iAqx1vFeYnn/5G+P/5Wqjf76EM+qTfMRrN0YJKcanRPzJ8k9jDLuqzwvStfV9zxvzeOB7O5WVUVovKw3nApNHPzPJ2GS1Wb4Y= x-amz-replication-status: COMPLETED x-amz-request-id: BY6W3C3WCD46P88K x-amz-server-side-encryption: AES256 x-amz-version-id: xh9O_Sy.dIsDqZamhzwSEjJbHM_HVDET
2024-10-31 00:09:35 UTC	808	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 36 70 76 72 74 39 51 6d 46 71 5f 70 58 4d 4f 63 34 61 35 77 7a 47 51 50 59 4b 51 6e 52 45 75 5f 37 6f 64 66 42 75 66 42 4b 6e 6f 2d 31 37 33 30 33 33 33 33 37 35 2d 31 2e 30 2e 31 2e 31 2d 48 73 45 31 36 34 43 4a 52 2e 4c 6b 75 67 75 47 4c 58 51 4a 51 61 6e 4b 6d 6e 76 6a 77 6a 65 49 62 51 66 30 4c 72 36 78 79 45 6b 5f 67 51 66 46 6e 78 53 6c 32 62 53 69 34 74 33 47 5f 69 42 32 73 64 63 67 48 41 64 6e 4e 46 44 6f 4d 68 4c 6e 65 43 48 4b 61 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 35 20 47 4d 54 3b 20 64 6f 6d 61 69 6e Data Ascii: X-Content-Type-Options: nosniffSet-Cookie: __cf_bm=6pvrt9QmFq_pXMOc4a5wzGQPYKQnREu_7odfBufBKno-1730333375-1.0.1.1-HsE164CJR.LkuguGLXQJQanKmnvjwjeIbQf0Lr6xyEk_gQfFnxSl2bSi4t3G_iB2sdcgHAdnNFDoMhLneCHKaQ; path=/; expires=Thu, 31-Oct-24 00:39:35 GMT; domain
2024-10-31 00:09:35 UTC	574	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 62 62 39 63 35 31 39 35 31 64 31 64 37 31 36 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 31 37 32 39 33 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 50 50 3a 28 29 3d 3e 5f 2c 6c 58 3a 28 29 3d 3e 79 2c 71 5f 3a 28 29 3d 3e 52 7d 29 3b 76 61 72 20 72 3d 6e 28 31 31 30 35 31 39 29 2c 6f 3d 6e 28 34 37 33 31 32 34 29 2c 61 3d 6e 28 Data Ascii: /! For license information please see 4bb9c51951d1d716.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{172931:(e,t,n)=>{"use strict";n.d(t,{PP:()=>_,lX:()=>y,q_:()=>R});var r=n(110519),o=n(473124),a=n(
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 70 61 74 68 6e 61 6d 65 2c 6e 3d 65 2e 73 65 61 72 63 68 2c 72 3d 65 2e 68 61 73 68 2c 6f 3d 74 7c 7c 22 2f 22 3b 72 65 74 75 72 6e 20 6e 26 26 22 3f 22 21 3d 3d 6e 26 26 28 6f 2b 3d 22 3f 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 3f 6e 3a 22 3f 22 2b 6e 29 2c 72 26 26 22 23 22 21 3d 3d 72 26 26 28 6f 2b 3d 22 23 22 3d 3d 3d 72 2e 63 68 61 72 41 74 28 30 29 3f 72 3a 22 23 22 2b 72 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 2c 61 29 7b 76 61 72 20 69 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 7c 7c 22 2f 22 2c 6e 3d 22 22 2c 72 3d 22 22 2c 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 72 3d 74 2e 73 75 62 73 74 72 28 6f 29 Data Ascii: pathname,n=e.search,r=e.hash,o=t\|\|"/";return n&&"?"!==n&&(o+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(o+="#"===r.charAt(0)?r:"#"+r),o}function d(e,t,n,a){var i;"string"==typeof e?(i=function(e){var t=e\|\|"/",n="",r="",o=t.indexOf("#");-1!==o&&(r=t.substr(o)
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 21 3d 3d 72 7d 29 29 7d 7d 2c 6e 6f 74 69 66 79 4c 69 73 74 65 6e 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 72 3d 30 3b 72 3c 65 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 6e 29 7d 29 29 7d 7d 7d 76 61 72 20 76 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 21 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e Data Ascii: er((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var v=!("undefined"==typeof window\|\|!window.document\|\|!window.documen
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 54 6f 28 65 2c 22 50 4f 50 22 2c 53 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3f 54 28 7b 61 63 74 69 6f 6e 3a 22 50 4f 50 22 2c 6c 6f 63 61 74 69 6f 6e 3a 65 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 42 2e 6c 6f 63 61 74 69 6f 6e 2c 6e 3d 4f 2e 69 6e 64 65 78 4f 66 28 74 2e 6b 65 79 29 3b 2d 31 3d 3d 3d 6e 26 26 28 6e 3d 30 29 3b 76 61 72 20 72 3d 4f 2e 69 6e 64 65 78 4f 66 28 65 2e 6b 65 79 29 3b 2d 31 3d 3d 3d 72 26 26 28 72 3d 30 29 3b 76 61 72 20 6f 3d 6e 2d 72 3b 6f 26 26 28 46 3d 21 30 2c 6a 28 6f 29 29 7d 28 65 29 7d 29 29 7d 7d 76 61 72 20 4e 3d 5f 28 67 28 29 29 2c 4f 3d 5b 4e 2e 6b 65 79 5d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 72 65 74 75 72 6e 20 41 2b 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 6e Data Ascii: To(e,"POP",S,(function(t){t?T({action:"POP",location:e}):function(e){var t=B.location,n=O.indexOf(t.key);-1===n&&(n=0);var r=O.indexOf(e.key);-1===r&&(r=0);var o=n-r;o&&(F=!0,j(o))}(e)}))}}var N=_(g()),O=[N.key];function D(e){return A+f(e)}function j(e){n
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 50 2e 61 70 70 65 6e 64 4c 69 73 74 65 6e 65 72 28 65 29 3b 72 65 74 75 72 6e 20 49 28 31 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 49 28 2d 31 29 2c 74 28 29 7d 7d 7d 3b 72 65 74 75 72 6e 20 42 7d 76 61 72 20 62 3d 22 68 61 73 68 63 68 61 6e 67 65 22 2c 78 3d 7b 68 61 73 68 62 61 6e 67 3a 7b 65 6e 63 6f 64 65 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 21 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3f 65 3a 22 21 2f 22 2b 73 28 65 29 7d 2c 64 65 63 6f 64 65 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 21 22 3d 3d 3d 65 2e 63 68 61 72 41 74 28 30 29 3f 65 2e 73 75 62 73 74 72 28 31 29 3a 65 7d 7d 2c 6e 6f 73 6c 61 73 68 3a 7b 65 6e 63 6f 64 65 50 61 74 Data Ascii: unction(e){var t=P.appendListener(e);return I(1),function(){I(-1),t()}}};return B}var b="hashchange",x={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+s(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePat
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 49 6e 64 65 78 4f 66 28 66 28 65 29 29 3b 2d 31 3d 3d 3d 72 26 26 28 72 3d 30 29 3b 76 61 72 20 6f 3d 6e 2d 72 3b 6f 26 26 28 54 3d 21 30 2c 44 28 6f 29 29 7d 28 65 29 7d 29 29 7d 7d 28 6f 29 7d 7d 76 61 72 20 46 3d 53 28 29 2c 55 3d 52 28 46 29 3b 46 21 3d 3d 55 26 26 45 28 55 29 3b 76 61 72 20 4e 3d 5f 28 29 2c 4f 3d 5b 66 28 4e 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 74 2e 67 6f 28 65 29 7d 76 61 72 20 6a 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 31 3d 3d 3d 28 6a 2b 3d 65 29 26 26 31 3d 3d 3d 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 6b 29 3a 30 3d 3d 3d 6a 26 26 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 6b 29 7d 76 61 72 20 49 3d 21 31 3b 76 61 Data Ascii: IndexOf(f(e));-1===r&&(r=0);var o=n-r;o&&(T=!0,D(o))}(e)}))}}(o)}}var F=S(),U=R(F);F!==U&&E(U);var N=_(),O=[f(N)];function D(e){t.go(e)}var j=0;function M(e){1===(j+=e)&&1===e?window.addEventListener(b,k):0===j&&window.removeEventListener(b,k)}var I=!1;va
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 68 28 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 28 30 2c 72 2e 5a 29 28 62 2c 65 29 2c 62 2e 6c 65 6e 67 74 68 3d 62 2e 65 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2c 6c 2e 6e 6f 74 69 66 79 4c 69 73 74 65 6e 65 72 73 28 62 2e 6c 6f 63 61 74 69 6f 6e 2c 62 2e 61 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 28 32 2c 63 29 7d 76 61 72 20 6d 3d 41 28 75 2c 30 2c 61 2e 6c 65 6e 67 74 68 2d 31 29 2c 77 3d 61 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 76 6f 69 64 20 30 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 70 28 29 3a 65 2e 6b 65 79 7c 7c 70 28 29 29 7d 29 29 Data Ascii: h();function v(e){(0,r.Z)(b,e),b.length=b.entries.length,l.notifyListeners(b.location,b.action)}function p(){return Math.random().toString(36).substr(2,c)}var m=A(u,0,a.length-1),w=a.map((function(e){return d(e,void 0,"string"==typeof e?p():e.key\|\|p())}))
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 29 3d 3e 75 2e 4e 61 76 69 67 61 74 65 2c 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 28 29 3d 3e 73 2e 41 63 74 69 6f 6e 2c 4f 75 74 6c 65 74 3a 28 29 3d 3e 75 2e 4f 75 74 6c 65 74 2c 52 6f 75 74 65 3a 28 29 3d 3e 75 2e 52 6f 75 74 65 2c 52 6f 75 74 65 72 3a 28 29 3d 3e 75 2e 52 6f 75 74 65 72 2c 52 6f 75 74 65 72 50 72 6f 76 69 64 65 72 3a 28 29 3d 3e 55 2c 52 6f 75 74 65 73 3a 28 29 3d 3e 75 2e 52 6f 75 74 65 73 2c 53 63 72 6f 6c 6c 52 65 73 74 6f 72 61 74 69 6f 6e 3a 28 29 3d 3e 4b 2c 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 75 2e 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2c 55 4e 53 41 46 45 5f 44 61 74 61 52 6f 75 74 65 72 53 74 61 74 65 43 6f 6e 74 65 78 74 3a 28 29 3d 3e Data Ascii: )=>u.Navigate,NavigationType:()=>s.Action,Outlet:()=>u.Outlet,Route:()=>u.Route,Router:()=>u.Router,RouterProvider:()=>U,Routes:()=>u.Routes,ScrollRestoration:()=>K,UNSAFE_DataRouterContext:()=>u.UNSAFE_DataRouterContext,UNSAFE_DataRouterStateContext:()=>
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 73 65 41 73 79 6e 63 45 72 72 6f 72 2c 75 73 65 41 73 79 6e 63 56 61 6c 75 65 3a 28 29 3d 3e 75 2e 75 73 65 41 73 79 6e 63 56 61 6c 75 65 2c 75 73 65 42 65 66 6f 72 65 55 6e 6c 6f 61 64 3a 28 29 3d 3e 61 65 2c 75 73 65 42 6c 6f 63 6b 65 72 3a 28 29 3d 3e 75 2e 75 73 65 42 6c 6f 63 6b 65 72 2c 75 73 65 46 65 74 63 68 65 72 3a 28 29 3d 3e 65 65 2c 75 73 65 46 65 74 63 68 65 72 73 3a 28 29 3d 3e 74 65 2c 75 73 65 46 6f 72 6d 41 63 74 69 6f 6e 3a 28 29 3d 3e 51 2c 75 73 65 48 72 65 66 3a 28 29 3d 3e 75 2e 75 73 65 48 72 65 66 2c 75 73 65 49 6e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 3a 28 29 3d 3e 75 2e 75 73 65 49 6e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2c 75 73 65 4c 69 6e 6b 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3a 28 29 3d 3e 58 2c 75 73 65 4c 6f 61 64 65 Data Ascii: seAsyncError,useAsyncValue:()=>u.useAsyncValue,useBeforeUnload:()=>ae,useBlocker:()=>u.useBlocker,useFetcher:()=>ee,useFetchers:()=>te,useFormAction:()=>Q,useHref:()=>u.useHref,useInRouterContext:()=>u.useInRouterContext,useLinkClickHandler:()=>X,useLoade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49719	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	623	OUT	GET /web/79679fd80f393deb.runtime.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:35 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 22333 Connection: close CF-Ray: 8daf6acb59484623-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75158 Cache-Control: public, max-age=31556926 ETag: "c92f01b6df44fdd9db0e80496ff01291" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Wed, 30 Oct 2024 03:11:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: q0XSiPIGz10rIunjBaej3/cHSOKYkjt3ToljGQ6lMaiphmYNuwMH3slzVLmxhqTELatNrPv40n0= x-amz-replication-status: COMPLETED x-amz-request-id: WYJJDJ1WJ9014XWQ x-amz-server-side-encryption: AES256 x-amz-version-id: wlfFoWpeFUMGZTFIxx24cuXtl9BZPV5q X-Content-Type-Options: nosniff
2024-10-31 00:09:35 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 42 5a 44 71 4f 52 63 6b 25 32 42 4f 32 67 71 49 4d 56 70 69 78 79 5a 6c 41 66 68 35 44 55 63 44 35 46 25 32 46 38 63 6c 75 6f 44 69 36 55 58 73 55 4a 63 35 4f 70 59 71 67 65 4d 59 70 4b 62 7a 78 49 34 4a 50 25 32 42 53 42 77 77 52 39 76 55 39 69 41 42 46 6a 37 32 7a 25 32 46 39 32 6a 39 54 41 32 72 56 64 46 68 51 63 70 44 6e 30 41 51 39 6c 75 33 51 4a 70 25 32 42 54 68 64 46 4d 4b 48 4c 35 37 56 44 6a 25 32 46 76 6b 6b 51 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BZDqORck%2BO2gqIMVpixyZlAfh5DUcD5F%2F8cluoDi6UXsUJc5OpYqgeMYpKbzxI4JP%2BSBwwR9vU9iABFj72z%2F92j9TA2rVdFhQcpDn0AQ9lu3QJp%2BThdFMKHL57VDj%2FvkkQw%3D"}],"group":"cf-nel","max_age
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6e 2c 66 2c 73 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 73 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 63 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 63 2e 6d 3d 73 2c 63 2e 61 6d 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 64 65 66 69 6e 65 20 63 61 6e 6e 6f Data Ascii: (()=>{"use strict";var e,r,t,n,f,s={},i={};function c(e){var r=i[e];if(void 0!==r)return r.exports;var t=i[e]={id:e,loaded:!1,exports:{}};return s[e].call(t.exports,t,t.exports,c),t.loaded=!0,t.exports}c.m=s,c.amdD=function(){throw new Error("define canno
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 73 22 3b 69 66 28 38 38 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 61 66 32 33 63 33 63 36 36 66 63 61 34 64 37 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 34 30 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 62 36 38 36 66 36 33 63 35 33 39 30 30 65 35 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 31 37 36 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 33 62 35 64 31 65 34 38 35 39 31 62 64 31 38 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 38 32 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 31 33 33 32 33 39 61 33 35 33 62 30 65 37 64 2e 6a 73 22 3b 69 66 28 31 30 33 32 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 34 64 65 31 36 37 61 31 36 64 34 32 64 38 35 2e 6a 73 22 3b 69 66 28 32 35 32 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 32 33 35 39 62 39 66 61 62 39 34 37 38 63 Data Ascii: s";if(885===e)return"caf23c3c66fca4d7.vendor.js";if(4043===e)return"4b686f63c53900e5.vendor.js";if(1761===e)return"63b5d1e48591bd18.vendor.js";if(823===e)return"1133239a353b0e7d.js";if(1032===e)return"64de167a16d42d85.js";if(2527===e)return"2359b9fab9478c
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 31 2e 6a 73 22 3b 69 66 28 31 33 34 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 34 32 37 63 39 31 36 33 35 63 32 65 62 66 34 2e 6a 73 22 3b 69 66 28 33 32 32 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 32 66 32 63 33 34 37 38 39 62 37 37 62 66 63 2e 6a 73 22 3b 69 66 28 39 37 36 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 33 65 35 34 35 37 65 37 66 32 65 32 36 38 64 34 2e 6a 73 22 3b 69 66 28 35 30 33 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 30 31 33 34 36 35 37 35 32 32 32 34 62 35 61 36 2e 6a 73 22 3b 69 66 28 33 33 35 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 32 32 38 65 34 61 66 38 39 61 63 38 30 34 65 2e 6a 73 22 3b 69 66 28 37 32 30 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 35 35 64 33 31 61 38 66 39 38 35 35 36 63 36 2e 6a 73 22 3b 69 66 28 34 33 39 37 3d 3d Data Ascii: 1.js";if(1343===e)return"0427c91635c2ebf4.js";if(3227===e)return"52f2c34789b77bfc.js";if(9765===e)return"3e5457e7f2e268d4.js";if(5033===e)return"013465752224b5a6.js";if(3359===e)return"5228e4af89ac804e.js";if(7208===e)return"555d31a8f98556c6.js";if(4397==
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 6a 73 22 3b 69 66 28 38 31 33 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 65 30 64 65 33 35 66 61 62 66 32 30 63 61 66 32 2e 6a 73 22 3b 69 66 28 37 38 39 38 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 38 62 31 38 39 34 30 62 35 61 62 61 62 36 36 2e 6a 73 22 3b 69 66 28 39 34 32 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 62 33 39 61 36 39 35 35 38 36 65 32 61 61 33 2e 6a 73 22 3b 69 66 28 31 35 37 37 3d 3d 3d 65 29 72 65 74 75 72 6e 22 62 33 62 32 30 38 61 30 37 31 35 66 63 63 35 65 2e 6a 73 22 3b 69 66 28 39 37 37 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 33 36 65 64 39 63 33 30 66 65 31 63 61 64 35 2e 6a 73 22 3b 69 66 28 33 38 38 34 3d 3d 3d 65 29 72 65 74 75 72 6e 22 36 37 64 62 65 37 35 66 35 31 31 36 62 34 33 64 2e 76 65 6e 64 6f 72 2e 6a 73 22 3b 69 66 28 35 Data Ascii: js";if(8131===e)return"e0de35fabf20caf2.js";if(7898===e)return"78b18940b5abab66.js";if(9424===e)return"6b39a695586e2aa3.js";if(1577===e)return"b3b208a0715fcc5e.js";if(9775===e)return"536ed9c30fe1cad5.js";if(3884===e)return"67dbe75f5116b43d.vendor.js";if(5
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 65 74 75 72 6e 22 39 33 31 64 39 63 35 30 61 36 34 32 61 64 36 64 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 34 30 31 3d 3d 3d 65 29 72 65 74 75 72 6e 22 35 32 38 31 33 33 62 32 33 30 37 65 35 32 38 38 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 34 65 33 3d 3d 3d 65 29 72 65 74 75 72 6e 22 34 63 61 39 61 64 34 36 39 30 37 65 64 35 63 38 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 35 30 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 39 30 37 65 65 66 38 61 34 62 61 61 32 35 63 32 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 36 36 32 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 63 61 64 61 36 62 39 31 31 65 31 63 34 39 63 31 2e 6c 74 72 2e 63 73 73 22 3b 69 66 28 31 35 35 35 3d 3d 3d 65 29 72 65 74 75 72 6e 22 61 37 61 38 34 33 39 61 61 64 66 65 31 65 62 30 2e 6c 74 72 2e 63 73 73 22 Data Ascii: eturn"931d9c50a642ad6d.ltr.css";if(4401===e)return"528133b2307e5288.ltr.css";if(4e3===e)return"4ca9ad46907ed5c8.ltr.css";if(1505===e)return"907eef8a4baa25c2.ltr.css";if(6629===e)return"cada6b911e1c49c1.ltr.css";if(1555===e)return"a7a8439aadfe1eb0.ltr.css"
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 3a 31 2c 33 30 32 38 3a 31 2c 38 34 32 3a 31 2c 38 32 36 35 3a 31 2c 32 38 33 3a 31 2c 37 39 33 31 3a 31 2c 32 32 37 33 3a 31 2c 32 39 37 31 3a 31 2c 36 36 34 32 3a 31 2c 36 39 30 3a 31 2c 31 33 34 33 3a 31 2c 33 32 32 37 3a 31 2c 35 30 33 33 3a 31 2c 33 33 35 39 3a 31 2c 36 32 39 34 3a 31 2c 38 35 34 30 3a 31 2c 32 34 31 31 3a 31 2c 36 32 39 39 3a 31 2c 31 31 35 32 3a 31 2c 32 32 30 36 3a 31 2c 39 39 38 35 3a 31 2c 31 32 39 34 3a 31 2c 37 39 39 39 3a 31 2c 35 35 30 30 3a 31 2c 35 32 39 35 3a 31 2c 34 34 35 30 3a 31 2c 32 33 39 35 3a 31 2c 32 39 35 30 3a 31 2c 35 38 34 36 3a 31 2c 35 38 38 35 3a 31 2c 31 39 32 35 3a 31 2c 38 37 36 34 3a 31 2c 32 31 36 32 3a 31 2c 39 37 35 34 3a 31 2c 34 39 33 39 3a 31 2c 36 37 34 31 3a 31 2c 31 32 36 30 3a 31 2c 38 31 33 Data Ascii: :1,3028:1,842:1,8265:1,283:1,7931:1,2273:1,2971:1,6642:1,690:1,1343:1,3227:1,5033:1,3359:1,6294:1,8540:1,2411:1,6299:1,1152:1,2206:1,9985:1,1294:1,7999:1,5500:1,5295:1,4450:1,2395:1,2950:1,5846:1,5885:1,1925:1,8764:1,2162:1,9754:1,4939:1,6741:1,1260:1,813
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 39 34 39 3d 3d 3d 65 29 72 65 74 75 72 6e 22 38 33 66 66 63 65 32 39 37 62 63 31 33 30 30 66 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 33 36 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 31 65 32 34 36 62 31 35 30 32 30 66 36 30 37 64 2e 72 74 6c 2e 63 73 73 22 3b 69 66 28 35 37 35 30 3d 3d 3d 65 29 72 65 74 75 72 6e 22 37 31 65 32 62 32 36 65 30 66 32 30 37 39 66 30 2e 72 74 6c 2e 63 73 73 22 7d 2c 63 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 Data Ascii: 949===e)return"83ffce297bc1300f.rtl.css";if(3650===e)return"1e246b15020f607d.rtl.css";if(5750===e)return"71e2b26e0f2079f0.rtl.css"},c.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if(
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 29 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 2c 7b 76 61 6c 75 65 3a 22 4d 6f 64 75 6c 65 22 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 7d 2c 63 2e 6e 6d 64 3d 65 3d 3e 7b 69 66 28 65 2e 70 61 74 68 73 3d 5b 5d 2c 21 65 2e 63 68 69 6c 64 72 65 6e 29 65 2e 63 68 69 6c 64 72 65 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 65 7d 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 63 2e 65 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 28 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b Data Ascii: bol.toStringTag)Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})},c.nmd=e=>{if(e.paths=[],!e.children)e.children=[];return e},(()=>{const e=c.e,r=function e(r,t,n){return r().catch((function(f){
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 3d 64 2e 6c 65 6e 67 74 68 29 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 77 28 64 2c 76 29 29 2c 31 29 7d 64 2e 70 75 73 68 28 7b 73 72 63 3a 66 2c 63 61 6c 6c 62 61 63 6b 3a 74 3d 3e 7b 69 66 28 22 6c 6f 61 64 22 3d 3d 3d 74 2e 74 79 70 65 29 65 2e 6f 6e 6c 6f 61 64 26 26 65 2e 6f 6e 6c 6f 61 64 28 74 29 3b 65 6c 73 65 20 72 28 65 29 7d 2c 6f 72 69 67 69 6e 61 6c 4c 6f 61 64 3a 28 29 3d 3e 7b 72 28 65 29 7d 7d 29 7d 3b 6c 65 74 20 68 3d 30 2c 6a 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6c 65 74 20 66 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 7b 6e 2e 6f 6e 65 72 72 6f 72 3d 6e 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 Data Ascii: =d.length)setTimeout((()=>w(d,v)),1)}d.push({src:f,callback:t=>{if("load"===t.type)e.onload&&e.onload(t);else r(e)},originalLoad:()=>{r(e)}})};let h=0,j=0;function p(e,t){const n=document.createElement("script");let f;const s=e=>{n.onerror=n.onload=null,c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49721	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	871	OUT	GET /web/images/543d7829999d351b301ced5ed3c1f087.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:35 UTC	1258	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: image/jpeg Content-Length: 86447 Connection: close CF-Ray: 8daf6acb6e854602-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 317237 Cache-Control: public, max-age=31556926 ETag: "543d7829999d351b301ced5ed3c1f087" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Thu, 22 Aug 2024 01:19:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=88752, status=webp_bigger content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 23 Aug 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vxugVH7itnIVKBAzd9UaoV6pTlGmhXaPm1fM8gLsKGtVGc1yFA+92BpjMbXd7Zzqx5wUfdAoTB0= x-amz-replication-status: COMPLETED x-amz-request-id: WDVCWC9VKB4SJY4Z x-amz-server-side-encryption: AES256 x-amz-version-id: EKOyufOsCkQbE7E4KsDHBWDlygNX86zR X-Content-Type-Options: nosniff
2024-10-31 00:09:35 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4a 69 79 59 6c 78 31 5a 68 5a 4e 76 41 78 61 36 7a 6b 62 72 67 47 73 49 42 43 37 64 34 61 63 70 6b 45 45 63 42 6a 79 62 5a 73 37 74 64 4e 59 47 5a 30 44 31 4b 77 57 44 33 49 71 25 32 46 31 51 67 38 6a 6a 4e 25 32 46 6e 4c 53 42 39 61 32 45 67 4e 37 34 53 4a 25 32 46 45 64 42 41 56 7a 4c 43 48 6b 58 48 73 6d 6b 7a 61 6f 67 25 32 46 63 32 4f 54 49 44 6e 54 57 62 4d 52 25 32 42 31 4f 5a 6b 78 58 77 25 32 42 64 41 6e 42 58 38 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JiyYlx1ZhZNvAxa6zkbrgGsIBC7d4acpkEEcBjybZs7tdNYGZ0D1KwWD3Iq%2F1Qg8jjN%2FnLSB9a2EgN74SJ%2FEdBAVzLCHkXHsmkzaog%2Fc2OTIDnTWbMR%2B1OZkxXw%2BdAnBX8A%3D"}],"group":"cf-nel","max_age":
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 02 ff db 00 84 00 0e 09 0a 0c 0a 09 0e 0c 0b 0c 0f 0f 0e 10 15 22 16 15 13 13 15 2a 1e 20 19 22 32 2c 34 34 31 2c 30 2f 37 3e 4f 43 37 3a 4b 3b 2f 30 45 5e 46 4b 52 54 59 59 59 35 42 61 68 60 56 67 4f 57 59 55 01 0f 0f 0f 15 12 15 28 16 16 28 55 39 30 39 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e8 60 46 8d d2 5d d3 5e 70 5d 4b Data Ascii: JFIF"* "2,441,0/7>OC7:K;/0E^FKRTYYY5Bah`VgOWYU((U909UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU8"3`F]^p]K
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 89 83 4c 58 c6 19 5b ea 79 11 12 22 bd 7e 55 72 8b 65 55 38 88 dc d3 7b cf 99 c2 9a c5 d4 c4 12 d4 7b 54 5a 85 51 6a 15 45 a8 55 16 a1 54 5a 85 51 6a 15 45 a8 55 16 a1 54 5a 85 51 6a 15 31 2f eb 8a bd ae 2f 68 f2 f6 be 5d 67 17 dd 53 0d b1 ae 8e 29 b7 fd cc 52 d3 04 30 ea 2f 28 d5 d6 b5 fb fc fa e1 d7 7a 78 da 7e 74 58 eb 89 e2 57 b7 25 85 8d 54 9e 5f a1 20 86 65 df 3a 1a 22 6b 8e ae 92 da a5 f3 63 74 ce 67 d3 27 2b 40 3c 08 5f 84 61 f4 91 d3 29 23 24 80 8a eb aa 18 4c b4 8c 0f 84 67 1f f4 61 ef 5c 03 df 06 e3 c8 8e 60 e8 2f e8 2d d2 ad ab 2f c8 64 c0 86 4c 08 a4 a0 8d e4 a0 8c 89 81 1b c9 40 db 80 00 00 00 00 00 51 f9 05 1f 2b ec 4f 77 3a df 4e 5b 09 38 d9 3a f1 eb 0c da b7 c3 44 ac d8 69 0c d8 69 0c db e5 f9 1a 4c 68 00 02 52 38 34 49 da ab 1a da 73 1b Data Ascii: LX[y"~UreU8{{TZQjEUTZQjEUTZQj1//h]gS)R0/(zx~tXW%T_ e:"kctg'+@<_a)#$Lga\`/-/dL@Q+Ow:N[8:DiiLhR84Is
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: ed 24 2c 5c 82 e9 2a c2 a2 cd 73 28 af 68 b3 72 fb da 2b d9 ab 8a cb 1a ae 5f d0 b8 94 3b 3b 53 d7 df 56 f7 7c 68 ed a1 8e 8f 98 a5 32 ad 33 92 b8 aa 9d 2c a1 46 47 9a ba ec 55 a5 4d 7b e2 12 95 25 2a 53 62 54 b6 9d 56 b6 ba c6 bb 1d 63 74 ae 69 d1 a1 69 01 fc f6 57 67 63 8c bd 95 ad 55 65 4d 55 a2 2a 9c e5 9b 11 76 19 e5 5f e5 ea eb 4c d4 1d 15 02 21 bf 0c 4d 9a e1 bd 3d 5a 5b 3c a6 87 b9 62 06 b8 0c 3e d1 86 a4 bb a4 3a 6d fe 7a f4 70 6c 1c 12 91 c1 b0 70 6d 42 84 a4 70 6c 1c 1b 07 04 a8 00 00 00 03 10 af 51 f2 7e e3 ed b8 d3 d6 15 ef 9a e7 21 d6 1f c3 67 2c ea ac 77 e5 99 8f d8 66 3e 8f ca a3 74 f3 78 12 a1 29 43 a9 11 ea 80 4b 89 18 7d 2e 67 39 9d 06 7f 41 1a f4 c9 90 e6 28 00 00 00 00 00 00 00 00 00 00 00 00 00 08 1c b3 a9 f2 c3 3f 6d 53 6c e6 76 da Data Ascii: $,\s(hr+_;;SV\|h23,FGUM{%SbTVctiiWgcUeMU*v_L!M=Z[<b>:mzplpmBplQ~!g,wf>tx)CK}.g9A(?mSlv
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 68 a0 48 a7 d3 39 32 6b d1 9e d6 d0 dd 85 59 ca b3 a7 b9 f6 15 8f d8 64 f4 9c 7b be 9c ff 00 69 e9 4c 4a c3 5b 5c 8e ab 2b d5 f0 e9 6c 69 1e ac 25 bf 06 ff 00 18 91 a1 95 63 e2 04 59 f5 d9 f4 d2 a9 d3 0d c6 94 de 1a a5 c6 df d3 d5 4f 8e ae 8e 36 72 77 b4 9b e4 ca 12 aa 5a e9 f3 36 34 d4 37 9a ae 56 b9 ac 84 c8 35 59 26 36 99 6c 2c 1a b3 d2 57 29 a9 22 73 3a 98 46 06 ce e9 25 ed 8d 23 a4 ea a5 a0 42 6d 90 2e 2c 87 c6 27 25 c1 ba bb 8a 23 9e 57 df 44 27 4e ae b4 25 21 f3 e4 fd d6 07 51 7e 3f eb 4e 61 6b 5f 93 35 c1 f9 ed 4a ee f9 c9 87 32 2e 91 4b 5d 6b 58 e4 61 d6 95 32 97 12 e8 98 f2 11 46 df 42 a4 b8 73 a0 cf b8 d8 13 d8 d7 69 2e d9 ca aa a4 2e c2 90 bb f0 a3 2c 1b 21 96 28 54 14 b8 dc 5a 87 e4 fb e5 79 26 37 9e a4 8e 9f 62 61 2a ca a6 94 bb 0a 44 de 86 Data Ascii: hH92kYd{iLJ[\+li%cYO6rwZ647V5Y&6l,W)"s:F%#Bm.,'%#WD'N%!Q~?Nak_5J2.K]kXa2FBsi..,!(TZy&7ba*D
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 23 3b a7 63 49 e6 b6 f3 61 f7 f9 70 a4 2f e5 7d 14 36 ef 98 1a 16 41 1e b9 ed bc f5 48 d2 7d 8b 1e 97 e8 60 9c dc ea ed 30 dc 74 3e 7d d0 78 29 ac 0e fb 00 65 c4 a2 16 ba 2c ed c9 6e b8 6e da 4a da 92 25 2e 33 a1 f8 13 2b fc 29 80 f6 29 ab ee a2 de 71 9f 4c 9c ea bf 73 97 d6 c6 ba 1a 3b da 23 97 dc d3 5c 92 eb 66 43 8f a7 01 16 89 f7 0f 37 18 fd 85 46 86 2c 88 0c 96 a8 2a 8d 5f 18 15 31 31 44 cf 6a 3a 53 3a 65 55 8d c1 8a da e2 2f 9b 10 d2 9a e9 c9 d9 35 ee cf 4e ca 8a d2 af 9f 4a cd be 2b 65 f3 2a c6 9e d2 bb 8a d7 67 91 b8 f6 e7 46 b0 5f 37 55 2d 84 8f 3a 71 5d 23 b0 fa b9 53 16 64 69 8a e8 33 21 76 52 65 45 55 27 bb 5d 3f 2f 14 a1 79 45 8e 8e bf 47 a8 8d 26 ba 75 c8 53 d8 56 ef 3d 16 da 82 cb 78 b4 8a ff 00 a5 24 e9 0a 29 2b 6e 20 15 55 da 4c a1 57 69 Data Ascii: #;cIap/}6AH}`0t>}x)e,nnJ%.3+))qLs;#\fC7F,_11Dj:S:eU/5NJ+egF_7U-:q]#Sdi3!vReEU']?/yEG&uSV=x$)+n ULWi
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: c6 85 af 83 0d bb a6 1b 4b 8a 59 6d e3 35 3e 76 7d 90 2e e8 2c eb 27 f9 87 4f e6 1b fc fc a3 8d b8 8f 67 41 34 6d 25 61 43 70 61 c3 70 e6 0d 67 40 5e 15 d6 5b a3 1a e3 3d 82 f2 32 59 df 43 a2 a7 6f b4 4e 21 4d 36 a6 34 4e c2 9a a3 c1 b4 09 78 89 51 65 67 af 4f d3 e6 34 eb 50 00 00 00 00 00 00 00 00 00 00 00 00 00 35 86 dc e1 8c 67 44 e7 7d 18 bd 8f 31 91 02 c1 af 25 16 62 62 1d 80 00 36 e3 46 53 21 aa cd fd be 68 d2 a7 59 e3 b4 1b 37 55 f1 7b 40 39 b4 00 00 0a ec 6e cb 1b be 1b 0e 83 cf ba 0e f8 31 cf 3a 2f 3a 86 59 0e b4 3f a7 c8 db 1a e4 46 73 78 98 dc 78 a7 b4 ef c0 4b 0a 79 cf 65 af 41 e3 ce b0 ed f8 ea 7c 6f d4 ed 9e 2b 6b 9e 97 f4 57 b4 59 6b cb ee e9 2f 55 32 1d 9c 1e 6f b0 36 fa 32 ef 8b ac ca 6a fb 3e 16 a3 df 17 5c 71 58 9e 92 ac 7d b0 1c 48 e7 Data Ascii: KYm5>v}.,'OgA4m%aCpapg@^[=2YCoN!M64NxQegO4P5gD}1%bb6FS!hY7U{@9n1:/:Y?FsxxKyeA\|o+kWYk/U2o62j>\qX}H
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 24 85 4b 75 4f f3 ba 33 34 f6 95 7f 47 9e 46 ab 33 7f cd 76 35 4f 56 e5 ab b6 19 9b 0a f6 44 17 a0 e5 ae ae 7c 0d 27 7f 36 71 56 6c 61 dd 06 f1 33 b6 e6 87 cc ba 7f 30 be 58 7d 43 97 f4 f2 d8 6f c6 4b 10 23 df 12 97 8e 0d 9a 43 9e a1 73 6a 52 53 3b 38 a6 d4 28 48 28 48 28 4f a2 80 8b 1a 7d a3 07 8a db f3 fb 74 dd 4f 2d d1 1b 23 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a e3 22 1a 7c 3c 8c a1 4d 71 9e 74 da ab 22 a3 58 65 03 56 65 3c 35 8c 66 92 59 d7 24 de 12 05 cc 99 f5 26 3a dd 94 a7 3e b7 45 2f 85 df 94 be fa b0 80 37 d5 90 95 17 9b 1e 7a 8c ab 7f d0 f9 e7 43 ca 91 8a dd 56 4b 02 e6 cc c9 8c 8d ba 68 c1 44 e8 3e 6e e7 96 da d7 ca 37 f4 2b d2 33 cc eb 11 ec e2 23 6e 5a 31 0d 6f 04 e1 1e d9 a9 e6 67 5a 9b 1f 35 Data Ascii: $KuO34GF3v5OVD\|'6qVla30X}CoK#CsjRS;8(H(H(O}tO-#"""""""""""\|<Mqt"XeVe<5fY$&:>E/7zCVKhD>n7+3#nZ1ogZ5
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: fa 6f 33 e9 c8 b1 3d f1 90 03 c1 2a 1e 37 e3 a9 d2 61 c6 b0 6d 10 c9 29 4c 71 f5 ce 63 a9 54 f8 2d 03 d7 d4 d3 ad cf 7c 1a ad 1e f8 ac 47 3f df 60 5a eb 75 79 4d 5c 79 67 67 59 69 76 a0 01 2a 48 0d 20 90 47 09 0a 8a b1 f1 84 8f 91 c2 41 e2 c4 8a 04 54 5c 54 99 9a 6b 9a 6d 22 83 75 86 dd e7 77 6a 5a 84 a1 d4 03 ac 3e 36 a5 f8 46 ce d8 e0 05 d5 45 94 79 31 a8 66 cf 53 ca 77 66 af d1 c1 bf 16 91 0f b6 e9 e0 05 2f 37 e8 bc f0 5e a2 36 fc c8 9b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c5 1b 50 c4 53 f4 fa 03 95 68 a9 e4 9b d7 33 8f 46 97 28 ac 51 62 98 21 39 0d 3c 78 fd 7b 16 b8 55 73 f1 e4 86 92 87 ae 91 5a 26 36 c3 cb f5 c6 d4 f5 f5 30 3d 1b 09 45 c9 6b 72 55 9c be a9 ca fa a5 e5 67 0e 64 3c f5 aa 61 f8 d8 f6 28 05 Data Ascii: o3=7am)LqcT-\|G?`ZuyM\yggYivH GAT\Tkm"uwjZ>6FEy1fSwf/7^6PPPPPPPPPPPSh3F(Qb!9<x{UsZ&60=EkrUgd<a(
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 21 22 92 94 9e 88 f0 f4 1b a8 b8 6a a6 88 b8 45 4d 3b f3 3d 64 28 19 80 67 e2 96 95 0e b8 d3 ae 85 a1 68 6d 86 c1 ef 30 6e 8d d6 df 15 b5 8d 24 a9 2b bc d8 f1 d4 88 58 e1 ea 92 a0 4a 92 34 97 12 24 52 86 c7 14 36 e8 0a 00 4d 4d b5 49 99 a6 b9 a6 d2 28 77 d8 1d f6 77 7e a4 a8 69 b9 2c 0a f5 00 09 74 8b 4b a4 60 e7 b5 1d 3e 19 ce 67 6d a5 94 7a 82 50 95 09 14 d3 e9 1a 53 60 97 15 e9 49 cf fa 47 39 34 db ec 0e f8 74 12 46 64 88 4b 4c 60 96 46 94 78 7a d0 a5 41 51 33 d5 4a 21 f9 22 b8 95 32 9e c0 98 00 00 14 57 b4 47 33 ba a5 ba 4e cd c6 dc d3 10 07 81 ef 80 03 d0 05 80 01 ef 8a 48 c2 33 da 51 19 44 9f 5a 75 8b 8e 8b 7b e2 56 85 40 e7 bd 03 9f 87 53 e5 9d 4c b3 8d 26 34 5a 40 9a 00 a0 04 80 f2 9e 9e 26 4b 3c 0f 68 2f 29 27 a6 0c d8 af c7 4d eb f5 d3 b5 f9 fe Data Ascii: !"jEM;=d(ghm0n$+XJ4$R6MMI(ww~i,tK`>gmzPS`IG94tFdKL`FxzAQ3J!"2WG3NH3QDZu{V@SL&4Z@&K<h/)'M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49720	104.16.80.73	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:35 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8daf6acb8b44486f-DFW
2024-10-31 00:09:35 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49722	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	563	OUT	GET /web/306ff5855d28408f.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:35 UTC	1357	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 748039 Connection: close CF-Ray: 8daf6acb8d23eae9-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 75247 Cache-Control: public, max-age=31556926 ETag: "e32cdbd7195f96f95945c527fc3f691a" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Wed, 30 Oct 2024 03:11:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: VMTzZCPzqwo0Khl0oqEuugJDCE/rtOMWJTLlnEJjla/5rN2wPU3B8p4clfL2t902FgFUkPI+5Ng= x-amz-replication-status: COMPLETED x-amz-request-id: 4GAFRXJMRHSFAS3X x-amz-server-side-encryption: AES256 x-amz-version-id: TqNKBQpCg.2RDFP_5yfsaQrRRNi_IhHR X-Content-Type-Options: nosniff
2024-10-31 00:09:35 UTC	775	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 33 7a 6c 30 43 62 6a 72 65 6f 6e 44 5a 39 69 75 39 6d 56 42 75 6a 54 48 38 5f 54 45 6c 31 31 33 30 48 4c 4a 2e 43 65 41 6a 45 49 2d 31 37 33 30 33 33 33 33 37 35 2d 31 2e 30 2e 31 2e 31 2d 45 32 62 4a 66 72 71 69 73 34 67 31 79 59 6d 37 58 57 79 4a 57 47 66 6d 6a 75 74 31 6f 39 49 43 36 30 75 46 45 43 6b 64 36 4d 72 45 31 41 59 7a 7a 69 5a 59 6d 75 46 4a 56 54 2e 54 54 50 30 4a 36 30 43 69 50 59 66 6e 31 4b 57 46 71 4f 74 71 69 46 47 66 76 67 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 33 31 2d 4f 63 74 2d 32 34 20 30 30 3a 33 39 3a 33 35 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 63 61 6e 76 61 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 Data Ascii: Set-Cookie: __cf_bm=3zl0CbjreonDZ9iu9mVBujTH8_TEl1130HLJ.CeAjEI-1730333375-1.0.1.1-E2bJfrqis4g1yYm7XWyJWGfmjut1o9IC60uFECkd6MrE1AYzziZYmuFJVT.TTP0J60CiPYfn1KWFqOtqiFGfvg; path=/; expires=Thu, 31-Oct-24 00:39:35 GMT; domain=.canva.com; HttpOnly; Secure; Sa
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 2c 33 38 31 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389,3817],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 62 2c 69 62 2c 6b 62 2c 6d 62 2c 64 62 2c 6b 61 61 2c 6c 61 61 2c 70 62 2c 72 62 2c 78 62 2c 6d 61 61 2c 47 62 2c 48 62 2c 49 62 2c 4a 62 2c 4c 62 2c 46 62 2c 72 61 61 2c 57 62 2c 59 62 2c 58 62 2c 75 61 61 2c 5a 62 2c 64 63 2c 63 63 2c 76 61 61 2c 66 63 2c 6c 63 2c 6a 63 2c 41 61 61 2c 70 63 2c 42 61 61 2c 6e 63 2c 77 63 2c 79 63 2c 7a 63 2c 42 63 2c 49 61 61 2c 48 63 2c 4a 63 2c 4c 63 2c 4a 61 61 2c 4e 61 61 2c 4d 61 61 2c 4d 63 2c 4b 61 61 2c 52 63 2c 4f 61 61 2c 50 61 61 2c 53 61 61 2c 57 61 61 2c 56 61 61 2c 58 61 61 2c 54 61 61 2c 5a 61 61 2c 57 63 2c 24 61 61 2c 61 62 61 2c 5a 63 2c 61 64 2c 62 64 2c 62 62 61 2c 63 62 61 2c 64 62 61 2c 65 62 61 2c 66 62 61 2c 67 62 61 2c 68 62 61 2c 63 64 2c 69 62 61 2c 6a 62 61 2c 6d 62 61 2c 6c 62 61 2c 6e 62 61 Data Ascii: b,ib,kb,mb,db,kaa,laa,pb,rb,xb,maa,Gb,Hb,Ib,Jb,Lb,Fb,raa,Wb,Yb,Xb,uaa,Zb,dc,cc,vaa,fc,lc,jc,Aaa,pc,Baa,nc,wc,yc,zc,Bc,Iaa,Hc,Jc,Lc,Jaa,Naa,Maa,Mc,Kaa,Rc,Oaa,Paa,Saa,Waa,Vaa,Xaa,Taa,Zaa,Wc,$aa,aba,Zc,ad,bd,bba,cba,dba,eba,fba,gba,hba,cd,iba,jba,mba,lba,nba
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2c 56 68 61 2c 57 68 61 2c 79 6b 2c 58 68 61 2c 55 68 61 2c 78 6b 2c 59 68 61 2c 5a 68 61 2c 41 6b 2c 24 68 61 2c 61 69 61 2c 45 6b 2c 63 69 61 2c 49 6b 2c 4c 6b 2c 0a 66 69 61 2c 67 69 61 2c 6d 69 61 2c 6e 69 61 2c 62 6a 61 2c 64 6a 61 2c 65 6a 61 2c 66 6a 61 2c 67 6a 61 2c 64 6c 2c 65 6c 2c 69 6a 61 2c 6a 6a 61 2c 6b 6a 61 2c 68 6a 61 2c 70 6a 61 2c 73 6a 61 2c 74 6a 61 2c 6a 6c 2c 75 6a 61 2c 7a 6a 61 2c 4b 6c 2c 41 6a 61 2c 44 6a 61 2c 47 6a 61 2c 48 6a 61 2c 50 6c 2c 49 6a 61 2c 4f 6a 61 2c 50 6a 61 2c 51 6a 61 2c 52 6a 61 2c 56 6a 61 2c 54 6c 2c 55 6c 2c 56 6c 2c 59 6a 61 2c 5a 6a 61 2c 58 6c 2c 62 6b 61 2c 24 6a 61 2c 63 6b 61 2c 5a 6c 2c 61 6d 2c 66 6b 61 2c 63 6d 2c 69 6b 61 2c 71 6d 2c 6a 6b 61 2c 72 6d 2c 6f 6b 61 2c 73 6b 61 2c 7a 6b 61 2c 74 Data Ascii: ,Vha,Wha,yk,Xha,Uha,xk,Yha,Zha,Ak,$ha,aia,Ek,cia,Ik,Lk,fia,gia,mia,nia,bja,dja,eja,fja,gja,dl,el,ija,jja,kja,hja,pja,sja,tja,jl,uja,zja,Kl,Aja,Dja,Gja,Hja,Pl,Ija,Oja,Pja,Qja,Rja,Vja,Tl,Ul,Vl,Yja,Zja,Xl,bka,$ja,cka,Zl,am,fka,cm,ika,qm,jka,rm,oka,ska,zka,t
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 76 6f 69 64 20 30 3b 69 66 28 61 26 26 2f 69 50 61 64 Data Ascii: .");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&baa(c,a,{configurable:!0,writable:!0,value:b})}};caa=function(){var a="object"===typeof navigator?navigator.userAgent:void 0;if(a&&/iPad
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 6f 74 73 74 72 61 70 22 29 3b 41 61 5b 61 5d 3d 7b 2e 2e 2e 65 5b 61 5d 7d 3b 63 7c 7c 64 65 6c 65 74 65 20 65 5b 61 5d 7d 72 65 74 75 72 6e 20 64 61 61 28 61 2c 62 2c 64 26 26 61 20 69 6e 20 42 61 3f 42 61 5b 61 5d 3a 76 6f 69 64 20 30 29 7d 3b 0a 64 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 20 69 6e 20 44 61 26 26 6e 75 6c 6c 3d 3d 63 26 26 6e 75 6c 6c 21 3d 44 61 5b 61 5d 29 72 65 74 75 72 6e 20 44 61 5b 61 5d 3b 6e 75 6c 6c 21 3d 63 26 26 30 3c 63 2e 73 69 7a 65 26 26 63 2e 66 6f 72 45 61 63 68 28 28 64 2c 65 29 3d 3e 7b 61 3a 7b 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 6c 65 74 20 66 3d 41 61 5b 61 5d 2c 67 3d 65 2e 73 68 69 66 74 28 29 3b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 45 61 28 67 2c 66 29 29 Data Ascii: otstrap");Aa[a]={...e[a]};c\|\|delete e[a]}return daa(a,b,d&&a in Ba?Ba[a]:void 0)};daa=function(a,b,c){if(a in Da&&null==c&&null!=Da[a])return Da[a];null!=c&&0<c.size&&c.forEach((d,e)=>{a:{e=e.split(".");let f=Aa[a],g=e.shift();for(;e.length;){if(Ea(g,f))
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 60 75 6e 65 78 70 65 63 74 65 64 20 68 69 6e 74 20 74 79 70 65 3a 20 24 7b 62 7d 60 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 62 29 3b 7d 7d 3b 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 3d 3d 3d 62 5b 61 5d 7c 7c 21 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 61 20 69 6e 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 3f 21 30 3a 21 31 7d 3b 68 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4e 61 28 61 29 7d 3b 69 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4f 61 28 61 29 7d 3b 6a 61 61 3d 66 75 6e 63 74 Data Ascii: Error(`unexpected hint type: ${b}`);default:throw new n(b);}};Ea=function(a,b){return Object.getPrototypeOf(b)===b[a]\|\|!b.hasOwnProperty(a)&&a in Object.getPrototypeOf(b)?!0:!1};haa=function(a){return new Na(a)};iaa=function(a){return new Oa(a)};jaa=funct
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 64 2c 63 63 3a 65 2c 6d 69 3a 66 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 33 2c 63 63 3a 65 2c 6f 62 6a 3a 66 2c 4e 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 76 3d 5f 5f 63 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 63 63 3a 65 2c 6d 69 3a 66 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 34 2c 63 63 3a 65 2c 6f 62 6a 3a 66 2c 4e 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 79 3d 5f 5f 63 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 63 63 3a 65 2c 6d 69 3a 66 2c 4d 32 3a 67 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 32 2c 63 63 3a 65 2c 6f 62 Data Ascii: d,cc:e,mi:f}=Za(a,b,c);return{tag:d,Ng:3,cc:e,obj:f,Nb:"object"}};v=__c.v=function(a,b,c){const {tag:d,cc:e,mi:f}=Za(a,b,c);return{tag:d,Ng:4,cc:e,obj:f,Nb:"object"}};y=__c.y=function(a,b,c){const {tag:d,cc:e,mi:f,M2:g}=Za(a,b,c);return{tag:d,Ng:2,cc:e,ob
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 66 28 6e 75 6c 6c 3d 3d 75 26 26 6e 75 6c 6c 21 3d 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7b 68 5b 7a 5d 3d 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 3d 3d 75 7c 7c 21 64 62 28 75 2c 67 2e 4e 62 29 29 74 68 72 6f 77 20 66 62 28 7b 65 68 3a 6c 2c 49 6b 3a 6d 7d 2c 75 2c 67 2e 4e 62 2c 0a 66 29 3b 66 2e 70 75 73 68 28 71 29 3b 68 5b 7a 5d 3d 64 2e 5a 47 28 75 2c 41 2c 66 29 3b 66 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 76 61 72 20 77 3d 41 2e 43 4a 3b 71 3d 41 2e 58 54 3b 69 66 28 6e 75 6c 6c 3d 3d 75 26 26 67 2e 68 78 29 7b 68 5b 7a 5d 3d 67 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 75 3d 3d 3d 77 29 7b 68 5b 7a 5d 3d 67 2e 76 61 Data Ascii: reak;case 2:if(null==u&&null!=g.defaultValue){h[z]=g.defaultValue;break}else if(null==u\|\|!db(u,g.Nb))throw fb({eh:l,Ik:m},u,g.Nb,f);f.push(q);h[z]=d.ZG(u,A,f);f.pop();break;case 1:var w=A.CJ;q=A.XT;if(null==u&&g.hx){h[z]=g.value;break}if(u===w){h[z]=g.va
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 67 2e 63 6f 6e 66 69 67 3b 63 6f 6e 73 74 20 68 3d 67 2e 6e 61 6d 65 2c 6c 3d 65 5b 68 5d 3b 73 77 69 74 63 68 28 66 2e 4e 67 29 7b 63 61 73 65 20 31 3a 74 68 69 73 5b 68 5d 3d 66 2e 76 61 6c 75 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 66 2e 64 65 66 61 75 6c 74 3a 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 5b 68 5d 3d 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 5b 5d 3a 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 6e 65 77 20 4d 61 70 3a 6c 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 66 29 3b 7d 7d 7d 7d 64 2e 69 6e 69 74 3d 63 3b 64 2e 50 45 3d 62 2e 41 61 Data Ascii: g.config;const h=g.name,l=e[h];switch(f.Ng){case 1:this[h]=f.value;break;case 2:this[h]=null==l?f.default:l;break;case 3:this[h]=l;break;case 4:this[h]=null==l?[]:l;break;case 5:this[h]=null==l?new Map:l;break;default:throw new n(f);}}}}d.init=c;d.PE=b.Aa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49723	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	623	OUT	GET /web/e5aa5e318fd5dfa0.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:35 UTC	1191	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 42391 Connection: close CF-Ray: 8daf6acc082e0bd9-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 153035 Cache-Control: public, max-age=31556926 ETag: "7a4ddde5084e819729ce5f7b17c0194f" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Tue, 29 Oct 2024 05:22:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 30 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: RHQqw9oRFjYItkaqyBv98IhUu3XL1lrd+6iJSluIGteH9+ihQoXWRGJCaxxEXjGU7QVNvtCYuXw= x-amz-replication-status: COMPLETED x-amz-request-id: X2XW3SQAZDBKSMA5 x-amz-server-side-encryption: AES256 x-amz-version-id: VjTKDyg1ZdtZiFufkEinvIclJN4yPWZm X-Content-Type-Options: nosniff
2024-10-31 00:09:35 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 61 38 71 75 30 6a 42 4f 58 62 51 62 62 4a 4e 71 48 50 49 62 49 62 50 4d 77 4d 74 58 33 33 57 45 63 7a 4d 4e 4b 4a 48 4c 68 30 32 53 45 39 62 79 42 79 6e 73 6c 71 55 79 69 57 4a 25 32 42 4f 6d 6b 76 51 4b 63 34 73 44 50 72 61 39 7a 68 71 72 50 6b 6b 72 73 7a 25 32 46 76 39 67 70 36 4d 48 45 51 78 58 73 7a 38 4f 45 32 4c 6f 48 6c 71 31 67 76 59 56 56 64 34 65 46 46 32 54 75 4a 53 6e 65 35 44 25 32 42 64 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ma8qu0jBOXbQbbJNqHPIbIbPMwMtX33WEczMNKJHLh02SE9byBynslqUyiWJ%2BOmkvQKc4sDPra9zhqrPkkrsz%2Fv9gp6MHEQxXsz8OE2LoHlq1gvYVVd4eFF2TuJSne5D%2Bd4%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:35 UTC	1197	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 42 51 6b 4f 43 51 5c 22 3a 5c 22 7b 30 7d 4b 5c 22 2c 5c 22 6d 59 44 31 4a 67 5c 22 3a 5c 22 43 6f 6e 66 69 72 6d 5c 22 2c 5c 22 6c 48 4f 75 4b 77 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 43 6f 6c 6f 72 69 6e 67 42 6f 6f 6b 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 6e 47 42 6c 59 67 5c 22 3a 5c 22 43 68 61 6e 67 65 20 65 6d 61 69 6c 5c 22 2c 5c 22 33 44 58 6e 43 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 44 69 73 6e 65 79 20 63 6f 6c 6c 65 63 74 69 6f 6e 3c 2f 73 70 61 6e 3e 5c Data Ascii: (function() { const messages = JSON.parse("{\"BQkOCQ\":\"{0}K\",\"mYD1Jg\":\"Confirm\",\"lHOuKw\":\"Log back in to discover <span>ColoringBook</span>\",\"nGBlYg\":\"Change email\",\"3DXnCQ\":\"Log in or sign up to discover <span>Disney collection</span>\
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 72 20 77 69 74 68 20 79 6f 75 72 20 74 65 61 6d 2e 5c 22 2c 5c 22 35 54 76 35 4c 51 5c 22 3a 5c 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 72 65 73 65 74 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 2e 20 50 6c 65 61 73 65 20 72 65 71 75 65 73 74 20 61 20 6e 65 77 20 63 6f 64 65 2e 5c 22 2c 5c 22 51 70 2f 66 37 67 5c 22 3a 5c 22 56 65 72 69 66 79 20 75 73 69 6e 67 20 7b 30 7d 5c 22 2c 5c 22 65 67 49 6c 48 77 5c 22 3a 5c 22 45 6d 61 69 6c 20 28 70 65 72 73 6f 6e 61 6c 20 6f 72 20 77 6f 72 6b 29 5c 22 2c 5c 22 57 54 64 56 6e 41 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4e 65 77 20 50 6f 70 75 6c 61 72 20 4d 75 73 69 63 20 74 72 61 63 6b 73 20 26 20 66 61 6e 20 6b 69 74 73 3c 2f 73 70 61 Data Ascii: r with your team.\",\"5Tv5LQ\":\"The password reset code is not valid. Please request a new code.\",\"Qp/f7g\":\"Verify using {0}\",\"egIlHw\":\"Email (personal or work)\",\"WTdVnA\":\"Log back in to discover <span>New Popular Music tracks & fan kits</spa
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 44 57 6b 46 67 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 46 6c 6f 77 63 6f 64 65 20 51 52 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 42 4e 51 63 31 67 5c 22 3a 5c 22 47 6f 20 74 6f 20 74 68 65 20 79 65 61 72 20 72 61 6e 67 65 20 70 69 63 6b 65 72 5c 22 2c 5c 22 79 4c 57 69 5a 41 5c 22 3a 5c 22 43 74 72 6c 5c 22 2c 5c 22 4e 4a 42 39 77 41 5c 22 3a 5c 22 57 65 6c 63 6f 6d 65 20 62 61 63 6b 21 5c 22 2c 5c 22 6a 34 44 6c 43 51 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 57 65 43 68 61 74 5c 22 2c 5c 22 4c 49 6a 70 56 41 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4d 61 67 69 63 20 45 72 61 73 65 72 3c 2f 73 70 61 Data Ascii: DWkFg\":\"Log back in to discover <span>Flowcode QR</span>\",\"BNQc1g\":\"Go to the year range picker\",\"yLWiZA\":\"Ctrl\",\"NJB9wA\":\"Welcome back!\",\"j4DlCQ\":\"Continue with WeChat\",\"LIjpVA\":\"Log in or sign up to discover <span>Magic Eraser</spa
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2c 5c 22 57 51 75 44 49 41 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 56 69 64 65 6f 20 55 70 73 63 61 6c 65 72 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 46 2b 6d 75 64 77 5c 22 3a 5c 22 57 65 20 63 61 6e e2 80 99 74 20 73 65 6e 64 20 79 6f 75 72 20 69 6e 76 69 74 61 74 69 6f 6e 73 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 2e 20 54 72 79 20 74 6f 20 63 6f 6e 6e 65 63 74 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 57 69 2d 46 69 20 6e 65 74 77 6f 72 6b 2c 20 74 75 72 6e 20 6f 66 66 20 61 6e 79 20 56 50 4e 73 2c 20 6f 72 20 75 73 65 20 61 6e 6f 74 68 65 72 20 62 72 6f 77 73 65 72 2e 20 49 66 20 79 6f 75 20 73 74 69 6c 6c 20 6e 65 65 64 20 68 65 6c 70 2c 20 63 Data Ascii: ,\"WQuDIA\":\"Log in or sign up to discover <span>Video Upscaler</span>\",\"F+mudw\":\"We cant send your invitations for security reasons. Try to connect to a different Wi-Fi network, turn off any VPNs, or use another browser. If you still need help, c
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 5c 22 2c 5c 22 4f 72 79 75 6e 51 5c 22 3a 5c 22 59 6f 75 20 68 61 76 65 20 69 74 65 6d 73 20 69 6e 20 79 6f 75 72 20 63 61 72 74 5c 22 2c 5c 22 32 33 2b 79 59 41 5c 22 3a 5c 22 50 6c 65 61 73 65 20 72 65 61 64 20 61 6e 64 20 61 67 72 65 65 20 74 6f 20 43 61 6e 76 61 e2 80 99 73 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 30 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 54 65 72 6d 73 20 6f 66 20 55 73 65 3c 2f 61 3e 2c 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 7b 31 7d 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 3c 2f 61 Data Ascii: \",\"OryunQ\":\"You have items in your cart\",\"23+yYA\":\"Please read and agree to Canvas <a href=\\\"{0}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Terms of Use</a>, <a href=\\\"{1}\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Privacy Policy</a
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 3e 54 79 70 65 4c 65 74 74 65 72 69 6e 67 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 70 5a 75 4a 44 41 5c 22 3a 5c 22 54 6f 6f 20 6d 61 6e 79 20 61 74 74 65 6d 70 74 73 20 74 6f 20 73 65 6e 64 20 74 68 69 73 20 63 6f 64 65 2e 20 54 72 79 20 61 67 61 69 6e 20 69 6e 20 61 20 6d 69 6e 75 74 65 20 6f 72 20 74 77 6f 2e 5c 22 2c 5c 22 58 6f 58 44 47 41 5c 22 3a 5c 22 54 72 79 20 61 67 61 69 6e 2e 5c 22 2c 5c 22 46 71 2b 78 4c 41 5c 22 3a 5c 22 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 6c 6f 67 20 79 6f 75 20 69 6e 20 77 69 74 68 20 79 6f 75 72 20 70 61 73 73 6b 65 79 20 6f 72 20 69 74 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 20 62 65 6c 6f 77 2e 5c 22 2c 5c 22 52 6a 2f 50 31 41 5c 22 3a 5c Data Ascii: >TypeLettering</span>\",\"pZuJDA\":\"Too many attempts to send this code. Try again in a minute or two.\",\"XoXDGA\":\"Try again.\",\"Fq+xLA\":\"We could not log you in with your passkey or it was not found. Please try another method below.\",\"Rj/P1A\":\
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 76 65 72 20 3c 73 70 61 6e 3e 4e 65 77 20 50 6f 70 75 6c 61 72 20 4d 75 73 69 63 20 74 72 61 63 6b 73 20 26 20 66 61 6e 20 6b 69 74 73 3c 2f 73 70 61 6e 3e 5c 22 2c 5c 22 4f 52 37 52 54 67 5c 22 3a 5c 22 53 74 75 64 65 6e 74 20 61 6e 64 20 65 64 75 63 61 74 6f 72 73 20 67 65 74 20 61 20 70 72 65 6d 69 75 6d 20 76 65 72 73 69 6f 6e 20 6f 66 20 43 61 6e 76 61 20 66 6f 72 20 66 72 65 65 20 77 68 65 6e 20 74 68 65 79 20 73 69 67 6e 20 75 70 20 77 69 74 68 20 74 68 65 69 72 20 5a 50 45 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 5c 22 2c 5c 22 73 72 52 31 57 77 5c 22 3a 5c 22 45 78 70 61 6e 64 20 e2 80 9c 7b 30 7d e2 80 9d 5c 22 2c 5c 22 55 74 4c 6f 35 51 5c 22 3a 5c 22 4c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 20 74 6f 20 43 61 6e 76 61 20 74 68 72 Data Ascii: ver <span>New Popular Music tracks & fan kits</span>\",\"OR7RTg\":\"Student and educators get a premium version of Canva for free when they sign up with their ZPE email address.\",\"srR1Ww\":\"Expand {0}\",\"UtLo5Q\":\"Log in or sign up to Canva thr
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 22 55 73 69 6e 67 20 79 6f 75 72 20 77 6f 72 6b 20 65 6d 61 69 6c 20 6f 6e 20 43 61 6e 76 61 5c 22 2c 5c 22 48 64 54 37 78 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 41 6b 75 6e 20 62 65 6c 61 6a 61 72 2e 69 64 5c 22 2c 5c 22 39 56 76 44 49 41 5c 22 3a 5c 22 41 67 72 65 65 20 61 6e 64 20 75 73 65 20 62 61 73 69 63 20 66 75 6e 63 74 69 6f 6e 73 20 69 6e 20 62 72 6f 77 73 65 72 5c 22 2c 5c 22 4a 71 5a 4b 44 41 5c 22 3a 5c 22 2b 7b 30 7d 5c 22 2c 5c 22 31 71 54 70 45 67 5c 22 3a 5c 22 46 65 62 5c 22 2c 5c 22 56 32 54 73 65 77 5c 22 3a 5c 22 e4 ba ac e5 85 ac e5 ae 89 e5 a4 87 31 31 30 31 30 35 30 32 30 33 39 30 37 33 e5 8f b7 5c 22 2c 5c 22 78 53 74 36 6f 51 5c 22 3a 5c 22 4e 6f 74 20 75 73 69 6e 67 20 43 61 6e 76 61 20 66 6f 72 20 77 6f 72 Data Ascii: "Using your work email on Canva\",\"HdT7xw\":\"Continue with Akun belajar.id\",\"9VvDIA\":\"Agree and use basic functions in browser\",\"JqZKDA\":\"+{0}\",\"1qTpEg\":\"Feb\",\"V2Tsew\":\"11010502039073\",\"xSt6oQ\":\"Not using Canva for wor
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2c 5c 22 6a 68 78 38 49 67 5c 22 3a 5c 22 54 68 65 20 70 61 73 73 77 6f 72 64 20 79 6f 75 20 65 6e 74 65 72 65 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 5c 22 2c 5c 22 74 33 38 78 45 77 5c 22 3a 5c 22 59 6f 75 72 20 62 72 6f 77 73 65 72 20 68 61 73 20 63 6f 6f 6b 69 65 73 20 64 69 73 61 62 6c 65 64 2e 20 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 63 6f 6f 6b 69 65 73 20 74 6f 20 75 73 65 20 43 61 6e 76 61 2e 5c 22 2c 5c 22 57 76 73 71 31 51 5c 22 3a 5c 22 47 6f 20 74 6f 20 74 68 65 20 70 72 65 76 69 6f 75 73 20 79 65 61 72 20 72 61 6e 67 65 5c 22 2c 5c 22 47 7a 6d 6a 56 67 5c 22 3a 5c 22 4c 6f 67 20 62 61 63 6b 20 69 6e 20 74 6f 20 64 69 73 63 6f 76 65 72 20 3c 73 70 61 6e 3e 4d 61 67 69 63 20 4d 65 64 69 61 20 66 6f 72 20 56 69 64 65 6f 3c 2f 73 70 61 Data Ascii: ,\"jhx8Ig\":\"The password you entered is incorrect.\",\"t38xEw\":\"Your browser has cookies disabled. Please enable cookies to use Canva.\",\"Wvsq1Q\":\"Go to the previous year range\",\"GzmjVg\":\"Log back in to discover <span>Magic Media for Video</spa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49725	34.120.195.249	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	740	OUT	POST /api/1765394/envelope/?sentry_key=a8d71e6acf7a4a609f7c96cced259391&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive Content-Length: 465 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:35 UTC	465	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 34 2e 30 36 32 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 62 72 6f 77 73 65 72 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 36 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 33 39 34 62 38 35 38 34 38 36 34 61 34 62 65 37 39 65 64 31 38 65 34 37 65 62 35 62 61 35 34 38 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 34 2e 30 36 31 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 34 2e 30 36 31 5a 22 2c 22 73 74 61 74 Data Ascii: {"sent_at":"2024-10-31T00:09:34.062Z","sdk":{"name":"sentry.javascript.browser","version":"7.16.0"}}{"type":"session"}{"sid":"394b8584864a4be79ed18e47eb5ba548","init":true,"started":"2024-10-31T00:09:34.061Z","timestamp":"2024-10-31T00:09:34.061Z","stat
2024-10-31 00:09:35 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:35 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49724	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	623	OUT	GET /static/lib/sentry/7.16.0.min.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:35 UTC	1358	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6acc3c612847-DFW CF-Cache-Status: HIT Age: 137623 Cache-Control: public, max-age=31556926 ETag: W/"91258797204803263e4c46f8400f1bda" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Mon, 14 Oct 2024 22:43:15 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-id-2: n/tgAv7nhdMK8+ZDRGJEaCxpKxVhLFJZMQK/5RvJNADTgttBr37iBiAAR/bcmMUlTegrHaZW7D4= x-amz-meta-vary: Origin x-amz-replication-status: COMPLETED x-amz-request-id: 4BC7Q2FFFT5VZFJY x-amz-server-side-encryption: AES256 x-amz-version-id: tozEOUZEBcqjRpGz85aK0Lg42bZme1w8 X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2CpMFUZmp6Nl5QuQxjXGTQ%2FvwXbOpqE%2BALHKLJcmcAlBNb4eZZDysh%2FI7c7ChNlUvEvaBl6ycMpxWRB55Bt5691UqY3AYyRxzqk1yzH2K%2BEE%2BBSNCz%2F1mVnuy%2FyeJna9JP4%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:35 UTC	92	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflare
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 37 2e 31 36 2e 30 20 28 35 33 38 36 63 65 37 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 73 77 69 74 63 68 28 6e 2e 63 61 6c 6c 28 74 29 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 45 78 63 65 70 74 69 6f 6e 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e Data Ascii: 7ffa/! @sentry/browser 7.16.0 (5386ce7) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){const n=Object.prototype.toString;function e(t){switch(n.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2c 73 2c 63 2c 75 2c 61 3b 69 66 28 21 65 7c 7c 21 65 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 22 22 3b 72 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 63 6f 6e 73 74 20 66 3d 6e 26 26 6e 2e 6c 65 6e 67 74 68 3f 6e 2e 66 69 6c 74 65 72 28 28 74 3d 3e 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 29 29 2e 6d 61 70 28 28 74 3d 3e 5b 74 2c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 29 5d 29 29 3a 6e 75 6c 6c 3b 69 66 28 66 26 26 66 2e 6c 65 6e 67 74 68 29 66 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 72 2e 70 75 73 68 28 60 5b 24 7b 74 5b 30 5d 7d 3d 22 24 7b 74 5b 31 5d 7d 22 5d 60 29 7d 29 29 3b 65 6c 73 65 20 69 66 28 65 2e 69 64 26 26 72 2e 70 75 73 68 28 60 23 24 7b 65 2e 69 64 7d 60 29 2c 69 Data Ascii: ,s,c,u,a;if(!e\|\|!e.tagName)return"";r.push(e.tagName.toLowerCase());const f=n&&n.length?n.filter((t=>e.getAttribute(t))).map((t=>[t,e.getAttribute(t)])):null;if(f&&f.length)f.forEach((t=>{r.push(`[${t[0]}="${t[1]}"]`)}));else if(e.id&&r.push(`#${e.id}`),i
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 6f 2c 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 75 62 6c 69 63 4b 65 79 3a 72 7d 29 7d 28 74 29 3a 77 28 74 29 7d 63 6f 6e 73 74 20 53 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 2c 22 6c 6f 67 22 2c 22 61 73 73 65 72 74 22 2c 22 74 72 61 63 65 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 30 3d 3d 3d 6e 7c 7c 74 2e 6c 65 6e 67 74 68 3c 3d 6e 3f 74 3a 60 24 7b 74 2e 73 75 62 73 74 72 28 30 2c 6e 29 7d 2e 2e 2e 60 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 2c 6e 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 6e 3d 30 3b Data Ascii: o,protocol:e,publicKey:r})}(t):w(t)}const S=["debug","info","warn","error","log","assert","trace"];function $(t,n=0){return"string"!=typeof t\|\|0===n\|\|t.length<=n?t:`${t.substr(0,n)}...`}function x(t,n){if(!Array.isArray(t))return"";const e=[];for(let n=0;
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 52 28 74 29 29 3b 69 66 28 65 2e 73 6f 72 74 28 29 2c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 68 61 73 20 6e 6f 20 6b 65 79 73 5d 22 3b 69 66 28 65 5b 30 5d 2e 6c 65 6e 67 74 68 3e 3d 6e 29 72 65 74 75 72 6e 20 24 28 65 5b 30 5d 2c 6e 29 3b 66 6f 72 28 6c 65 74 20 74 3d 65 2e 6c 65 6e 67 74 68 3b 74 3e 30 3b 74 2d 2d 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 73 6c 69 63 65 28 30 2c 74 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 3b 69 66 28 21 28 72 2e 6c 65 6e 67 74 68 3e 6e 29 29 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 72 3a 24 28 72 2c 6e 29 7d 72 65 74 75 72 6e 22 22 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 41 28 74 2c 6e 65 77 20 Data Ascii: onst e=Object.keys(R(t));if(e.sort(),!e.length)return"[object has no keys]";if(e[0].length>=n)return $(e[0],n);for(let t=e.length;t>0;t--){const r=e.slice(0,t).join(", ");if(!(r.length>n))return t===e.length?r:$(r,n)}return""}function N(t){return A(t,new
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 65 77 20 48 65 61 64 65 72 73 2c 6e 65 77 20 52 65 71 75 65 73 74 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 29 2c 6e 65 77 20 52 65 73 70 6f 6e 73 65 2c 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 2f 5e 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 5c 28 5c 29 5c 73 2b 5c 7b 5c 73 2b 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 5c 73 2b 5c 7d 24 2f 2e 74 65 73 74 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 6f 6e 73 74 20 46 3d 7b 7d 2c 42 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 69 66 28 21 42 5b 74 5d 29 73 77 69 74 63 68 28 42 5b 74 5d 3d 21 30 2c 74 29 7b 63 61 73 65 22 63 6f 6e 73 6f 6c 65 22 3a 21 Data Ascii: urn new Headers,new Request("http://www.example.com"),new Response,!0}catch(t){return!1}}function H(t){return t&&/^function fetch\s+\{\s+\[native code\]\s+\}$/.test(t.toString())}const F={},B={};function X(t){if(!B[t])switch(B[t]=!0,t){case"console":!
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 74 72 79 5f 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 5f 68 61 6e 64 6c 65 72 73 5f 5f 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 65 2c 72 29 7d 7d 29 29 29 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 78 68 72 22 3a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 69 6e 20 79 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 70 72 6f 74 6f 74 79 70 65 3b 6b 28 74 2c 22 6f 70 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 6e 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2c 72 3d 6e 5b 31 5d 2c 69 3d 65 2e 5f 5f 73 65 6e 74 72 79 5f 78 68 Data Ascii: try_instrumentation_handlers__)}catch(t){}return t.call(this,n,e,r)}})))}))}();break;case"xhr":!function(){if(!("XMLHttpRequest"in y))return;const t=XMLHttpRequest.prototype;k(t,"open",(function(t){return function(...n){const e=this,r=n[1],i=e.__sentry_xh
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 44 61 74 61 3a 7b 6d 65 74 68 6f 64 3a 4a 28 6e 29 2c 75 72 6c 3a 4b 28 6e 29 7d 2c 73 74 61 72 74 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 3b 72 65 74 75 72 6e 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 7d 29 2c 74 2e 61 70 70 6c 79 28 79 2c 6e 29 2e 74 68 65 6e 28 28 74 3d 3e 28 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 72 65 73 70 6f 6e 73 65 3a 74 7d 29 2c 74 29 29 2c 28 74 3d 3e 7b 74 68 72 6f 77 20 57 28 22 66 65 74 63 68 22 2c 7b 2e 2e 2e 65 2c 65 6e 64 54 69 6d 65 73 74 61 6d 70 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 65 72 72 6f 72 3a 74 7d 29 2c 74 7d 29 29 7d 7d 29 29 7d 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 73 74 6f 72 79 22 3a 21 66 Data Ascii: Data:{method:J(n),url:K(n)},startTimestamp:Date.now()};return W("fetch",{...e}),t.apply(y,n).then((t=>(W("fetch",{...e,endTimestamp:Date.now(),response:t}),t)),(t=>{throw W("fetch",{...e,endTimestamp:Date.now(),error:t}),t}))}}))}();break;case"history":!f
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 47 45 54 22 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 74 3d 5b 5d 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 5b 30 5d 3f 74 5b 30 5d 3a 22 52 65 71 75 65 73 74 22 69 6e 20 79 26 26 68 28 74 5b 30 5d 2c 52 65 71 75 65 73 74 29 3f 74 5b 30 5d 2e 75 72 6c 3a 53 74 72 69 6e 67 28 74 5b 30 5d 29 7d 6c 65 74 20 47 3b 6c 65 74 20 56 2c 51 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 3d 21 31 29 7b 72 65 74 75 72 6e 20 65 3d 3e 7b 69 66 28 21 65 7c 7c 51 3d 3d 3d 65 29 72 65 74 75 72 6e 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6b 65 79 70 72 65 73 73 22 21 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 63 6f 6e 73 74 20 6e 3d 74 2e 74 61 72 67 65 74 3b 69 66 28 21 6e 7c 7c 21 6e 2e 74 61 67 4e 61 Data Ascii: GET"}function K(t=[]){return"string"==typeof t[0]?t[0]:"Request"in y&&h(t[0],Request)?t[0].url:String(t[0])}let G;let V,Q;function Y(t,n=!1){return e=>{if(!e\|\|Q===e)return;if(function(t){if("keypress"!==t.type)return!1;try{const n=t.target;if(!n\|\|!n.tagNa
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 65 3d 65 74 28 74 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6d 65 63 68 61 6e 69 73 6d 3b 69 66 28 65 2e 6d 65 63 68 61 6e 69 73 6d 3d 7b 74 79 70 65 3a 22 67 65 6e 65 72 69 63 22 2c 68 61 6e 64 6c 65 64 3a 21 30 2c 2e 2e 2e 72 2c 2e 2e 2e 6e 7d 2c 6e 26 26 22 64 61 74 61 22 69 6e 20 6e 29 7b 63 6f 6e 73 74 20 74 3d 7b 2e 2e 2e 72 26 26 72 2e 64 61 74 61 2c 2e 2e 2e 6e 2e 64 61 74 61 7d 3b 65 2e 6d 65 63 68 61 6e 69 73 6d 2e 64 61 74 61 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 74 29 7b 69 66 28 74 26 26 74 2e 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 4f 28 74 2c 22 5f 5f 73 65 6e 74 72 79 5f 63 61 70 74 75 72 65 64 5f 5f 22 2c 21 30 29 7d 63 61 74 63 68 28 74 Data Ascii: e=et(t);if(!e)return;const r=e.mechanism;if(e.mechanism={type:"generic",handled:!0,...r,...n},n&&"data"in n){const t={...r&&r.data,...n.data};e.mechanism.data=t}}function ot(t){if(t&&t.__sentry_captured__)return!0;try{O(t,"__sentry_captured__",!0)}catch(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49727	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	622	OUT	GET /web/0af438d079413358.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:35 UTC	1224	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 401404 Connection: close CF-Ray: 8daf6acdb9664772-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 512649 Cache-Control: public, max-age=31556926 ETag: "d5986af74a004bc41eea9f12ab9ae673" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Fri, 25 Oct 2024 01:33:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ScIqWs3EnHgNkWIa/5wH1gz5Zu98kHTYt89MyeeJLMg5sWfF6wf4IOPv940mTWjpKOKNte2/+VGK3o+7shjfH4AZoIIEff9FaicwxfQkulk= x-amz-replication-status: COMPLETED x-amz-request-id: 5037VJ9G28F3QZ8Z x-amz-server-side-encryption: AES256 x-amz-version-id: XMCzz70j.MUEwiaN1uyiYMmlUa19NICL X-Content-Type-Options: nosniff
2024-10-31 00:09:35 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 25 32 42 4c 47 71 57 59 75 64 38 6c 51 30 72 62 37 67 31 47 70 4a 4a 72 78 70 32 42 56 54 64 55 7a 36 75 63 77 4f 68 6e 71 50 32 7a 36 70 42 6d 65 42 72 33 45 71 4a 4f 48 55 47 76 44 47 31 32 54 34 53 47 46 25 32 46 31 39 38 53 48 56 39 70 41 35 50 6e 79 78 35 52 4d 51 4b 38 66 55 42 48 7a 33 66 57 55 69 53 68 73 34 7a 51 55 61 53 32 6d 47 33 75 42 4f 7a 41 45 76 51 4c 7a 72 33 74 52 52 7a 36 68 79 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BLGqWYud8lQ0rb7g1GpJJrxp2BVTdUz6ucwOhnqP2z6pBmeBr3EqJOHUGvDG12T4SGF%2F198SHV9pA5Pnyx5RMQK8fUBHz3fWUiShs4zQUaS2mG3uBOzAEvQLzr3tRRz6hyI%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 30 61 66 34 33 38 64 30 37 39 34 31 33 33 35 38 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 35 33 5d 2c 7b 32 33 32 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 61 63 68 65 3f 74 2e 63 61 63 68 65 3a 63 2c 72 3d 74 26 26 74 2e 73 65 72 69 61 6c 69 7a 65 72 3f 74 2e 73 65 72 69 61 6c Data Ascii: /! For license information please see 0af438d079413358.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[2653],{23278:(e,t,n)=>{"use strict";function r(e,t){var n=t&&t.cache?t.cache:c,r=t&&t.serializer?t.serial
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 74 29 3b 66 6f 72 28 22 48 22 21 3d 75 26 26 22 6b 22 21 3d 75 7c 7c 28 73 3d 30 29 3b 73 2d 2d 20 3e 30 3b 29 6e 2b 3d 22 61 22 3b 66 6f 72 28 3b 6c 2d 2d 20 3e 30 3b 29 6e 3d 75 2b 6e 7d 65 6c 73 65 20 6e 2b 3d 22 4a 22 3d 3d 3d 69 3f 22 48 22 3a 69 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 3d 65 2e 68 6f 75 72 43 79 63 6c 65 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 65 2e 68 6f 75 72 43 79 63 6c 65 73 26 26 65 2e 68 6f 75 72 43 79 63 6c 65 73 2e 6c 65 6e 67 74 68 26 26 28 74 3d 65 2e 68 6f 75 72 43 79 63 6c 65 73 5b 30 5d 29 2c 74 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 68 32 34 22 3a 72 65 74 75 72 6e 22 6b 22 3b 63 61 73 65 22 68 32 33 22 3a 72 65 74 75 72 6e 22 48 22 3b 63 61 73 65 22 68 31 Data Ascii: t);for("H"!=u&&"k"!=u\|\|(s=0);s-- >0;)n+="a";for(;l-- >0;)n=u+n}else n+="J"===i?"H":i}return n}function o(e){var t=e.hourCycle;if(void 0===t&&e.hourCycles&&e.hourCycles.length&&(t=e.hourCycles[0]),t)switch(t){case"h24":return"k";case"h23":return"H";case"h1
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 47 55 4d 45 4e 54 5f 4f 46 46 53 45 54 5f 56 41 4c 55 45 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 31 35 5d 3d 22 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 3d 31 36 5d 3d 22 45 58 50 45 43 54 5f 50 4c 55 52 41 4c 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 22 2c 65 5b 65 2e 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 4d 45 4e 54 3d 31 37 5d 3d 22 45 58 50 45 43 54 5f 53 45 4c 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 53 45 4c 45 43 54 4f 52 5f 46 52 41 47 Data Ascii: GUMENT_OFFSET_VALUE",e[e.EXPECT_SELECT_ARGUMENT_SELECTOR=15]="EXPECT_SELECT_ARGUMENT_SELECTOR",e[e.EXPECT_PLURAL_ARGUMENT_SELECTOR=16]="EXPECT_PLURAL_ARGUMENT_SELECTOR",e[e.EXPECT_SELECT_ARGUMENT_SELECTOR_FRAGMENT=17]="EXPECT_SELECT_ARGUMENT_SELECTOR_FRAG
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 74 3d 28 30 2c 72 2e 70 69 29 28 7b 73 68 6f 75 6c 64 50 61 72 73 65 53 6b 65 6c 65 74 6f 6e 73 3a 21 30 2c 72 65 71 75 69 72 65 73 4f 74 68 65 72 43 6c 61 75 73 65 3a 21 30 7d 2c 74 29 3b 76 61 72 20 6e 3d 6e 65 77 20 6f 2e 5f 28 65 2c 74 29 2e 70 61 72 73 65 28 29 3b 69 66 28 6e 2e 65 72 72 29 7b 76 61 72 20 61 3d 53 79 6e 74 61 78 45 72 72 6f 72 28 69 2e 6f 5b 6e 2e 65 72 72 2e 6b 69 6e 64 5d 29 3b 74 68 72 6f 77 20 61 2e 6c 6f 63 61 74 69 6f 6e 3d 6e 2e 65 72 72 2e 6c 6f 63 61 74 69 6f 6e 2c 61 2e 6f 72 69 67 69 6e 61 6c 4d 65 73 73 61 67 65 3d 6e 2e 65 72 72 2e 6d 65 73 73 61 67 65 2c 61 7d 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 70 74 75 72 65 4c 6f 63 61 74 69 6f 6e 29 7c Data Ascii: ===t&&(t={}),t=(0,r.pi)({shouldParseSkeletons:!0,requiresOtherClause:!0},t);var n=new o._(e,t).parse();if(n.err){var a=SyntaxError(i.o[n.err.kind]);throw a.location=n.err.location,a.originalMessage=n.err.message,a}return(null==t?void 0:t.captureLocation)\|
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 35 32 39 36 2b 28 28 6e 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 6e 25 31 30 32 34 2b 35 36 33 32 30 29 7d 72 65 74 75 72 6e 20 72 7d 2c 78 3d 6d 3f 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 6e 3d 30 2c 72 3d 65 3b 6e 3c 72 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 6e 5d 2c 6f 3d 69 5b 30 5d 2c 61 3d 69 5b 31 5d 3b 74 5b 6f 5d 3d 61 7d 72 65 74 75 72 6e 20 74 7d 2c 4f 3d 67 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 63 6f 64 65 50 6f 69 6e 74 41 74 28 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 21 28 74 3c 30 7c 7c 74 3e 3d 6e 29 29 7b 76 61 72 20 72 2c Data Ascii: 5296+((n-=65536)>>10),n%1024+56320)}return r},x=m?Object.fromEntries:function(e){for(var t={},n=0,r=e;n<r.length;n++){var i=r[n],o=i[0],a=i[1];t[o]=a}return t},O=g?function(e,t){return e.codePointAt(t)}:function(e,t){var n=e.length;if(!(t<0\|\|t>=n)){var r,
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 65 72 72 29 72 65 74 75 72 6e 20 6c 3b 72 2e 70 75 73 68 28 6c 2e 76 61 6c 29 7d 65 6c 73 65 7b 69 66 28 31 32 35 3d 3d 3d 69 26 26 65 3e 30 29 62 72 65 61 6b 3b 69 66 28 33 35 21 3d 3d 69 7c 7c 22 70 6c 75 72 61 6c 22 21 3d 3d 74 26 26 22 73 65 6c 65 63 74 6f 72 64 69 6e 61 6c 22 21 3d 3d 74 29 7b 69 66 28 36 30 3d 3d 3d 69 26 26 21 74 68 69 73 2e 69 67 6e 6f 72 65 54 61 67 26 26 34 37 3d 3d 3d 74 68 69 73 2e 70 65 65 6b 28 29 29 7b 69 66 28 6e 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 6f 2e 6f 2e 55 4e 4d 41 54 43 48 45 44 5f 43 4c 4f 53 49 4e 47 5f 54 41 47 2c 68 28 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 7d 69 66 28 36 30 3d 3d 3d Data Ascii: err)return l;r.push(l.val)}else{if(125===i&&e>0)break;if(35!==i\|\|"plural"!==t&&"selectordinal"!==t){if(60===i&&!this.ignoreTag&&47===this.peek()){if(n)break;return this.error(o.o.UNMATCHED_CLOSING_TAG,h(this.clonePosition(),this.clonePosition()))}if(60===
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 6f 2e 6f 2e 49 4e 56 41 4c 49 44 5f 54 41 47 2c 68 28 6e 2c 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 54 61 67 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 74 68 69 73 2e 6f 66 66 73 65 74 28 29 3b 66 6f 72 28 74 68 69 73 2e 62 75 6d 70 28 29 3b 21 74 68 69 73 2e 69 73 45 4f 46 28 29 26 26 28 34 35 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 68 61 72 28 29 29 7c 7c 34 36 3d 3d 3d 65 7c 7c 65 3e 3d 34 38 26 26 65 3c 3d 35 37 7c 7c 39 35 3d 3d 3d 65 7c 7c 65 3e 3d 39 37 26 26 65 3c 3d 31 32 32 7c 7c 65 3e 3d 36 35 26 26 65 3c 3d 39 30 7c 7c 31 38 33 3d 3d 65 7c 7c 65 3e 3d 31 39 32 26 26 65 3c 3d 32 31 34 Data Ascii: return this.error(o.o.INVALID_TAG,h(n,this.clonePosition()))},e.prototype.parseTagName=function(){var e,t=this.offset();for(this.bump();!this.isEOF()&&(45===(e=this.char())\|\|46===e\|\|e>=48&&e<=57\|\|95===e\|\|e>=97&&e<=122\|\|e>=65&&e<=90\|\|183==e\|\|e>=192&&e<=214
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 21 3d 3d 74 68 69 73 2e 70 65 65 6b 28 29 29 7b 74 68 69 73 2e 62 75 6d 70 28 29 3b 62 72 65 61 6b 7d 74 2e 70 75 73 68 28 33 39 29 2c 74 68 69 73 2e 62 75 6d 70 28 29 7d 65 6c 73 65 20 74 2e 70 75 73 68 28 6e 29 3b 74 68 69 73 2e 62 75 6d 70 28 29 7d 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 74 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 79 50 61 72 73 65 55 6e 71 75 6f 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 69 73 45 4f 46 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 74 68 69 73 2e 63 68 61 72 28 29 3b 72 65 74 75 72 6e 20 36 30 3d 3d 3d 6e 7c 7c 31 32 33 3d 3d 3d 6e 7c 7c 33 35 3d 3d 3d 6e 26 26 28 22 70 6c 75 72 61 6c 22 3d 3d 3d 74 7c 7c 22 73 65 6c 65 63 74 6f 72 Data Ascii: !==this.peek()){this.bump();break}t.push(39),this.bump()}else t.push(n);this.bump()}return k.apply(void 0,t)},e.prototype.tryParseUnquoted=function(e,t){if(this.isEOF())return null;var n=this.char();return 60===n\|\|123===n\|\|35===n&&("plural"===t\|\|"selector
2024-10-31 00:09:35 UTC	1369	IN	Data Raw: 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 73 65 41 72 67 75 6d 65 6e 74 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6c 2c 75 3d 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 2c 66 3d 74 68 69 73 2e 70 61 72 73 65 49 64 65 6e 74 69 66 69 65 72 49 66 50 6f 73 73 69 62 6c 65 28 29 2e 76 61 6c 75 65 2c 64 3d 74 68 69 73 2e 63 6c 6f 6e 65 50 6f 73 69 74 69 6f 6e 28 29 3b 73 77 69 74 63 68 28 66 29 7b 63 61 73 65 22 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 28 6f 2e 6f 2e 45 58 50 45 43 54 5f 41 52 47 55 4d 45 4e 54 5f 54 59 50 45 2c 68 28 75 2c 64 29 29 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 63 61 73 65 22 64 61 74 65 22 3a 63 Data Ascii: lonePosition())}},e.prototype.parseArgumentOptions=function(e,t,n,r){var l,u=this.clonePosition(),f=this.parseIdentifierIfPossible().value,d=this.clonePosition();switch(f){case"":return this.error(o.o.EXPECT_ARGUMENT_TYPE,h(u,d));case"number":case"date":c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49728	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:35 UTC	618	OUT	GET /web/d423b058a335b47b.en.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:36 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:35 GMT Content-Type: text/javascript Content-Length: 421 Connection: close CF-Ray: 8daf6acf798c4798-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 512649 Cache-Control: public, max-age=31556926 ETag: "9facc5c348cf06e3f14be6fbf3671fce" Expires: Fri, 31 Oct 2025 05:58:21 GMT Last-Modified: Fri, 25 Oct 2024 01:33:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: YDvb2a3nKdwRdTKpkkDPDu6IpNf1Zhw5H8cujCPtFErfYICwIJiOAfL4oSQKV2ycFAi9eyYkcFw= x-amz-replication-status: COMPLETED x-amz-request-id: 5037KQJY3HC7H5WA x-amz-server-side-encryption: AES256 x-amz-version-id: H8.8KFWXf9rxR7RH4JWvYAiJYBRYpSey X-Content-Type-Options: nosniff
2024-10-31 00:09:36 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 75 6f 65 69 54 46 5a 47 50 52 4b 35 32 31 70 75 72 41 66 7a 37 51 73 63 49 72 33 73 72 48 45 43 77 69 4a 31 64 78 45 6e 64 71 69 77 68 51 68 71 6d 53 37 53 6b 47 76 51 72 6d 4c 4c 6b 67 39 55 46 4c 4e 49 38 75 55 6f 35 59 59 77 25 32 46 45 47 25 32 46 7a 50 4b 54 6e 49 4b 72 32 44 36 51 72 37 61 4a 42 49 41 74 69 36 78 78 4a 4f 58 62 49 72 34 4a 72 75 4f 6e 6d 4a 54 38 6b 47 44 25 32 42 4c 73 41 59 71 77 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uoeiTFZGPRK521purAfz7QscIr3srHECwiJ1dxEndqiwhQhqmS7SkGvQrmLLkg9UFLNI8uUo5YYw%2FEG%2FzPKTnIKr2D6Qr7aJBIAti6xxJOXbIr4JruOnmJT8kGD%2BLsAYqwg%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:36 UTC	421	IN	Data Raw: 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 20 7c 7c 20 7b 7d 3b 0a 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 5b 27 63 6d 73 67 27 5d 5b 27 61 73 73 65 74 73 27 5d 5b 22 65 6e 22 5d 20 7c 7c 20 7b 7d 2c 20 7b 22 31 35 38 22 3a 7b 22 6a 73 22 3a 5b 22 39 66 34 35 32 39 35 65 32 38 38 66 37 62 33 33 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 31 35 30 35 22 3a 7b 22 6a 73 22 3a 5b 22 65 66 37 32 65 66 39 64 34 39 35 66 33 61 35 36 2e 73 74 72 69 6e 67 73 2e 6a 73 22 5d 2c 22 63 73 73 22 3a 5b 5d 7d 2c 22 Data Ascii: window['cmsg']['assets'] = window['cmsg']['assets'] \|\| {};window['cmsg']['assets']["en"] = Object.assign(window['cmsg']['assets']["en"] \|\| {}, {"158":{"js":["9f45295e288f7b33.strings.js"],"css":[]},"1505":{"js":["ef72ef9d495f3a56.strings.js"],"css":[]},"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49735	34.120.195.249	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	478	OUT	GET /api/1765394/envelope/?sentry_key=a8d71e6acf7a4a609f7c96cced259391&sentry_version=7&sentry_client=sentry.javascript.browser%2F7.16.0 HTTP/1.1 Host: o13855.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:36 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Thu, 31 Oct 2024 00:09:36 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49734	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	622	OUT	GET /web/4bb9c51951d1d716.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:36 UTC	1192	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:36 GMT Content-Type: text/javascript Content-Length: 40118 Connection: close CF-Ray: 8daf6ad14841e976-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 1293027 Cache-Control: public, max-age=31556926 ETag: "309da0150010c8298c2f4c4e4a2a070d" Expires: Fri, 31 Oct 2025 05:58:22 GMT Last-Modified: Wed, 16 Oct 2024 00:52:03 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 17 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: RFXfhFyY7rP8MJIbth1Iar5UcWYtV3FY9rm5AAUgziuzBXbHpf3fTqIMC52G51F+SaUUmdHLbzI= x-amz-replication-status: COMPLETED x-amz-request-id: CTQ5444VJX4CBR4V x-amz-server-side-encryption: AES256 x-amz-version-id: xh9O_Sy.dIsDqZamhzwSEjJbHM_HVDET X-Content-Type-Options: nosniff
2024-10-31 00:09:36 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 4f 43 63 65 77 65 32 35 30 48 25 32 46 31 59 47 79 4b 66 64 6d 57 44 4d 63 79 31 4a 64 78 30 33 68 50 4a 74 76 44 72 58 76 66 61 56 4d 71 32 37 44 6b 50 41 77 6d 44 48 73 33 41 71 62 58 35 70 30 43 47 79 4b 45 52 65 39 61 77 25 32 46 68 4e 50 44 67 6a 79 39 33 57 54 43 4f 70 55 50 74 44 72 58 74 47 49 66 6d 39 70 46 6e 73 76 66 66 64 38 30 68 53 73 34 62 51 25 32 42 77 6c 6f 44 77 42 78 32 33 62 50 6b 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bOCcewe250H%2F1YGyKfdmWDMcy1Jdx03hPJtvDrXvfaVMq27DkPAwmDHs3AqbX5p0CGyKERe9aw%2FhNPDgjy93WTCOpUPtDrXtGIfm9pFnsvffd80hSs4bQ%2BwloDwBx23bPkw%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:36 UTC	1196	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 62 62 39 63 35 31 39 35 31 64 31 64 37 31 36 2e 76 65 6e 64 6f 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 33 36 5d 2c 7b 31 37 32 39 33 31 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 50 50 3a 28 29 3d 3e 5f 2c 6c 58 3a 28 29 3d 3e 79 2c 71 5f 3a 28 29 3d 3e 52 7d 29 3b 76 61 72 20 72 3d 6e 28 31 31 30 35 31 39 29 2c 6f 3d 6e 28 34 37 33 31 32 34 29 2c 61 3d 6e 28 Data Ascii: /! For license information please see 4bb9c51951d1d716.vendor.js.LICENSE.txt /(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5436],{172931:(e,t,n)=>{"use strict";n.d(t,{PP:()=>_,lX:()=>y,q_:()=>R});var r=n(110519),o=n(473124),a=n(
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 28 69 2e 73 74 61 74 65 3d 74 29 29 3b 74 72 79 7b 69 2e 70 61 74 68 6e 61 6d 65 3d 64 65 63 6f 64 65 55 52 49 28 69 2e 70 61 74 68 6e 61 6d 65 29 7d 63 61 74 63 68 28 75 29 7b 74 68 72 6f 77 20 75 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 52 49 45 72 72 6f 72 3f 6e 65 77 20 55 52 49 45 72 72 6f 72 28 27 50 61 74 68 6e 61 6d 65 20 22 27 2b 69 2e 70 61 74 68 6e 61 6d 65 2b 27 22 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 64 65 63 6f 64 65 64 2e 20 54 68 69 73 20 69 73 20 6c 69 6b 65 6c 79 20 63 61 75 73 65 64 20 62 79 20 61 6e 20 69 6e 76 61 6c 69 64 20 70 65 72 63 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 2e 27 29 3a 75 7d 72 65 74 75 72 6e 20 6e 26 26 28 69 2e 6b 65 79 3d 6e 29 2c 61 3f 69 2e 70 61 74 68 6e 61 6d 65 3f 22 2f 22 21 3d 3d 69 2e 70 61 74 68 6e 61 6d Data Ascii: (i.state=t));try{i.pathname=decodeURI(i.pathname)}catch(u){throw u instanceof URIError?new URIError('Pathname "'+i.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):u}return n&&(i.key=n),a?i.pathname?"/"!==i.pathnam
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 43 68 72 6f 6d 65 22 29 7c 7c 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 29 29 26 26 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 26 26 22 70 75 73 68 53 74 61 74 65 22 69 6e 20 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 61 3d 21 28 2d 31 3d 3d 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 22 29 29 2c 73 3d 65 2c 79 3d 73 2e 66 6f 72 63 65 52 65 66 72 65 73 68 2c 62 3d 76 6f 69 64 20 30 21 3d 3d 79 26 26 79 2c 78 3d 73 2e 67 65 74 55 73 65 72 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 53 3d 76 6f 69 64 20 30 3d 3d 3d 78 3f 70 3a 78 2c 45 3d 73 2e 6b 65 79 4c 65 6e 67 74 68 2c 52 3d 76 6f 69 64 20 30 3d 3d 3d 45 3f 36 3a 45 2c 41 Data Ascii: Chrome")\|\|-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,a=!(-1===window.navigator.userAgent.indexOf("Trident")),s=e,y=s.forceRefresh,b=void 0!==y&&y,x=s.getUserConfirmation,S=void 0===x?p:x,E=s.keyLength,R=void 0===E?6:E,A
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 29 2c 69 3d 61 2e 6b 65 79 2c 75 3d 61 2e 73 74 61 74 65 3b 69 66 28 6f 29 69 66 28 6e 2e 70 75 73 68 53 74 61 74 65 28 7b 6b 65 79 3a 69 2c 73 74 61 74 65 3a 75 7d 2c 6e 75 6c 6c 2c 74 29 2c 62 29 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 3b 65 6c 73 65 7b 76 61 72 20 73 3d 4f 2e 69 6e 64 65 78 4f 66 28 42 2e 6c 6f 63 61 74 69 6f 6e 2e 6b 65 79 29 2c 63 3d 4f 2e 73 6c 69 63 65 28 30 2c 2d 31 3d 3d 3d 73 3f 30 3a 73 2b 31 29 3b 63 2e 70 75 73 68 28 61 2e 6b 65 79 29 2c 4f 3d 63 2c 54 28 7b 61 63 74 69 6f 6e 3a 72 2c 6c 6f 63 61 74 69 6f 6e 3a 61 7d 29 7d 65 6c 73 65 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 7d 7d 29 29 7d 2c 72 65 70 6c 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 Data Ascii: ),i=a.key,u=a.state;if(o)if(n.pushState({key:i,state:u},null,t),b)window.location.href=t;else{var s=O.indexOf(B.location.key),c=O.slice(0,-1===s?0:s+1);c.push(a.key),O=c,T({action:r,location:a})}else window.location.href=t}}))},replace:function(e,t){var r
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 6e 64 65 78 4f 66 28 22 46 69 72 65 66 6f 78 22 29 2c 65 29 2c 6f 3d 6e 2e 67 65 74 55 73 65 72 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 70 3a 6f 2c 6d 3d 6e 2e 68 61 73 68 54 79 70 65 2c 77 3d 76 6f 69 64 20 30 3d 3d 3d 6d 3f 22 73 6c 61 73 68 22 3a 6d 2c 67 3d 65 2e 62 61 73 65 6e 61 6d 65 3f 6c 28 75 28 65 2e 62 61 73 65 6e 61 6d 65 29 29 3a 22 22 2c 79 3d 78 5b 77 5d 2c 52 3d 79 2e 65 6e 63 6f 64 65 50 61 74 68 2c 41 3d 79 2e 64 65 63 6f 64 65 50 61 74 68 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 29 7b 76 61 72 20 65 3d 41 28 53 28 29 29 3b 72 65 74 75 72 6e 20 67 26 26 28 65 3d 63 28 65 2c 67 29 29 2c 64 28 65 29 7d 76 61 72 20 43 3d 68 28 29 3b 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 28 30 2c 72 2e 5a 29 28 48 2c 65 Data Ascii: ndexOf("Firefox"),e),o=n.getUserConfirmation,s=void 0===o?p:o,m=n.hashType,w=void 0===m?"slash":m,g=e.basename?l(u(e.basename)):"",y=x[w],R=y.encodePath,A=y.decodePath;function _(){var e=A(S());return g&&(e=c(e,g)),d(e)}var C=h();function P(e){(0,r.Z)(H,e
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 69 6f 6e 3a 72 7d 29 7d 65 6c 73 65 20 50 28 29 7d 7d 29 29 7d 2c 72 65 70 6c 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 52 45 50 4c 41 43 45 22 2c 72 3d 64 28 65 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 48 2e 6c 6f 63 61 74 69 6f 6e 29 3b 43 2e 63 6f 6e 66 69 72 6d 54 72 61 6e 73 69 74 69 6f 6e 54 6f 28 72 2c 6e 2c 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 66 28 72 29 2c 6f 3d 52 28 67 2b 74 29 3b 53 28 29 21 3d 3d 6f 26 26 28 4c 3d 74 2c 45 28 6f 29 29 3b 76 61 72 20 61 3d 4f 2e 69 6e 64 65 78 4f 66 28 66 28 48 2e 6c 6f 63 61 74 69 6f 6e 29 29 3b 2d 31 21 3d 3d 61 26 26 28 4f 5b 61 5d 3d 74 29 2c 50 28 7b 61 63 74 69 6f 6e 3a 6e 2c 6c 6f 63 61 74 69 6f 6e 3a 72 7d 29 7d 7d 29 29 Data Ascii: ion:r})}else P()}}))},replace:function(e,t){var n="REPLACE",r=d(e,void 0,void 0,H.location);C.confirmTransitionTo(r,n,s,(function(e){if(e){var t=f(r),o=R(g+t);S()!==o&&(L=t,E(o));var a=O.indexOf(f(H.location));-1!==a&&(O[a]=t),P({action:n,location:r})}}))
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 62 2e 65 6e 74 72 69 65 73 2e 73 6c 69 63 65 28 30 29 3b 6e 2e 6c 65 6e 67 74 68 3e 74 3f 6e 2e 73 70 6c 69 63 65 28 74 2c 6e 2e 6c 65 6e 67 74 68 2d 74 2c 6f 29 3a 6e 2e 70 75 73 68 28 6f 29 2c 76 28 7b 61 63 74 69 6f 6e 3a 72 2c 6c 6f 63 61 74 69 6f 6e 3a 6f 2c 69 6e 64 65 78 3a 74 2c 65 6e 74 72 69 65 73 3a 6e 7d 29 7d 7d 29 29 7d 2c 72 65 70 6c 61 63 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 22 52 45 50 4c 41 43 45 22 2c 6f 3d 64 28 65 2c 74 2c 70 28 29 2c 62 2e 6c 6f 63 61 74 69 6f 6e 29 3b 6c 2e 63 6f 6e 66 69 72 6d 54 72 61 6e 73 69 74 69 6f 6e 54 6f 28 6f 2c 72 2c 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 62 2e 65 6e 74 72 69 65 73 5b 62 2e 69 6e 64 65 78 5d 3d 6f 2c 76 28 7b 61 63 74 69 6f 6e 3a 72 2c 6c 6f Data Ascii: b.entries.slice(0);n.length>t?n.splice(t,n.length-t,o):n.push(o),v({action:r,location:o,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",o=d(e,t,p(),b.location);l.confirmTransitionTo(o,r,n,(function(e){e&&(b.entries[b.index]=o,v({action:r,lo
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 74 6f 72 61 74 69 6f 6e 3a 28 29 3d 3e 6f 65 2c 63 72 65 61 74 65 42 72 6f 77 73 65 72 52 6f 75 74 65 72 3a 28 29 3d 3e 53 2c 63 72 65 61 74 65 48 61 73 68 52 6f 75 74 65 72 3a 28 29 3d 3e 45 2c 63 72 65 61 74 65 4d 65 6d 6f 72 79 52 6f 75 74 65 72 3a 28 29 3d 3e 75 2e 63 72 65 61 74 65 4d 65 6d 6f 72 79 52 6f 75 74 65 72 2c 63 72 65 61 74 65 50 61 74 68 3a 28 29 3d 3e 73 2e 63 72 65 61 74 65 50 61 74 68 2c 63 72 65 61 74 65 52 6f 75 74 65 73 46 72 6f 6d 43 68 69 6c 64 72 65 6e 3a 28 29 3d 3e 75 2e 63 72 65 61 74 65 52 6f 75 74 65 73 46 72 6f 6d 43 68 69 6c 64 72 65 6e 2c 63 72 65 61 74 65 52 6f 75 74 65 73 46 72 6f 6d 45 6c 65 6d 65 6e 74 73 3a 28 29 3d 3e 75 2e 63 72 65 61 74 65 52 6f 75 74 65 73 46 72 6f 6d 45 6c 65 6d 65 6e 74 73 2c 63 72 65 61 74 65 Data Ascii: toration:()=>oe,createBrowserRouter:()=>S,createHashRouter:()=>E,createMemoryRouter:()=>u.createMemoryRouter,createPath:()=>s.createPath,createRoutesFromChildren:()=>u.createRoutesFromChildren,createRoutesFromElements:()=>u.createRoutesFromElements,create
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 65 52 65 76 61 6c 69 64 61 74 6f 72 2c 75 73 65 52 6f 75 74 65 45 72 72 6f 72 3a 28 29 3d 3e 75 2e 75 73 65 52 6f 75 74 65 45 72 72 6f 72 2c 75 73 65 52 6f 75 74 65 4c 6f 61 64 65 72 44 61 74 61 3a 28 29 3d 3e 75 2e 75 73 65 52 6f 75 74 65 4c 6f 61 64 65 72 44 61 74 61 2c 75 73 65 52 6f 75 74 65 73 3a 28 29 3d 3e 75 2e 75 73 65 52 6f 75 74 65 73 2c 75 73 65 53 65 61 72 63 68 50 61 72 61 6d 73 3a 28 29 3d 3e 57 2c 75 73 65 53 75 62 6d 69 74 3a 28 29 3d 3e 47 7d 29 3b 76 61 72 20 61 3d 6e 28 38 37 35 36 30 34 29 2c 69 3d 6e 28 32 30 34 33 35 38 29 2c 75 3d 6e 28 38 30 35 38 33 30 29 2c 73 3d 6e 28 35 33 32 35 33 30 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: eRevalidator,useRouteError:()=>u.useRouteError,useRouteLoaderData:()=>u.useRouteLoaderData,useRoutes:()=>u.useRoutes,useSearchParams:()=>W,useSubmit:()=>G});var a=n(875604),i=n(204358),u=n(805830),s=n(532530);function c(){return c=Object.assign?Object.ass

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49736	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	639	OUT	GET /web/images/543d7829999d351b301ced5ed3c1f087.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:36 UTC	1258	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:36 GMT Content-Type: image/jpeg Content-Length: 86447 Connection: close CF-Ray: 8daf6ad1c9a14857-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 317238 Cache-Control: public, max-age=31556926 ETag: "543d7829999d351b301ced5ed3c1f087" Expires: Fri, 31 Oct 2025 05:58:22 GMT Last-Modified: Thu, 22 Aug 2024 01:19:33 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=88752, status=webp_bigger content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 23 Aug 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: vxugVH7itnIVKBAzd9UaoV6pTlGmhXaPm1fM8gLsKGtVGc1yFA+92BpjMbXd7Zzqx5wUfdAoTB0= x-amz-replication-status: COMPLETED x-amz-request-id: WDVCWC9VKB4SJY4Z x-amz-server-side-encryption: AES256 x-amz-version-id: EKOyufOsCkQbE7E4KsDHBWDlygNX86zR X-Content-Type-Options: nosniff
2024-10-31 00:09:36 UTC	360	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 59 4e 34 6a 41 79 49 79 72 6a 70 6f 57 75 50 37 46 43 71 45 32 4f 77 33 77 25 32 46 62 76 70 57 73 62 53 76 44 67 51 51 65 69 71 63 71 36 37 56 67 45 63 46 64 32 49 7a 69 63 79 30 77 36 75 64 7a 66 77 25 32 42 25 32 42 33 30 34 50 25 32 42 67 58 72 37 45 34 25 32 42 56 64 66 61 48 37 71 4c 68 47 25 32 46 54 78 76 49 6d 64 67 62 67 6f 34 44 58 72 32 69 41 64 62 35 74 74 4d 73 25 32 46 67 39 25 32 42 4c 76 68 49 74 76 47 4b 38 51 57 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YYN4jAyIyrjpoWuP7FCqE2Ow3w%2FbvpWsbSvDgQQeiqcq67VgEcFd2Izicy0w6udzfw%2B%2B304P%2BgXr7E4%2BVdfaH7qLhG%2FTxvImdgbgo4DXr2iAdb5ttMs%2Fg9%2BLvhItvGK8QWU%3D"}],"group":"cf-nel","max_a
2024-10-31 00:09:36 UTC	1120	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 02 ff db 00 84 00 0e 09 0a 0c 0a 09 0e 0c 0b 0c 0f 0f 0e 10 15 22 16 15 13 13 15 2a 1e 20 19 22 32 2c 34 34 31 2c 30 2f 37 3e 4f 43 37 3a 4b 3b 2f 30 45 5e 46 4b 52 54 59 59 59 35 42 61 68 60 56 67 4f 57 59 55 01 0f 0f 0f 15 12 15 28 16 16 28 55 39 30 39 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 33 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e8 60 46 8d d2 5d d3 5e 70 5d 4b Data Ascii: JFIF"* "2,441,0/7>OC7:K;/0E^FKRTYYY5Bah`VgOWYU((U909UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU8"3`F]^p]K
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 40 dc 3b a8 c4 05 d9 46 2d 9f 43 0b bb 93 06 70 00 00 00 00 00 25 29 cb 54 34 fa 5e 30 89 85 67 17 d7 c2 2a 66 38 41 94 e2 c8 69 96 10 d3 30 20 f9 34 22 92 94 26 4b 6e 34 2a ad 6a 8e 61 67 59 67 79 f4 a9 90 e6 00 00 24 14 24 08 f2 3c 55 51 3f c8 d6 bd d9 cb 4f 8e a4 bc 94 27 c1 62 3d 14 00 00 40 e5 9d 4f 96 19 69 2d 4c 64 dd fd 2d ee 99 f4 8b 5a bb 4c fa 00 1e b0 c3 f1 40 6d 42 9b 71 b0 71 b5 0e 24 48 fc a8 73 05 00 31 88 db e3 d3 cf 21 df d5 e9 95 7c e8 73 33 df a8 5b d3 da 11 64 d7 d8 2e be ea 9e da 3d 71 9f 3d 33 f3 98 98 bb 35 c0 7a f0 69 c6 df 8b 8f eb 86 3b ad 0d a3 68 5b 4e b4 4e a7 b5 cf 7a b8 76 1b be 24 e4 b5 79 4b cb 01 2a 2c cf a7 84 fb 58 3a 2e bc aa 60 e8 db 9f 68 ac 5f 54 a4 5a d3 cf e1 ec b0 69 e7 39 76 8a dc e8 d3 6d 3a 89 83 4c 58 c6 19 Data Ascii: @;F-Cp%)T4^0gf8Ai0 4"&Kn4jagYgy$$<UQ?O'b=@Oi-Ld-ZL@mBqq$Hs1!\|s3[d.=q=35zi;h[NNzv$yK*,X:.`h_TZi9vm:LX
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: e4 03 d4 f8 68 4b dc a6 82 86 fa f6 e9 93 21 cc 57 8c be 3d 86 a9 49 7b 15 33 3d 22 12 82 1b 92 7c 21 f9 34 9f 60 46 b6 f5 51 09 9e d4 46 4c a0 87 21 e0 00 4c 0e 59 d4 f9 61 9a b2 ad 9a ca ce d7 3d 75 a6 1d 1a ce b2 cf 3e a1 2a 42 9b 40 91 49 00 04 8a 12 0e 09 05 3f 19 d1 f1 2a 1a c4 6d f1 4c b0 8d 3a ce 98 30 91 fc fa 35 3a 43 4e d3 34 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 30 69 c3 27 90 ea d8 63 9f 4e 8b 2b e9 e5 63 79 41 3f e8 61 74 d5 73 18 5d 9b d4 4e 7a bb 45 53 99 2c 5f ce 3b 4d 23 54 8d cb 47 6d 88 d2 72 f4 db 3d 11 ce 1e c7 d2 d2 5e 4a 23 a5 33 13 1d 22 5a 52 5a d5 e2 36 f8 86 5a ee 83 cf ba 0b 99 ca a9 f9 82 7a 2b a4 69 0d 3a 87 c5 44 75 91 d6 fc 02 54 55 d9 12 a2 bb 06 9e 65 63 ed 24 2c 5c 82 e9 Data Ascii: hK!W=I{3="\|!4`FQFL!LYa=u>B@I?mL:05:CN4i0i0i0i0i0i0i0i0i0i0i'cN+cyA?ats]NzES,_;M#TGmr=^J#3"ZRZ6Zz+i:DuTUec$,\
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: bf 28 02 fc a0 0b f2 80 2f ca 00 bf 28 3c 34 05 00 5f 94 01 7e 9a 24 96 1c bb 5b 81 20 5c 51 d9 b9 ac 2e 73 77 9a 63 d0 e7 d7 58 e7 da 23 d6 94 e0 c0 3e 30 91 d4 a0 16 e3 0a 1f 18 07 c6 3d 1f 52 16 35 8f d8 62 d9 64 51 19 ad 39 84 30 fe 7d 5d 3b 4d 98 d3 b4 50 00 00 00 00 00 00 00 00 00 00 00 00 00 35 86 dc e1 8c 04 a8 b2 be 9e 53 a4 43 57 d5 e6 98 98 a6 67 d5 18 25 11 4a 3a c0 50 71 b9 3e d5 c5 fd 75 97 e7 7e 9a 92 a4 71 ee 94 09 c0 a1 20 ea d9 5e 87 44 ab a1 57 88 db e2 19 6b ba 0f 3e e8 2e 64 62 b6 b8 62 94 f0 e7 48 b5 aa b5 e2 de 8e 86 f6 bf ab da e9 cb 93 e7 93 1d 43 38 20 57 48 67 ba 19 f0 f6 a5 a5 09 b9 54 fa e9 26 c3 6b cd f7 f0 bf a2 bd a2 b7 2f bb a4 b9 2c 2b 1f ae cb aa 63 b5 8b 74 da ea 72 db 09 ce e5 42 75 e0 84 dc 28 d9 77 68 a0 48 a7 d3 39 Data Ascii: (/(<4_~$[ \Q.swcX#>0=R5bdQ90}];MP5SCWg%J:Pq>u~q ^DWk>.dbbHC8 WHgT&k/,+ctrBu(whH9
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 93 33 b7 b9 62 fe ef 0f a0 35 13 a9 6e 06 2b 2c eb 0a 5f 17 e1 aa 44 b4 61 bc 51 c6 f0 38 b8 69 85 87 b0 16 4e 54 57 37 97 9b 51 af 90 e0 5b 45 ac e8 99 b3 81 38 34 7b e4 48 db 89 10 7a ab 22 24 b8 95 ee 47 45 9d d1 5e dd 1e 1c c8 8a 8e fb 2f 13 5f 43 a6 2f 1f b4 ce e5 ab 3a 1a e5 61 d5 aa 73 32 4e d7 f5 30 57 e7 b9 f6 f4 6d 74 71 b3 6b 05 de 7d 75 52 a0 db 75 72 d3 57 dd 40 c7 b9 8b 48 f6 35 91 cc 3a 7f 30 e9 e1 ca 3e c4 9d 33 5d fd 15 fb 3e 93 6b 57 69 9e e0 0f 40 40 b4 a0 04 a7 c1 d5 b0 e0 e8 80 58 95 00 03 18 8d be 21 38 38 f2 1a d3 06 25 b0 fe 7a f4 dd 3e 63 4e d1 40 04 67 ea c7 95 4b e1 68 aa 79 25 97 90 50 4f 55 64 a1 f6 95 58 5a 4e a5 f0 be 28 94 5e aa 1c c0 00 6b 0d b9 c3 18 0d 05 16 d7 aa 35 36 f1 1c c6 df 18 4c a4 91 82 48 c1 23 3b a7 63 49 e6 Data Ascii: 3b5n+,_DaQ8iNTW7Q[E84{Hz"$GE^/_C/:as2N0Wmtqk}uRurW@H5:0>3]>kWi@@X!88%z>cN@gKhy%POUdXZN(^k56LH#;cI
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 36 f9 1a 8f 7c f2 3d f5 31 58 2c 4a f5 16 04 3f 49 69 8c d1 61 ec 59 43 58 7d c6 17 58 c2 34 eb 3d b0 3a c3 a9 d6 d6 59 d6 71 6b 0f 6f 86 da fc 7e c7 e0 cb 89 f3 fb 6b 6b ec e0 77 65 5d 1a da b3 a7 86 3c c8 32 75 89 ee c1 46 49 30 43 5d 05 bb 65 08 2f de ce e6 f7 11 1b 53 53 d3 11 74 11 ef 79 bd 95 63 02 45 53 99 9d 16 6a f4 cb a9 0b ea cf 57 3a 24 7d 32 61 8b fb 12 b2 06 b1 c3 39 e5 b5 00 88 d2 68 8b 2c fb 70 c5 29 2e 13 34 b8 eb 63 52 ba bd 21 2a c5 4a 29 6b b5 2d 19 24 68 a9 4d 30 d2 ff 00 3d d8 e2 52 a9 a4 2c 45 3d f0 5d 11 06 56 7f a3 29 e5 2a be 97 35 c2 a8 d1 4d 3b 99 6f 76 6a 0c d9 4d 22 73 ac 1a eb 8c 06 cf 25 ad 55 ad 54 69 cc 2d 6a ad 6f 3e 95 2a 2c a0 00 1a 75 a3 2f 49 67 96 ca ae 64 d4 dc 61 d4 ba eb 1a bf 66 6b 8b 8f 08 2e c6 85 af 83 0d bb Data Ascii: 6\|=1X,J?IiaYCX}X4=:Yqko~kkwe]<2uFI0C]e/SStycESjW:$}2a9h,p).4cR!J)k-$hM0=R,E=]V)5M;ovjM"s%UTi-jo>*,u/Igdafk.
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: ed ce 4c 9a d3 52 d9 97 f5 8a a7 b7 b2 69 ed bd 8b 35 0b e8 c9 a8 d3 19 f4 c3 0a 64 69 a5 31 ef 8a 5b 4f bc b3 d9 e3 76 99 eb 77 45 7b 45 96 bc be ee 92 d9 56 d5 97 10 32 fa 30 d5 ea af 19 5a dc b6 9f cf 2f 7c 65 57 c7 05 ab 02 2e 23 56 05 c5 52 ac c2 b8 b1 08 d6 0c a8 30 fb 5c b6 8e 6e ce 85 1d 71 42 f5 c7 a5 85 65 d6 7b 92 d8 e8 dc fb a2 e6 b6 63 c8 da 24 a5 2f 8c 35 31 04 46 a4 a4 7e ce 1c fc c0 e0 36 38 0d 8a 6c 06 59 26 10 96 4a 54 77 85 47 9a d1 cd 73 ba 9c 89 d3 6e b2 d7 e4 a1 84 92 55 11 44 9f 62 83 a3 00 f8 c0 49 18 49 25 31 fd 1f 7e 0a 8b 12 10 4d 21 04 d2 10 73 63 2a 67 a6 b0 c9 90 d7 2b 1e 1a e3 22 1a e3 22 1a c5 64 43 60 63 ca f3 66 ee 1c d6 37 46 17 d3 72 62 bd 56 d0 c6 93 5b 0a ec f3 49 73 59 8a da d4 f4 c9 51 65 00 00 95 24 85 4b 75 4f f3 Data Ascii: LRi5di1[OvwE{EV20Z/\|eW.#VR0\nqBe{c$/51F~68lY&JTwGsnUDbII%1~M!sc*g+""dC`cf7FrbV[IsYQe$KuO
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: d1 ce 70 1d 16 8b 2d 18 77 65 83 dc 1d 0d f8 6e 8f 91 d2 4a 4c 76 c6 6b 5c a7 2d ae 32 97 a5 d1 0c 26 10 50 58 a6 10 31 45 6d 53 1a b6 0a 68 91 c0 6c 09 45 c9 6b 72 55 9c be a9 ca fa a5 e5 67 1a 4c 68 b4 8d 13 4e 8c 78 a9 03 1e 26 40 c3 82 c0 af 00 03 cf 7c 9f 58 5b 0a 9d 25 1e 7b 59 80 57 92 52 a4 de 7c f3 23 ae c8 cd ed 6c eb 2c f8 be c8 04 d8 00 b5 24 bc 94 ec 71 94 a4 32 e3 94 12 af 0a 6d c6 fd d9 27 83 75 89 52 90 95 26 35 00 39 b8 a4 fe 9f f2 e0 00 00 00 00 3d 54 a4 5c e1 d8 e5 8a 5c f8 df 6f d0 30 d4 00 00 00 f0 f6 0c d8 35 96 53 45 9b d2 76 fc 3e 8b 55 6b 55 96 fe 3d 01 51 da 5c 53 dc 56 35 59 8d 06 36 f8 fd 91 57 6d 71 b5 b3 83 63 59 51 61 f7 f8 35 d6 5c 45 d3 67 53 e7 c2 5f c6 ec bd 99 59 67 f5 b9 14 06 f0 00 40 e6 1d 3f 98 10 fa 6f 33 e9 c8 b1 Data Ascii: p-wenJLvk\-2&PX1EmShlEkrUgLhNx&@\|X[%{YWR\|#l,$q2m'uR&59=T\\o05SEv>UkU=Q\SV5Y6WmqcYQa5\EgS_Yg@?o3
2024-10-31 00:09:36 UTC	1369	IN	Data Raw: 7f 1f d1 30 56 f7 a9 f2 ce a6 ce ca 24 b8 f1 ad 4b 16 c8 cf 7a a2 d9 52 a5 2e 3c 55 62 6e 0f 66 1c e4 b9 71 eb 8d aa b2 2a 6d a8 a7 58 ce 41 95 97 6d fc 98 d2 7a 3e 63 60 79 ec 94 a9 37 9f 3c c8 eb b2 33 7b 5b 3a cb 3e 2f b2 3e c4 94 d9 38 d7 bd 5f 29 50 26 c7 cc c4 6b 51 a6 61 8d 24 6e 9f 4a 9d 15 3a a9 ef e8 af e6 a4 47 b6 54 73 53 fb 6a 8c f4 af 26 1e 74 40 4b ec 65 d9 9e 6a ca 27 db fc d4 74 ca 34 34 87 4f 3c 4a d4 e3 d9 53 e3 c8 f9 bf 5d f6 a2 a7 93 bd 20 46 a2 17 0f d9 85 4b 22 07 de fc f0 07 47 30 b4 3e 11 a5 c4 f3 d8 7b 0c 7e bf e6 74 74 b6 fd 83 8e f5 cc 3e 73 fd 3b 1b 3a 0b 8d fe 7d 05 06 87 37 d3 c4 b8 ed b1 3e a9 13 5f 95 3b f3 1a cf 76 d1 25 31 f4 45 2d 3a fc ed 6e 9f 31 a7 ac 14 02 80 08 1c c3 a7 f3 02 27 4f e6 1d 3c b5 05 21 22 92 94 9e 88 Data Ascii: 0V$KzR.<Ubnfq*mXAmz>c`y7<3{[:>/>8_)P&kQa$nJ:GTsSj&t@Kej't44O<JS] FK"G0>{~tt>s;:}7>_;v%1E-:n1'O<!"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49741	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	615	OUT	GET /web/306ff5855d28408f.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1191	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:36 GMT Content-Type: text/javascript Content-Length: 748039 Connection: close CF-Ray: 8daf6ad6099ee556-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75159 Cache-Control: public, max-age=31556926 ETag: "e32cdbd7195f96f95945c527fc3f691a" Expires: Fri, 31 Oct 2025 05:58:22 GMT Last-Modified: Wed, 30 Oct 2024 03:11:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: oj1nGLZH5BTn9Zipymffaawurw/3Sl9N0raDDLRw+05cD7OE0WuJWOWY/AxTyJUKlqg9dYTg+YM= x-amz-replication-status: COMPLETED x-amz-request-id: WYJGRMW0S6M31EBX x-amz-server-side-encryption: AES256 x-amz-version-id: TqNKBQpCg.2RDFP_5yfsaQrRRNi_IhHR X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 31 75 37 62 6f 55 51 30 34 34 68 51 7a 32 62 41 7a 75 64 4c 4a 55 5a 65 45 53 32 4a 6c 70 53 44 58 33 77 75 79 61 59 64 6f 32 71 4e 30 4f 33 39 79 37 75 49 54 6d 34 59 57 4e 38 38 46 71 47 57 49 73 25 32 46 69 75 52 78 64 52 74 52 69 68 78 4d 6d 6d 41 55 49 65 33 56 4f 65 46 79 54 5a 6a 6f 78 54 56 6a 79 69 4c 79 6f 6e 64 4d 72 31 58 6b 37 59 25 32 42 30 4b 43 4d 58 50 51 79 44 52 52 4d 4a 5a 31 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=71u7boUQ044hQz2bAzudLJUZeES2JlpSDX3wuyaYdo2qN0O39y7uITm4YWN88FqGWIs%2FiuRxdRtRihxMmmAUIe3VOeFyTZjoxTVjyiLyondMr1Xk7Y%2B0KCMXPQyDRRMJZ10%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 38 39 2c 33 38 31 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 38 31 33 31 31 30 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1389,3817],{/***/ 813110:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;self._fe4d99ebe0d2d259
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 62 2c 69 62 2c 6b 62 2c 6d 62 2c 64 62 2c 6b 61 61 2c 6c 61 61 2c 70 62 2c 72 62 2c 78 62 2c 6d 61 61 2c 47 62 2c 48 62 2c 49 62 2c 4a 62 2c 4c 62 2c 46 62 2c 72 61 61 2c 57 62 2c 59 62 2c 58 62 2c 75 61 61 2c 5a 62 2c 64 63 2c 63 63 2c 76 61 61 2c 66 63 2c 6c 63 2c 6a 63 2c 41 61 61 2c 70 63 2c 42 61 61 2c 6e 63 2c 77 63 2c 79 63 2c 7a 63 2c 42 63 2c 49 61 61 2c 48 63 2c 4a 63 2c 4c 63 2c 4a 61 61 2c 4e 61 61 2c 4d 61 61 2c 4d 63 2c 4b 61 61 2c 52 63 2c 4f 61 61 2c 50 61 61 2c 53 61 61 2c 57 61 61 2c 56 61 61 2c 58 61 61 2c 54 61 61 2c 5a 61 61 2c 57 63 2c 24 61 61 2c 61 62 61 2c 5a 63 2c 61 64 2c 62 64 2c 62 62 61 2c 63 62 61 2c 64 62 61 2c 65 62 61 2c 66 62 61 2c 67 62 61 2c 68 62 61 2c 63 64 2c 69 62 61 2c 6a 62 61 2c 6d 62 61 2c 6c 62 61 2c 6e 62 61 Data Ascii: b,ib,kb,mb,db,kaa,laa,pb,rb,xb,maa,Gb,Hb,Ib,Jb,Lb,Fb,raa,Wb,Yb,Xb,uaa,Zb,dc,cc,vaa,fc,lc,jc,Aaa,pc,Baa,nc,wc,yc,zc,Bc,Iaa,Hc,Jc,Lc,Jaa,Naa,Maa,Mc,Kaa,Rc,Oaa,Paa,Saa,Waa,Vaa,Xaa,Taa,Zaa,Wc,$aa,aba,Zc,ad,bd,bba,cba,dba,eba,fba,gba,hba,cd,iba,jba,mba,lba,nba
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 2c 56 68 61 2c 57 68 61 2c 79 6b 2c 58 68 61 2c 55 68 61 2c 78 6b 2c 59 68 61 2c 5a 68 61 2c 41 6b 2c 24 68 61 2c 61 69 61 2c 45 6b 2c 63 69 61 2c 49 6b 2c 4c 6b 2c 0a 66 69 61 2c 67 69 61 2c 6d 69 61 2c 6e 69 61 2c 62 6a 61 2c 64 6a 61 2c 65 6a 61 2c 66 6a 61 2c 67 6a 61 2c 64 6c 2c 65 6c 2c 69 6a 61 2c 6a 6a 61 2c 6b 6a 61 2c 68 6a 61 2c 70 6a 61 2c 73 6a 61 2c 74 6a 61 2c 6a 6c 2c 75 6a 61 2c 7a 6a 61 2c 4b 6c 2c 41 6a 61 2c 44 6a 61 2c 47 6a 61 2c 48 6a 61 2c 50 6c 2c 49 6a 61 2c 4f 6a 61 2c 50 6a 61 2c 51 6a 61 2c 52 6a 61 2c 56 6a 61 2c 54 6c 2c 55 6c 2c 56 6c 2c 59 6a 61 2c 5a 6a 61 2c 58 6c 2c 62 6b 61 2c 24 6a 61 2c 63 6b 61 2c 5a 6c 2c 61 6d 2c 66 6b 61 2c 63 6d 2c 69 6b 61 2c 71 6d 2c 6a 6b 61 2c 72 6d 2c 6f 6b 61 2c 73 6b 61 2c 7a 6b 61 2c 74 Data Ascii: ,Vha,Wha,yk,Xha,Uha,xk,Yha,Zha,Ak,$ha,aia,Ek,cia,Ik,Lk,fia,gia,mia,nia,bja,dja,eja,fja,gja,dl,el,ija,jja,kja,hja,pja,sja,tja,jl,uja,zja,Kl,Aja,Dja,Gja,Hja,Pl,Ija,Oja,Pja,Qja,Rja,Vja,Tl,Ul,Vl,Yja,Zja,Xl,bka,$ja,cka,Zl,am,fka,cm,ika,qm,jka,rm,oka,ska,zka,t
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 63 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 76 6f 69 64 20 30 3b 69 66 28 61 26 26 2f 69 50 61 64 Data Ascii: .");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&baa(c,a,{configurable:!0,writable:!0,value:b})}};caa=function(){var a="object"===typeof navigator?navigator.userAgent:void 0;if(a&&/iPad
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6f 74 73 74 72 61 70 22 29 3b 41 61 5b 61 5d 3d 7b 2e 2e 2e 65 5b 61 5d 7d 3b 63 7c 7c 64 65 6c 65 74 65 20 65 5b 61 5d 7d 72 65 74 75 72 6e 20 64 61 61 28 61 2c 62 2c 64 26 26 61 20 69 6e 20 42 61 3f 42 61 5b 61 5d 3a 76 6f 69 64 20 30 29 7d 3b 0a 64 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 20 69 6e 20 44 61 26 26 6e 75 6c 6c 3d 3d 63 26 26 6e 75 6c 6c 21 3d 44 61 5b 61 5d 29 72 65 74 75 72 6e 20 44 61 5b 61 5d 3b 6e 75 6c 6c 21 3d 63 26 26 30 3c 63 2e 73 69 7a 65 26 26 63 2e 66 6f 72 45 61 63 68 28 28 64 2c 65 29 3d 3e 7b 61 3a 7b 65 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 6c 65 74 20 66 3d 41 61 5b 61 5d 2c 67 3d 65 2e 73 68 69 66 74 28 29 3b 66 6f 72 28 3b 65 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 45 61 28 67 2c 66 29 29 Data Ascii: otstrap");Aa[a]={...e[a]};c\|\|delete e[a]}return daa(a,b,d&&a in Ba?Ba[a]:void 0)};daa=function(a,b,c){if(a in Da&&null==c&&null!=Da[a])return Da[a];null!=c&&0<c.size&&c.forEach((d,e)=>{a:{e=e.split(".");let f=Aa[a],g=e.shift();for(;e.length;){if(Ea(g,f))
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 60 75 6e 65 78 70 65 63 74 65 64 20 68 69 6e 74 20 74 79 70 65 3a 20 24 7b 62 7d 60 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 62 29 3b 7d 7d 3b 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 3d 3d 3d 62 5b 61 5d 7c 7c 21 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 61 20 69 6e 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 3f 21 30 3a 21 31 7d 3b 68 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4e 61 28 61 29 7d 3b 69 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4f 61 28 61 29 7d 3b 6a 61 61 3d 66 75 6e 63 74 Data Ascii: Error(`unexpected hint type: ${b}`);default:throw new n(b);}};Ea=function(a,b){return Object.getPrototypeOf(b)===b[a]\|\|!b.hasOwnProperty(a)&&a in Object.getPrototypeOf(b)?!0:!1};haa=function(a){return new Na(a)};iaa=function(a){return new Oa(a)};jaa=funct
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 64 2c 63 63 3a 65 2c 6d 69 3a 66 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 33 2c 63 63 3a 65 2c 6f 62 6a 3a 66 2c 4e 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 76 3d 5f 5f 63 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 63 63 3a 65 2c 6d 69 3a 66 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 34 2c 63 63 3a 65 2c 6f 62 6a 3a 66 2c 4e 62 3a 22 6f 62 6a 65 63 74 22 7d 7d 3b 79 3d 5f 5f 63 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 7b 74 61 67 3a 64 2c 63 63 3a 65 2c 6d 69 3a 66 2c 4d 32 3a 67 7d 3d 5a 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 7b 74 61 67 3a 64 2c 4e 67 3a 32 2c 63 63 3a 65 2c 6f 62 Data Ascii: d,cc:e,mi:f}=Za(a,b,c);return{tag:d,Ng:3,cc:e,obj:f,Nb:"object"}};v=__c.v=function(a,b,c){const {tag:d,cc:e,mi:f}=Za(a,b,c);return{tag:d,Ng:4,cc:e,obj:f,Nb:"object"}};y=__c.y=function(a,b,c){const {tag:d,cc:e,mi:f,M2:g}=Za(a,b,c);return{tag:d,Ng:2,cc:e,ob
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 32 3a 69 66 28 6e 75 6c 6c 3d 3d 75 26 26 6e 75 6c 6c 21 3d 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 7b 68 5b 7a 5d 3d 67 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 62 72 65 61 6b 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 3d 3d 75 7c 7c 21 64 62 28 75 2c 67 2e 4e 62 29 29 74 68 72 6f 77 20 66 62 28 7b 65 68 3a 6c 2c 49 6b 3a 6d 7d 2c 75 2c 67 2e 4e 62 2c 0a 66 29 3b 66 2e 70 75 73 68 28 71 29 3b 68 5b 7a 5d 3d 64 2e 5a 47 28 75 2c 41 2c 66 29 3b 66 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 76 61 72 20 77 3d 41 2e 43 4a 3b 71 3d 41 2e 58 54 3b 69 66 28 6e 75 6c 6c 3d 3d 75 26 26 67 2e 68 78 29 7b 68 5b 7a 5d 3d 67 2e 76 61 6c 75 65 3b 62 72 65 61 6b 7d 69 66 28 75 3d 3d 3d 77 29 7b 68 5b 7a 5d 3d 67 2e 76 61 Data Ascii: reak;case 2:if(null==u&&null!=g.defaultValue){h[z]=g.defaultValue;break}else if(null==u\|\|!db(u,g.Nb))throw fb({eh:l,Ik:m},u,g.Nb,f);f.push(q);h[z]=d.ZG(u,A,f);f.pop();break;case 1:var w=A.CJ;q=A.XT;if(null==u&&g.hx){h[z]=g.value;break}if(u===w){h[z]=g.va
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 67 2e 63 6f 6e 66 69 67 3b 63 6f 6e 73 74 20 68 3d 67 2e 6e 61 6d 65 2c 6c 3d 65 5b 68 5d 3b 73 77 69 74 63 68 28 66 2e 4e 67 29 7b 63 61 73 65 20 31 3a 74 68 69 73 5b 68 5d 3d 66 2e 76 61 6c 75 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 66 2e 64 65 66 61 75 6c 74 3a 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 5b 68 5d 3d 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 5b 5d 3a 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 74 68 69 73 5b 68 5d 3d 6e 75 6c 6c 3d 3d 6c 3f 6e 65 77 20 4d 61 70 3a 6c 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 66 29 3b 7d 7d 7d 7d 64 2e 69 6e 69 74 3d 63 3b 64 2e 50 45 3d 62 2e 41 61 Data Ascii: g.config;const h=g.name,l=e[h];switch(f.Ng){case 1:this[h]=f.value;break;case 2:this[h]=null==l?f.default:l;break;case 3:this[h]=l;break;case 4:this[h]=null==l?[]:l;break;case 5:this[h]=null==l?new Map:l;break;default:throw new n(f);}}}}d.init=c;d.PE=b.Aa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49747	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	806	OUT	GET /web/59362c63d8046de9.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1180	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/css Content-Length: 170 Connection: close CF-Ray: 8daf6ad63e422e1e-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 630683 Cache-Control: public, max-age=31556926 ETag: "7d34c21f2b5b249426723b011d2fb962" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Tue, 17 Sep 2024 02:58:35 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 18 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: gaMoMXZ1aHdwBLGocelfM517wLHZt5sCrxYg8wtkszz2T6vzf/MEnU4dxYXawDZXF0AC3NFhpl8= x-amz-replication-status: PENDING x-amz-request-id: BWW6G7CT072XT2T4 x-amz-server-side-encryption: AES256 x-amz-version-id: m8Q5rjmqKJP3mHPRTHzCTKXF04PWpW13 X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 67 63 74 68 67 34 54 58 68 44 4c 69 76 6c 33 6e 4f 68 7a 25 32 42 32 6c 62 75 77 73 52 75 46 38 32 30 39 73 49 4c 4b 50 49 73 4a 61 49 46 72 37 30 49 36 63 53 75 67 30 69 31 54 4e 63 7a 36 72 43 45 72 74 50 59 63 57 35 65 6b 4f 41 61 65 43 25 32 42 43 47 56 25 32 46 56 35 44 36 50 46 74 7a 74 59 6f 72 56 5a 4e 6d 6f 6a 4c 6d 71 72 35 54 77 44 71 6e 50 48 77 65 63 6c 6e 59 35 48 36 32 4c 25 32 42 6b 79 38 31 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ogcthg4TXhDLivl3nOhz%2B2lbuwsRuF8209sILKPIsJaIFr70I6cSug0i1TNcz6rCErtPYcW5ekOAaeC%2BCGV%2FV5D6PFtztYorVZNmojLmqr5TwDqnPHweclnY5H62L%2Bky81s%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:37 UTC	170	IN	Data Raw: 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 7a 4c 43 4a 7a 62 33 56 79 59 32 56 7a 49 6a 70 62 58 53 77 69 62 6d 46 74 5a 58 4d 69 4f 6c 74 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 69 49 73 49 6d 5a 70 62 47 55 69 4f 69 49 34 4e 47 56 6a 4d 6a 4d 78 5a 6a 6b 31 4d 6d 59 30 5a 47 4a 6d 4c 6d 78 30 63 69 35 6a 63 33 4d 69 66 51 3d 3d 20 2a 2f Data Ascii: /# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJzb3VyY2VzIjpbXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IiIsImZpbGUiOiI4NGVjMjMxZjk1MmY0ZGJmLmx0ci5jc3MifQ== /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49742	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	806	OUT	GET /web/907eef8a4baa25c2.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1183	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/css Content-Length: 3141 Connection: close CF-Ray: 8daf6ad64a753590-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 230476 Cache-Control: public, max-age=31556926 ETag: "072851e086e0d89ac5a86d24977aa425" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 16 Oct 2024 00:52:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 17 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: SE45sHdtrKLflKKG359xIs6u9O9xzjX7OgatIpMh3J71dgiWE1zj0Eim/mNXW3f3RgMD1IGipEg= x-amz-replication-status: COMPLETED x-amz-request-id: 4FWTM3DADQ0XZD02 x-amz-server-side-encryption: AES256 x-amz-version-id: O_krcJkowzGygTDkNo.sHmCbdQyhbd3f X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 6d 41 43 44 63 35 4c 6b 5a 46 62 43 5a 42 71 46 67 35 45 30 64 4e 56 58 53 7a 36 68 6d 4d 5a 37 5a 4d 73 6e 46 35 7a 58 75 43 37 69 4d 5a 7a 25 32 42 72 46 78 55 68 68 39 4a 6b 55 33 65 66 50 7a 4f 68 44 67 76 71 79 42 67 47 32 32 47 48 75 50 77 62 55 58 79 50 32 79 7a 32 55 66 50 46 25 32 46 33 42 6e 44 7a 6f 51 33 62 77 77 4c 70 4f 6d 44 69 31 31 34 79 73 4b 33 67 61 50 41 50 61 52 4d 6d 69 74 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=omACDc5LkZFbCZBqFg5E0dNVXSz6hmMZ7ZMsnF5zXuC7iMZz%2BrFxUhh9JkU3efPzOhDgvqyBgG22GHuPwbUXyP2yz2UfPF%2F3BnDzoQ3bwwLpOmDi114ysK3gaPAPaRMmitw%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:37 UTC	1207	IN	Data Raw: 2e 6b 34 52 5f 70 41 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 58 6c 6d 4a 68 67 2c 2e 6b 34 52 5f 70 41 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 58 6c 6d 4a 68 67 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 7d 2e 4b 31 76 56 71 77 7b 63 75 72 73 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 42 5f 54 31 73 51 2c 2e 5f 39 5a 5a 75 57 41 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 4a 45 41 71 50 77 29 7d 2e 76 53 45 45 4c 51 7b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 61 6c 6c 7d 2e 78 4d 6d 34 31 77 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 31 36 70 78 3b 62 6f 78 Data Ascii: .k4R_pA{height:100%}.XlmJhg,.k4R_pA{display:flex;flex-direction:column}.XlmJhg{flex-grow:1;justify-content:flex-end}.K1vVqw{cursor:inherit;display:inline-block}.B_T1sQ,._9ZZuWA{color:var(--JEAqPw)}.vSEELQ{word-break:break-all}.xMm41w{grid-row-gap:16px;box
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 7d 2e 5f 39 64 65 39 49 77 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 20 34 70 78 20 34 70 78 7d 2e 5f 39 64 65 39 49 77 2e 5f 30 6c 6a 31 4e 77 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 56 72 57 4f 4d 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 61 72 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 43 2d 71 36 49 67 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 2d 55 6f 70 67 41 29 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d Data Ascii: solute;width:0}._9de9Iw{cursor:pointer;display:flex;padding:4px 0 4px 4px}._9de9Iw._0lj1Nw{cursor:not-allowed}.VrWOMg{align-self:start;background:var(--C-q6Ig);border-radius:9999px;box-shadow:inset 0 0 0 1px var(---UopgA);flex-shrink:0;height:16px;margin-
2024-10-31 00:09:37 UTC	565	IN	Data Raw: 61 62 6c 65 64 2b 2e 5f 39 64 65 39 49 77 20 2e 56 72 57 4f 4d 67 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 31 37 4c 66 48 77 29 7d 2e 6a 39 65 55 51 77 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2b 2e 5f 39 64 65 39 49 77 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 56 72 57 4f 4d 67 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 39 5f 4c 78 6d 77 29 2c 30 20 30 20 30 20 34 70 78 20 76 61 72 28 2d 2d 33 52 34 75 38 77 29 7d 2e 6a 39 65 55 51 77 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2b 2e 5f 39 64 65 39 49 77 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 56 72 57 4f 4d 67 3a 61 66 74 65 Data Ascii: abled+._9de9Iw .VrWOMg:after{background:var(--17LfHw)}.j9eUQw:active:hover:not(:disabled)+._9de9Iw:active:hover .VrWOMg{box-shadow:inset 0 0 0 1px var(--9_Lxmw),0 0 0 4px var(--3R4u8w)}.j9eUQw:active:hover:not(:disabled)+._9de9Iw:active:hover .VrWOMg:afte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49748	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	806	OUT	GET /web/f66980af75ea6dd8.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1183	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/css Content-Length: 1198 Connection: close CF-Ray: 8daf6ad64ba56b9a-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 480402 Cache-Control: public, max-age=31556926 ETag: "858d0c0d48f869f0bc07f91bd5dd77f7" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Thu, 22 Aug 2024 01:19:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sat, 23 Aug 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: FZ2U1OD6SYkTd9LzR63y7qDTbxJtoyju59O6K5MqZKOQ6aHbiRoKk+HN59uzUKWf6EPIRDDqTtc= x-amz-replication-status: COMPLETED x-amz-request-id: B7NQXY61KSF8BP9X x-amz-server-side-encryption: AES256 x-amz-version-id: mw2cJuTWW45U9yFxGkpDhX1bZosRCCXy X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4b 33 76 43 4a 47 5a 47 6c 78 52 64 52 64 46 71 6d 78 48 51 30 4e 37 32 70 54 77 25 32 46 63 25 32 42 33 36 62 68 32 35 30 77 46 64 72 74 61 4b 65 66 74 39 62 34 38 34 66 69 48 71 73 74 6f 6d 74 4f 35 6c 33 43 75 58 36 46 44 39 57 47 6e 25 32 42 4a 37 32 38 79 78 62 4e 52 6c 47 6e 70 31 46 32 31 73 54 47 79 59 35 57 30 35 50 42 36 53 65 71 76 37 63 4f 6c 56 49 34 4f 42 66 68 72 50 79 4d 68 68 59 78 70 68 30 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K3vCJGZGlxRdRdFqmxHQ0N72pTw%2Fc%2B36bh250wFdrtaKeft9b484fiHqstomtO5l3CuX6FD9WGn%2BJ728yxbNRlGnp1F21sTGyY5W05PB6Seqv7cOlVI4OBfhrPyMhhYxph0%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:37 UTC	1198	IN	Data Raw: 2e 52 56 6c 4a 50 51 7b 77 69 64 74 68 3a 33 30 34 70 78 7d 2e 6b 41 49 50 64 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 79 73 6b 75 49 67 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 7d 2e 64 62 6a 7a 47 41 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 7d 2e 79 53 78 69 44 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 72 65 6d 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 32 34 70 78 7d 2e 5f 37 44 65 6e 52 41 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 7d 2e 48 55 58 6f 50 51 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 72 76 62 2d 41 29 3b 62 6f 72 64 65 72 2d 72 Data Ascii: .RVlJPQ{width:304px}.kAIPdw{display:flex}.yskuIg{flex-shrink:1}.dbjzGA{flex-shrink:0}.ySxiDg{align-items:center;display:flex;font-size:2.4rem;height:24px;white-space:nowrap;width:24px}._7DenRA{margin-top:4px}.HUXoPQ{background-color:var(--yrvb-A);border-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49744	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	806	OUT	GET /web/40f0ce866d9a0621.ltr.css HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1182	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/css Content-Length: 153 Connection: close CF-Ray: 8daf6ad65cc62d38-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 220915 Cache-Control: public, max-age=31556926 ETag: "a6f8a04613dee769174ce0afe39d1530" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Tue, 13 Aug 2024 05:34:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Thu, 14 Aug 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: m2QpBvIK3IEqQfmhklFHGmFuyupFHPXouhmIQHS3yMnq34CRYaeSZvIWs66yvaZuBOQJ38IFT1U= x-amz-replication-status: COMPLETED x-amz-request-id: G3YD5FQ1DN1235Z5 x-amz-server-side-encryption: AES256 x-amz-version-id: WGspJkN.FhL00tr.RNrX_UFiHwVmkZvq X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 49 56 6e 62 6f 33 30 72 72 32 72 43 55 47 43 56 67 38 67 4a 4c 63 45 47 4d 5a 25 32 42 4e 62 69 33 43 4e 39 75 52 59 49 43 62 69 30 34 51 6f 70 7a 70 58 4b 4c 6f 45 67 6c 59 4f 35 52 56 6a 58 25 32 42 43 6a 70 32 73 46 42 31 31 68 4f 76 71 6e 52 6b 5a 77 4f 50 34 6a 48 79 74 41 50 25 32 42 33 70 53 47 71 4c 69 68 62 4e 79 52 6a 63 44 65 73 33 64 43 25 32 42 4d 4f 7a 76 78 72 64 37 7a 79 54 65 33 51 5a 52 4b 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OIVnbo30rr2rCUGCVg8gJLcEGMZ%2BNbi3CN9uRYICbi04QopzpXKLoEglYO5RVjX%2BCjp2sFB11hOvqnRkZwOP4jHytAP%2B3pSGqLihbNyRjcDes3dC%2BMOzvxrd7zyTe3QZRKY%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:37 UTC	153	IN	Data Raw: 2e 4e 69 50 50 72 51 7b 67 72 69 64 2d 67 61 70 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 41 6d 6a 38 44 77 7b 67 72 69 64 2d 72 6f 77 2d 67 61 70 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 6f 75 72 63 65 6d 61 70 73 2f 34 30 66 30 63 65 38 36 36 64 39 61 30 36 32 31 2e 6c 74 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .NiPPrQ{grid-gap:16px;display:grid;overflow:hidden}.Amj8Dw{grid-row-gap:16px;display:grid}/# sourceMappingURL=sourcemaps/40f0ce866d9a0621.ltr.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49745	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	787	OUT	GET /web/64de167a16d42d85.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 1515 Connection: close CF-Ray: 8daf6ad65b612cda-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "46a95c34b63209ec7a7a407521d6caf4" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: egPMN1OAMjB6o9U2CPnekj1cyHzxlLwDcKHxeCah8aH560fgiOVVnIHkiIpZsyajBIF8Hg0icN4= x-amz-replication-status: COMPLETED x-amz-request-id: 473MXRYFPVWG5CDR x-amz-server-side-encryption: AES256 x-amz-version-id: NmgB0UcXunXAz0jKmhVjEtu7ZEgM1lFn X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 4e 30 66 68 78 45 54 4a 4d 6e 6d 55 59 77 41 65 51 4d 36 66 5a 55 44 4d 50 73 6a 68 48 62 41 37 77 4a 56 37 6a 4f 6e 38 6f 46 6d 65 6c 43 51 33 36 50 7a 34 72 57 25 32 42 4d 61 5a 66 69 68 42 4c 49 34 70 79 70 52 72 6a 5a 64 74 44 6b 4c 6c 6e 4d 39 78 54 77 38 53 64 36 68 79 62 71 67 52 62 7a 63 72 4a 5a 59 69 34 58 32 58 45 38 57 44 61 25 32 42 67 6e 75 4b 62 71 55 45 42 75 6b 6f 79 77 4c 53 4f 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oN0fhxETJMnmUYwAeQM6fZUDMPsjhHbA7wJV7jOn8oFmelCQ36Pz4rW%2BMaZfihBLI4pypRrjZdtDkLlnM9xTw8Sd6hybqgRbzcrJZYi4X2XE8WDa%2BgnuKbqUEBukoywLSOI%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:37 UTC	1201	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 33 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 31 36 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 65 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1032],{/***/ 9164:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4
2024-10-31 00:09:37 UTC	314	IN	Data Raw: 29 3d 3e 28 7b 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 2c 22 45 52 52 4f 52 22 29 2c 72 65 71 75 65 73 74 49 64 3a 53 28 31 29 2c 65 72 72 6f 72 73 3a 5f 5f 63 2e 76 28 32 2c 6e 47 61 29 7d 29 29 3b 5f 5f 63 2e 4b 43 61 3d 5f 5f 63 2e 6f 62 28 28 29 3d 3e 28 7b 74 79 70 65 3a 5b 31 2c 5f 5f 63 2e 6a 46 2c 32 2c 6f 47 61 5d 7d 29 2c 28 29 3d 3e 28 7b 7d 29 29 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 2c 0a 0a 2f 2a 2a 2a 2f 20 32 39 33 37 36 33 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 39 31 36 34 29 2c 0a 0a 2f 2a 2a 2a 2f 20 33 30 34 36 36 34 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 39 31 36 34 29 0a 0a Data Ascii: )=>({type:p("A?",2,"ERROR"),requestId:S(1),errors:__c.v(2,nGa)}));__c.KCa=__c.ob(()=>({type:[1,__c.jF,2,oGa]}),()=>({}));}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);},/*/ 293763:(_, __, r) => r(9164),/*/ 304664:(_, __, r) => r(9164)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49743	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:36 UTC	787	OUT	GET /web/2359b9fab9478cec.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 16541 Connection: close CF-Ray: 8daf6ad67b264775-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "bc7c8830d463c88348fa070b1100ac08" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9EuBRRQKVh0DhD4f9TF4RwpnX9zaLl6cVFj1SHI6gRlbA3SwdLlaqnP9M27Uv6bzAkJOldEaRlw= x-amz-replication-status: COMPLETED x-amz-request-id: 473HK83TKF5FZAV0 x-amz-server-side-encryption: AES256 x-amz-version-id: yhtb7B4KnNnpfU0jfealcDy0D__8yIYd X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 4b 54 76 36 75 77 48 51 53 55 70 64 33 6a 41 70 48 62 74 71 34 6e 4a 71 31 69 59 47 6b 33 4f 4c 5a 41 33 69 76 35 4e 39 71 4f 5a 51 66 44 38 68 4c 4f 61 34 7a 6f 77 77 31 59 35 50 6b 73 6b 6c 68 45 6e 38 25 32 42 59 59 67 52 49 66 70 64 72 66 55 34 32 68 76 4e 61 4c 7a 67 68 66 41 5a 6c 6a 4a 62 62 53 37 5a 4e 66 58 63 6b 74 25 32 42 50 59 54 61 4b 77 74 52 4d 53 6d 43 44 32 52 38 72 45 32 25 32 42 50 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3KTv6uwHQSUpd3jApHbtq4nJq1iYGk3OLZA3iv5N9qOZQfD8hLOa4zoww1Y5PksklhEn8%2BYYgRIfpdrfU42hvNaLzghfAZljJbbS7ZNfXckt%2BPYTaKwtRMSmCD2R8rE2%2BPM%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:37 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 32 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 37 37 34 32 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2527],{/***/ 277425:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 65 61 6e 22 3d 3d 3d 62 3f 7b 62 6f 6f 6c 56 61 6c 75 65 3a 61 7d 3a 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3f 7b 62 79 74 65 73 56 61 6c 75 65 3a 61 7d 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 7b 61 72 72 61 79 56 61 6c 75 65 3a 7b 76 61 6c 75 65 73 3a 61 2e 6d 61 70 28 4b 51 29 7d 7d 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 3f 7b 6b 76 6c 69 73 74 56 61 6c 75 65 3a 7b 76 61 6c 75 65 73 3a 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 29 2e 6d 61 70 28 28 5b 63 2c 64 5d 29 3d 3e 28 7b 6b 65 79 3a 63 2c 76 61 6c 75 65 3a 4b 51 28 64 29 7d 29 29 7d 7d 3a 7b 7d 7d 3b 54 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 6e 65 77 20 4d 61 70 3b 66 6f 72 28 63 6f 6e 73 74 Data Ascii: ean"===b?{boolValue:a}:a instanceof Uint8Array?{bytesValue:a}:Array.isArray(a)?{arrayValue:{values:a.map(KQ)}}:"object"===b&&null!=a?{kvlistValue:{values:Object.entries(a).map(([c,d])=>({key:c,value:KQ(d)}))}}:{}};TTa=function(a){const b=new Map;for(const
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 70 61 6e 73 3a 63 7d 7d 3b 5f 5f 63 2e 50 51 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 51 35 2b 28 62 2d 61 2e 63 33 29 7d 3b 0a 5f 5f 63 2e 51 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 4d 61 74 68 2e 61 62 73 28 5f 5f 63 2e 50 51 28 61 2c 63 29 2d 62 29 3c 61 2e 74 68 72 65 73 68 6f 6c 64 7c 7c 28 61 2e 51 35 3d 62 2c 61 2e 63 33 3d 63 29 7d 3b 5f 5f 63 2e 52 51 3d 46 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 5d 29 3b 5f 5f 63 2e 53 51 3d 46 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 Data Ascii: pans:c}};__c.PQ=function(a,b){return a.Q5+(b-a.c3)};__c.QQ=function(a){var b=Date.now(),c=performance.now();Math.abs(__c.PQ(a,c)-b)<a.threshold\|\|(a.Q5=b,a.c3=c)};__c.RQ=F(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16]);__c.SQ=F(()=>[1,2,3,4,5,6,7,8,9,10,11
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 3d 3e 5b 31 2c 32 2c 33 2c 34 5d 29 3b 5f 5f 63 2e 6c 52 3d 45 28 28 29 3d 3e 28 7b 4c 66 3a 53 28 31 29 2c 43 35 3a 52 28 32 29 2c 46 77 61 3a 52 28 33 29 2c 52 59 3a 52 28 34 29 2c 5a 4c 61 3a 52 28 35 29 2c 51 43 61 3a 79 28 36 2c 5a 54 61 29 2c 47 48 61 3a 56 28 37 29 2c 41 48 61 3a 56 28 38 29 7d 29 29 3b 5f 5f 63 2e 6d 52 3d 45 28 28 29 3d 3e 28 7b 61 70 70 49 64 3a 53 28 31 29 2c 61 70 70 4e 61 6d 65 3a 53 28 32 29 2c 61 45 61 3a 53 28 33 29 2c 4b 6b 61 3a 71 72 28 34 29 2c 4a 6b 61 3a 71 72 28 35 29 2c 63 6a 61 3a 71 72 28 36 29 7d 29 29 3b 0a 5f 5f 63 2e 6e 52 3d 45 28 28 29 3d 3e 28 7b 61 70 70 49 64 3a 53 28 31 29 2c 54 53 3a 50 28 32 29 2c 61 31 3a 74 72 28 33 29 2c 73 72 61 3a 74 72 28 34 29 7d 29 29 3b 24 54 61 3d 46 28 28 29 3d 3e 5b 31 2c Data Ascii: =>[1,2,3,4]);__c.lR=E(()=>({Lf:S(1),C5:R(2),Fwa:R(3),RY:R(4),ZLa:R(5),QCa:y(6,ZTa),GHa:V(7),AHa:V(8)}));__c.mR=E(()=>({appId:S(1),appName:S(2),aEa:S(3),Kka:qr(4),Jka:qr(5),cja:qr(6)}));__c.nR=E(()=>({appId:S(1),TS:P(2),a1:tr(3),sra:tr(4)}));$Ta=F(()=>[1,
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 74 79 70 65 3a 70 28 22 41 3f 22 2c 31 37 2c 22 43 41 54 45 47 4f 52 59 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 70 61 61 3a 76 28 31 32 2c 5f 5f 63 2e 45 52 29 7d 29 29 3b 5f 5f 63 2e 47 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 31 38 2c 22 50 52 4f 50 45 4e 53 49 54 59 5f 54 4f 5f 54 52 49 41 4c 22 29 2c 74 33 3a 50 28 31 31 29 7d 29 29 3b 76 61 72 20 65 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 31 39 2c 22 53 54 59 4c 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 76 61 72 20 66 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 30 2c 22 54 48 45 4d 45 5f 50 52 45 46 Data Ascii: type:p("A?",17,"CATEGORY_PREFERENCE"),paa:v(12,__c.ER)}));__c.GR=E(()=>({...uR(),type:p("A?",18,"PROPENSITY_TO_TRIAL"),t3:P(11)}));var eUa=E(()=>({...uR(),type:p("A?",19,"STYLE_PREFERENCE"),Sc:v(11,DR)}));var fUa=E(()=>({...uR(),type:p("A?",20,"THEME_PREF
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 3e 28 7b 66 6b 3a 79 28 31 2c 6c 55 61 29 2c 5a 69 3a 50 28 32 29 7d 29 29 3b 5f 5f 63 2e 52 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 33 30 2c 22 43 4f 4c 4c 41 42 5f 46 45 41 54 55 52 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 55 61 61 3a 76 28 31 31 2c 5f 5f 63 2e 51 52 29 7d 29 29 3b 76 61 72 20 53 52 3d 45 28 28 29 3d 3e 28 7b 4a 6f 3a 72 28 31 2c 5f 5f 63 2e 66 52 29 2c 76 61 6c 75 65 3a 71 72 28 32 29 7d 29 29 3b 76 61 72 20 6d 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 33 31 2c 22 43 41 54 45 47 4f 52 59 5f 50 55 42 4c 49 53 48 5f 50 52 4f 46 49 4c 45 22 29 2c 71 61 61 3a 76 28 31 32 2c 53 52 29 7d 29 29 3b 76 61 72 20 6e 55 61 3d 45 28 28 29 3d 3e Data Ascii: >({fk:y(1,lUa),Zi:P(2)}));__c.RR=E(()=>({...uR(),type:p("A?",30,"COLLAB_FEATURE_PREFERENCE"),Uaa:v(11,__c.QR)}));var SR=E(()=>({Jo:r(1,__c.fR),value:qr(2)}));var mUa=E(()=>({...uR(),type:p("A?",31,"CATEGORY_PUBLISH_PROFILE"),qaa:v(12,SR)}));var nUa=E(()=>
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 2c 5f 5f 63 2e 64 52 29 2c 53 6e 61 3a 76 28 31 34 2c 5f 5f 63 2e 54 51 29 7d 29 29 3b 5f 5f 63 2e 57 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 34 33 2c 22 42 52 41 4e 44 5f 55 53 45 52 5f 41 43 54 49 56 49 54 59 5f 4d 41 52 4b 45 52 22 29 2c 6a 58 3a 44 72 28 31 31 2c 5f 5f 63 2e 64 52 29 2c 44 30 3a 56 28 31 32 29 7d 29 29 3b 76 61 72 20 79 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 34 34 2c 22 54 45 41 4d 5f 50 52 4f 50 45 4e 53 49 54 59 5f 54 4f 5f 42 45 43 4f 4d 45 5f 50 41 49 44 22 29 2c 64 54 3a 50 28 31 31 29 2c 48 50 3a 43 28 31 32 2c 65 52 29 2c 6d 4f 3a 43 28 31 33 2c 65 52 29 2c 6f 4f 3a 43 28 31 34 2c 65 52 29 2c 49 50 3a 74 72 28 31 35 29 2c 6e Data Ascii: ,__c.dR),Sna:v(14,__c.TQ)}));__c.WR=E(()=>({...uR(),type:p("A?",43,"BRAND_USER_ACTIVITY_MARKER"),jX:Dr(11,__c.dR),D0:V(12)}));var yUa=E(()=>({...uR(),type:p("A?",44,"TEAM_PROPENSITY_TO_BECOME_PAID"),dT:P(11),HP:C(12,eR),mO:C(13,eR),oO:C(14,eR),IP:tr(15),n
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 35 36 2c 22 54 45 41 4d 5f 46 49 4c 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 76 61 72 20 4b 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 35 37 2c 22 4c 41 4e 47 55 41 47 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 69 61 3a 76 28 31 31 2c 5f 5f 63 2e 63 52 29 7d 29 29 3b 76 61 72 20 4c 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 35 38 2c 22 43 41 4e 56 41 56 45 52 53 41 52 59 5f 50 52 4f 46 49 4c 45 22 29 2c 52 59 3a 71 72 28 31 31 29 2c 52 63 61 3a 71 72 28 31 32 29 2c 62 64 61 3a 71 72 28 31 33 29 2c 71 6b 61 3a 52 28 31 34 29 2c 75 63 61 3a 52 28 31 35 29 2c 73 64 61 Data Ascii: ,type:p("A?",56,"TEAM_FILE_PREFERENCE"),Sc:v(11,DR)}));var KUa=E(()=>({...uR(),type:p("A?",57,"LANGUAGE_PREFERENCE"),Sia:v(11,__c.cR)}));var LUa=E(()=>({...uR(),type:p("A?",58,"CANVAVERSARY_PROFILE"),RY:qr(11),Rca:qr(12),bda:qr(13),qka:R(14),uca:R(15),sda
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 42 61 3a 76 28 31 32 2c 55 55 61 29 7d 29 29 3b 76 61 72 20 57 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 36 39 2c 22 43 41 54 45 47 4f 52 59 5f 49 4e 54 45 4e 54 5f 50 52 4f 46 49 4c 45 22 29 2c 72 61 61 3a 76 28 31 31 2c 5f 5f 63 2e 24 51 29 7d 29 29 3b 76 61 72 20 58 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 37 30 2c 22 42 52 41 4e 44 5f 41 43 54 49 56 49 54 59 5f 50 52 4f 46 49 4c 45 22 29 2c 78 79 61 3a 28 30 2c 5f 5f 63 2e 41 72 29 28 31 31 29 7d 29 29 3b 76 61 72 20 66 53 3d 46 28 28 29 3d 3e 5b 31 2c 7b 41 61 3a 21 30 7d 2c 32 2c 7b 41 61 3a 21 30 7d 2c 33 2c 7b 41 61 3a 21 30 7d 2c 34 2c 7b 41 61 3a 21 30 7d 2c 35 2c 7b 41 61 3a 21 30 7d 2c 36 2c Data Ascii: Ba:v(12,UUa)}));var WUa=E(()=>({...uR(),type:p("A?",69,"CATEGORY_INTENT_PROFILE"),raa:v(11,__c.$Q)}));var XUa=E(()=>({...uR(),type:p("A?",70,"BRAND_ACTIVITY_PROFILE"),xya:(0,__c.Ar)(11)}));var fS=F(()=>[1,{Aa:!0},2,{Aa:!0},3,{Aa:!0},4,{Aa:!0},5,{Aa:!0},6,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49750	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	1372	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:37 UTC	776	IN	HTTP/1.1 302 Found Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nihhLDH5gw0VOVoLAgx80HezzOEydwvS0eF3xqvxZYWo%2BVi1F804lPdLXqoNi%2FzTzpyXrLX0tfor5E40PssP3%2FjN4hwJL0dCpszfSFexqo7rkTKUCXbXwjKYhWlb%2BOI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8daf6ad73d072c87-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49751	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	832	OUT	GET /chunk-batch/778ac51ce098c575.strings.js+899bf0e7605d8095.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1148	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 11002 Connection: close CF-Ray: 8daf6ad79c8a0bf3-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 16789 Cache-Control: public, max-age=31556926 Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Fri, 13 Sep 2024 01:56:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 14 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: h2w9FVJm1cgLr9GdKRk5Dcn3ZC3/es4WT0gVMoP0jhaNUKQGVKDvTjq29o6UkRsyDHPs4U7Jv8g= x-amz-replication-status: COMPLETED x-amz-request-id: 1NQ6A8DM4SJJC1DN x-amz-server-side-encryption: AES256 x-amz-version-id: uUw0HFvKWUp4vHKdUVdIoBsUDeU6AdT6 X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	372	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 71 48 6e 38 25 32 42 48 6d 71 4c 76 7a 74 56 63 55 56 47 31 4b 47 46 76 54 50 49 54 77 38 4e 61 36 72 31 47 79 25 32 42 65 73 6e 45 58 57 6c 55 51 6c 41 6a 25 32 42 54 25 32 46 79 67 70 65 61 38 53 25 32 46 69 45 78 58 66 4f 69 31 77 6c 43 33 51 7a 62 6a 62 56 4c 6d 36 75 65 71 66 74 67 30 48 4f 6a 38 63 5a 66 4b 7a 6d 25 32 42 6c 48 55 57 77 75 7a 76 6b 4a 4b 36 36 58 78 68 57 25 32 42 57 25 32 42 72 31 42 4f 53 68 6c 48 4d 7a 71 62 39 4f 34 53 53 33 79 75 70 68 52 39 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qHn8%2BHmqLvztVcUVG1KGFvTPITw8Na6r1Gy%2BesnEXWlUQlAj%2BT%2Fygpea8S%2FiExXfOi1wlC3QzbjbVLm6ueqftg0HOj8cZfKzm%2BlHUWwuzvkJK66XxhW%2BW%2Br1BOShlHMzqb9O4SS3yuphR9I%3D"}],"group":"cf
2024-10-31 00:09:37 UTC	1218	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 37 37 38 61 63 35 31 63 65 30 39 38 63 35 37 35 2e 73 74 72 69 6e 67 73 2e 6a 73 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 58 59 7a 33 43 41 5c 22 3a 5c 22 49 66 20 79 6f 75 20 64 6f 6e e2 80 99 74 20 6b 6e 6f 77 20 79 6f 75 72 20 5a 50 45 20 65 6d 61 69 6c 2c 20 70 6c 65 61 73 65 20 61 73 6b 20 79 6f 75 72 20 73 63 68 6f 6f 6c 20 61 64 6d 69 6e 2e 5c 22 2c 5c 22 7a 43 45 54 34 77 5c 22 3a 5c 22 57 65 e2 80 99 6c 6c 20 63 68 65 63 6b 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 2e 20 59 6f 75 20 63 61 6e e2 80 99 74 20 73 69 67 6e 20 Data Ascii: ;// __FILE_CONTENT_FOR__:778ac51ce098c575.strings.js(function() { const messages = JSON.parse("{\"XYz3CA\":\"If you dont know your ZPE email, please ask your school admin.\",\"zCET4w\":\"Well check if you already have an account. You cant sign
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 69 6d 65 20 74 6f 20 6c 6f 67 20 69 6e 2e 5c 22 2c 5c 22 55 51 6b 7a 73 77 5c 22 3a 5c 22 57 65 20 63 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 67 20 79 6f 75 20 69 6e 20 76 69 61 20 53 53 4f 20 6f 6e 20 74 68 69 73 20 70 61 67 65 2e 20 50 6c 65 61 73 65 20 67 6f 20 74 6f 20 74 68 65 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 2f 6c 6f 67 69 6e 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 43 61 6e 76 61 20 6c 6f 67 69 6e 20 70 61 67 65 3c 2f 61 3e 20 61 6e 64 20 74 72 79 20 69 6e 73 74 65 61 64 2e 5c 22 2c 5c 22 75 58 36 53 79 51 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 6d 6f 62 69 6c 65 20 6f 72 20 65 6d 61 69 6c 5c 22 2c 5c 22 79 68 33 6c 38 41 5c 22 Data Ascii: ime to log in.\",\"UQkzsw\":\"We couldnt log you in via SSO on this page. Please go to the <a href=\\\"/login\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Canva login page</a> and try instead.\",\"uX6SyQ\":\"Continue with mobile or email\",\"yh3l8A\"
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 64 32 35 30 31 35 30 64 34 37 20 7c 7c 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 63 29 20 7b 76 61 72 20 4b 68 3d 5f 5f 63 2e 4b 68 3b 76 61 72 20 4a 3d 5f 5f 63 2e 4a 3b 76 61 72 20 6e 3d 5f 5f 63 2e 6e 3b 0a 76 61 72 20 50 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 59 2e 74 72 61 63 6b 28 4f 70 62 2c 7b 73 6f 75 72 63 65 3a 61 2e 73 6f 75 72 63 65 2c 6d 6f 64 65 3a 62 7d 29 7d 2c 55 70 62 3d 66 75 6e 63 74 69 6f 6e 28 7b 48 3a 61 2c 6e 68 3a 62 2c 6f 62 3a 63 2c 4f 61 3a 64 2c 73 74 6f 72 65 3a 65 2c 64 75 3a 66 2c 70 69 61 3a 67 7d 29 7b 72 65 74 75 72 6e 20 73 38 28 28 29 3d 3e 7b 51 70 62 28 28 29 3d 3e 7b 5f 5f 63 2e 56 65 28 61 2c 7b 4c 61 3a 60 63 6f 6e 74 69 6e 75 65 5f 77 69 74 68 5f 24 7b 52 70 62 5b 65 2e 50 62 2e 52 68 5d Data Ascii: d250150d47 \|\| {};(function(__c) {var Kh=__c.Kh;var J=__c.J;var n=__c.n;var Ppb=function(a,b){a.Y.track(Opb,{source:a.source,mode:b})},Upb=function({H:a,nh:b,ob:c,Oa:d,store:e,du:f,pia:g}){return s8(()=>{Qpb(()=>{__c.Ve(a,{La:`continue_with_${Rpb[e.Pb.Rh]
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 2c 5b 32 35 5d 3a 22 77 65 69 62 6f 22 2c 5b 31 39 5d 3a 22 71 71 22 2c 5b 32 5d 3a 22 61 74 6c 61 73 73 69 61 6e 22 2c 5b 38 5d 3a 22 67 6f 6f 67 6c 65 61 64 73 22 2c 5b 34 5d 3a 22 64 72 6f 70 62 6f 78 22 2c 5b 36 5d 3a 22 67 69 74 68 75 62 22 2c 5b 39 5d 3a 22 67 6f 6f 67 6c 65 61 70 70 6c 69 63 65 6e 73 69 6e 67 22 2c 5b 31 30 5d 3a 22 67 6f 6f 67 6c 65 5f 64 61 74 61 5f 77 6f 72 6b 66 6c 6f 77 73 22 2c 5b 31 31 5d 3a 22 69 6e 73 74 61 67 72 61 6d 22 2c 5b 31 33 5d 3a 22 6c 61 72 6b 22 2c 5b 31 35 5d 3a 22 6c 69 6e 6b 65 64 69 6e 22 2c 5b 31 36 5d 3a 22 6d 61 69 6c 63 68 69 6d 70 22 2c 5b 31 38 5d 3a 22 70 69 6e 74 65 72 65 73 74 22 2c 5b 32 31 5d 3a 22 74 72 65 6c 6c 6f 22 2c 5b 32 32 5d 3a 22 74 75 6d 62 6c 72 22 2c 5b 32 33 5d 3a 22 74 77 69 74 74 Data Ascii: ,[25]:"weibo",[19]:"qq",[2]:"atlassian",[8]:"googleads",[4]:"dropbox",[6]:"github",[9]:"googleapplicensing",[10]:"google_data_workflows",[11]:"instagram",[13]:"lark",[15]:"linkedin",[16]:"mailchimp",[18]:"pinterest",[21]:"trello",[22]:"tumblr",[23]:"twitt
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 29 3b 72 65 74 75 72 6e 28 29 3d 3e 74 38 28 5f 5f 63 2e 52 6c 2c 7b 68 65 61 64 69 6e 67 3a 65 2c 50 61 3a 66 2c 79 61 3a 61 2e 68 70 3f 76 6f 69 64 20 30 3a 62 2c 6f 47 3a 4a 28 22 32 42 57 2b 6d 51 22 29 7d 29 7d 2c 66 71 62 3d 28 61 2c 62 29 3d 3e 7b 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 20 22 44 45 46 41 55 4c 54 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 22 4f 41 55 54 48 5f 4c 49 4e 4b 49 4e 47 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4a 28 22 79 68 33 6c 38 41 22 29 3b 63 61 73 65 20 22 42 45 4c 41 4a 41 52 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4a 28 22 43 49 43 69 2f 67 22 29 3b 63 61 73 65 20 22 57 4f 52 4b 5f 45 4d 41 49 4c 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 Data Ascii: );return()=>t8(__c.Rl,{heading:e,Pa:f,ya:a.hp?void 0:b,oG:J("2BW+mQ")})},fqb=(a,b)=>{switch(a.type){case "DEFAULT_HEADING":return b;case "OAUTH_LINKING_HEADING":return J("yh3l8A");case "BELAJAR_HEADING":return J("CICi/g");case "WORK_EMAIL_HEADING":return
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 74 20 6c 3d 61 77 61 69 74 20 74 68 69 73 2e 42 2e 44 69 2e 59 74 28 7b 73 74 6f 72 65 3a 62 2e 50 62 2c 0a 4a 3a 63 7d 29 3b 69 66 28 6c 2e 6f 6b 29 7b 76 61 72 20 64 3d 5f 5f 63 2e 6e 53 28 6c 2e 76 61 6c 75 65 29 3b 50 70 62 28 74 68 69 73 2e 42 2e 48 2c 59 70 62 28 64 29 29 3b 62 2e 71 65 2e 47 65 2e 76 61 6c 75 65 3d 62 2e 50 62 2e 76 61 6c 75 65 3b 62 2e 71 65 2e 47 65 2e 55 61 3d 62 2e 50 62 2e 55 61 3b 76 61 72 20 65 3d 61 77 61 69 74 20 5f 5f 63 2e 75 69 28 7b 71 67 3a 7b 61 63 74 69 6f 6e 3a 31 33 2c 64 67 3a 6e 65 77 20 5f 5f 63 2e 44 69 28 7b 69 64 65 6e 74 69 74 79 3a 5f 5f 63 2e 53 53 28 64 29 7d 29 7d 2c 45 62 3a 74 68 69 73 2e 45 62 2c 75 73 61 67 65 3a 22 63 6f 6e 74 69 6e 75 65 57 69 74 68 41 63 63 6f 75 6e 74 50 61 6e 65 6c 50 72 65 73 Data Ascii: t l=await this.B.Di.Yt({store:b.Pb,J:c});if(l.ok){var d=__c.nS(l.value);Ppb(this.B.H,Ypb(d));b.qe.Ge.value=b.Pb.value;b.qe.Ge.Ua=b.Pb.Ua;var e=await __c.ui({qg:{action:13,dg:new __c.Di({identity:__c.SS(d)})},Eb:this.Eb,usage:"continueWithAccountPanelPres
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 78 3d 68 2e 6e 69 5b 30 5d 3b 5f 5f 63 2e 52 53 28 78 29 3f 73 65 74 54 69 6d 65 6f 75 74 28 61 73 79 6e 63 28 29 3d 3e 7b 74 68 69 73 2e 47 28 61 2c 7b 6b 69 6e 64 3a 30 7d 29 3b 61 77 61 69 74 20 74 68 69 73 2e 42 2e 51 6c 28 5f 5f 63 2e 4d 69 5b 78 5d 2c 30 3d 3d 3d 62 2e 6b 69 6e 64 3f 62 2e 65 6d 61 69 6c 3a 76 6f 69 64 20 30 2c 21 31 29 7d 29 3a 28 74 68 69 73 2e 42 2e 44 2e 65 72 72 6f 72 28 22 52 65 63 65 69 76 65 64 20 61 6e 20 75 6e 73 75 70 70 6f 72 74 65 64 20 70 6c 61 74 66 6f 72 6d 22 2c 7b 65 78 74 72 61 3a 6e 65 77 20 4d 61 70 28 5b 5b 22 70 6c 61 74 66 6f 72 6d 22 2c 5a 70 62 5b 78 5d 5d 5d 29 7d 29 2c 0a 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 65 74 53 74 61 74 75 73 28 Data Ascii: onst x=h.ni[0];__c.RS(x)?setTimeout(async()=>{this.G(a,{kind:0});await this.B.Ql(__c.Mi[x],0===b.kind?b.email:void 0,!1)}):(this.B.D.error("Received an unsupported platform",{extra:new Map([["platform",Zpb[x]]])}),null===e\|\|void 0===e?void 0:e.setStatus(
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 47 41 54 45 5f 46 41 49 4c 45 44 5f 50 41 4e 45 4c 22 2c 76 6f 69 64 20 30 2c 7b 73 74 6f 72 65 3a 61 2c 4a 3a 65 7d 29 3b 74 68 69 73 2e 47 28 61 2c 7b 6b 69 6e 64 3a 30 7d 29 3b 62 72 65 61 6b 7d 6c 2e 66 73 3f 61 77 61 69 74 20 4b 68 28 74 68 69 73 2e 42 2e 4c 2c 22 41 43 43 4f 55 4e 54 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 5f 53 49 47 4e 55 50 5f 50 41 4e 45 4c 22 2c 7b 54 63 3a 71 3f 67 3a 76 6f 69 64 20 30 2c 78 62 3a 68 2c 47 61 3a 62 7d 2c 7b 73 74 6f 72 65 3a 61 2c 4a 3a 65 7d 29 3a 61 77 61 69 74 20 4b 68 28 74 68 69 73 2e 42 2e 4c 2c 22 53 49 47 4e 55 50 5f 43 4f 44 45 5f 56 45 52 49 46 49 43 41 54 49 4f 4e 5f 50 41 4e 45 4c 22 2c 7b 47 61 3a 62 2c 78 62 3a 68 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 4e 63 3a 76 6f 69 64 20 30 Data Ascii: GATE_FAILED_PANEL",void 0,{store:a,J:e});this.G(a,{kind:0});break}l.fs?await Kh(this.B.L,"ACCOUNT_INFORMATION_SIGNUP_PANEL",{Tc:q?g:void 0,xb:h,Ga:b},{store:a,J:e}):await Kh(this.B.L,"SIGNUP_CODE_VERIFICATION_PANEL",{Ga:b,xb:h,displayName:void 0,Nc:void 0
2024-10-31 00:09:37 UTC	201	IN	Data Raw: 3a 47 2c 52 4f 3a 21 30 2c 49 4d 3a 21 30 7d 29 3a 75 2c 73 74 6f 72 65 3a 63 7d 7d 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 63 68 75 6e 6b 2d 63 6f 6d 70 6f 73 69 6e 67 2e 63 61 6e 76 61 2e 63 6f 6d 2f 63 68 75 6e 6b 2d 62 61 74 63 68 2d 73 6d 2f 39 2b 32 32 5f 73 6f 75 72 63 65 6d 61 70 73 2f 38 39 39 62 66 30 65 37 36 30 35 64 38 30 39 35 2e 6a 73 2e 6d 61 70 Data Ascii: :G,RO:!0,IM:!0}):u,store:c}}};}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}}])//# sourceMappingURL=https://chunk-composing.canva.com/chunk-batch-sm/9+22_sourcemaps/899bf0e7605d8095.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49752	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	787	OUT	GET /web/1d5da80170c7d950.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 5937 Connection: close CF-Ray: 8daf6adaffe06b10-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "f4d914aefebb2d814ff3be48ec26b488" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 8FXYPTsjpz2BwZ/p3Baoh2Hw3vjHovly7R45JNTYjpFIUiYnOMZMDGNsv7eEjvrrY72i7KmnAWI= x-amz-replication-status: COMPLETED x-amz-request-id: 473Q42VAVMQBJM7R x-amz-server-side-encryption: AES256 x-amz-version-id: MMp_p3fhFRz3j0m0I7o2UD0JUstZziKk X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 54 4a 63 6c 54 68 42 50 6d 76 79 44 72 63 67 62 71 4d 45 33 42 69 52 4c 66 36 39 54 79 76 63 39 69 64 50 61 45 41 39 37 77 36 45 6c 39 41 4e 6a 72 50 52 31 43 48 6b 41 65 7a 47 77 71 6a 57 5a 41 71 42 41 74 59 49 49 43 4d 33 56 48 49 4a 79 36 75 25 32 46 55 37 39 32 63 38 67 79 45 67 72 6a 4e 4d 44 67 6f 35 51 56 78 25 32 46 33 37 41 42 4c 64 4c 58 77 4f 54 57 78 69 7a 55 37 75 62 49 71 66 34 67 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HTJclThBPmvyDrcgbqME3BiRLf69Tyvc9idPaEA97w6El9ANjrPR1CHkAezGwqjWZAqBAtYIICM3VHIJy6u%2FU792c8gyEgrjNMDgo5QVx%2F37ABLdLXwOTWxizU7ubIqf4g4%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:37 UTC	1201	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 33 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 32 33 38 30 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9134],{/***/ 523808:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 3d 7b 6e 61 6d 65 3a 62 2e 6e 61 6d 65 2c 7a 51 61 3a 60 24 7b 62 2e 64 75 72 61 74 69 6f 6e 7d 6d 73 60 2c 2e 2e 2e 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 62 2e 61 74 74 72 73 2e 65 6e 74 72 69 65 73 28 29 29 7d 3b 65 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 68 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 29 29 66 3d 64 5b 68 5d 2c 65 5b 68 5d 3d 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 29 3a 66 3b 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 28 65 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 28 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 61 2e Data Ascii: ={name:b.name,zQa:`${b.duration}ms`,...Object.fromEntries(b.attrs.entries())};e={};for(const h of Object.keys(d))f=d[h],e[h]=f instanceof Object?JSON.stringify(f):f;console.table(e);console.groupEnd();null===c\|\|void 0===c?void 0:c();console.groupEnd();a.
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 52 65 61 63 68 65 64 22 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 68 69 73 2e 4f 47 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 61 3b 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 74 46 3d 0a 63 3b 74 68 69 73 2e 73 65 6e 64 3d 64 3b 74 68 69 73 2e 4f 47 3d 6e 65 77 20 53 65 74 3b 76 61 72 20 65 3b 74 68 69 73 2e 72 4e 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 61 2e 72 4e 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 49 6e 66 69 6e 69 74 79 7d 7d 3b 76 61 72 20 24 6f 62 3d 28 7b 42 71 61 3a 61 2c 75 72 6c 3a 62 7d 29 3d 3e 63 3d 3e 7b 63 6f 6e 73 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 2c 65 3d 7b 41 63 63 65 70 74 3a Data Ascii: Reached"))}async flush(){await Promise.all(this.OG)}constructor(a,b,c,d){this.config=a;this.D=b;this.tF=c;this.send=d;this.OG=new Set;var e;this.rN=null!==(e=a.rN)&&void 0!==e?e:Infinity}};var $ob=({Bqa:a,url:b})=>c=>{const d=JSON.stringify(c),e={Accept:
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 3e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 4b 49 26 26 74 68 69 73 2e 61 43 28 29 29 3b 30 3c 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 26 26 6e 75 6c 6c 3d 3d 74 68 69 73 2e 74 69 6d 65 72 26 26 28 74 68 69 73 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 74 68 69 73 2e 61 43 28 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 4c 49 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 74 68 69 73 2e 61 43 28 29 3b 61 77 61 69 74 20 74 68 69 73 2e 76 66 2e 66 6c 75 73 68 28 29 7d 61 43 28 29 7b 74 72 79 7b 74 68 69 73 2e 76 66 2e 70 72 6f 63 65 73 73 28 74 68 69 73 2e 62 75 66 66 65 72 29 7d 63 61 74 63 68 28 61 29 7b 74 68 69 73 2e 44 2e 75 61 28 61 2c 7b 4c 62 3a 60 46 61 69 6c 65 64 20 Data Ascii: s.buffer.length>=this.config.KI&&this.aC());0<this.buffer.length&&null==this.timer&&(this.timer=setTimeout(()=>this.aC(),this.config.LI))}async flush(){this.aC();await this.vf.flush()}aC(){try{this.vf.process(this.buffer)}catch(a){this.D.ua(a,{Lb:`Failed
2024-10-31 00:09:37 UTC	629	IN	Data Raw: 72 4c 3a 5f 5f 63 2e 67 38 7d 29 29 3b 68 38 28 63 2c 71 3d 3e 6e 65 77 20 6d 28 62 2c 71 29 29 7d 68 38 28 63 2c 6d 3d 3e 6e 65 77 20 65 70 62 28 6d 29 29 3b 69 66 28 22 43 4f 4e 53 4f 4c 45 22 3d 3d 3d 61 2e 71 63 29 72 65 74 75 72 6e 20 63 2e 62 75 69 6c 64 28 6e 65 77 20 61 70 62 29 3b 63 6f 6e 73 74 20 64 3d 24 6f 62 28 7b 75 72 6c 3a 61 2e 65 6e 64 70 6f 69 6e 74 2c 42 71 61 3a 31 45 34 7d 29 2c 65 3d 5a 6f 62 28 7b 75 72 6c 3a 61 2e 65 6e 64 70 6f 69 6e 74 2c 6e 61 76 69 67 61 74 6f 72 7d 29 2c 0a 66 3d 61 73 79 6e 63 20 6d 3d 3e 7b 74 72 79 7b 61 77 61 69 74 20 65 28 6d 29 7d 63 61 74 63 68 28 71 29 7b 72 65 74 75 72 6e 20 71 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 38 3f 62 2e 43 46 28 6e 65 77 20 5f 5f 63 2e 6f 64 28 71 2e 6d 65 73 73 61 67 65 2c Data Ascii: rL:__c.g8}));h8(c,q=>new m(b,q))}h8(c,m=>new epb(m));if("CONSOLE"===a.qc)return c.build(new apb);const d=$ob({url:a.endpoint,Bqa:1E4}),e=Zob({url:a.endpoint,navigator}),f=async m=>{try{await e(m)}catch(q){return q instanceof i8?b.CF(new __c.od(q.message,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49753	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	794	OUT	GET /web/f0398d1166314304.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1192	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 115121 Connection: close CF-Ray: 8daf6adb1dd4285d-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 670435 Cache-Control: public, max-age=31556926 ETag: "cb1826af86c8190ceb1ff4f70e255c6d" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 02 Oct 2024 01:22:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 03 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: GkibssxVH7IbbwIaE7sFd9JAZcH8EH6j8sYlylHzcxMSSxsIv8YBwTo1bK2aGIJUEfHXyZeTYjA= x-amz-replication-status: COMPLETED x-amz-request-id: 8BNXMRFCTCF55H7R x-amz-server-side-encryption: AES256 x-amz-version-id: oRoD7y5rqQdsCJGoBSIV9k9OhxwghWkV X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 6c 4b 5a 4c 65 68 74 37 30 34 58 47 58 70 65 58 55 33 69 47 71 4d 4e 58 67 36 44 58 66 48 61 77 64 43 52 6b 35 55 79 72 41 6f 4c 53 42 49 64 25 32 42 36 6d 7a 38 38 50 44 69 34 4b 6b 35 74 32 53 6a 57 59 62 4a 75 70 44 48 46 72 32 4b 65 74 36 64 31 52 30 52 46 56 77 37 67 73 77 30 56 62 72 6f 25 32 42 4f 57 50 69 4b 52 50 33 69 49 6d 61 58 4d 44 79 6d 57 62 65 64 42 31 77 46 32 30 48 38 58 51 4a 59 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TlKZLeht704XGXpeXU3iGqMNXg6DXfHawdCRk5UyrAoLSBId%2B6mz88PDi4Kk5t2SjWYbJupDHFr2Ket6d1R0RFVw7gsw0Vbro%2BOWPiKRP3iImaXMDymWbedB1wF20H8XQJY%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:37 UTC	1198	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 33 36 5d 2c 7b 38 39 39 31 37 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 54 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 28 74 2b 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 74 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 29 2c 69 3d 61 74 6f 62 28 65 29 2c 73 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 69 2e 6c Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{899171:(t,e,i)=>{i.d(e,{Z:()=>s});const s={Tn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.l
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 54 65 73 74 22 29 3b 69 66 28 65 26 26 28 65 2e 6f 6e 75 70 67 72 61 64 65 6e 65 65 64 65 64 3d 28 29 3d 3e 65 2e 72 65 73 75 6c 74 2e 63 6c 6f 73 65 28 29 2c 65 2e 6f 6e 73 75 63 63 65 73 73 3d 28 29 3d 3e 65 2e 72 65 73 75 6c 74 2e 63 6c 6f 73 65 28 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 63 6f 6e 73 74 20 74 3d 77 69 6e 64 6f 77 2c 65 3d 74 2e 63 68 72 6f 6d 65 7c 7c 74 2e 62 72 6f 77 73 65 72 7c 7c 74 2e 70 64 3b 69 66 28 65 26 26 65 2e 72 75 6e 74 69 6d 65 26 26 65 2e 72 75 6e 74 69 6d 65 2e 69 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 76 64 2e 69 6e 66 6f 28 22 4e 6f 74 20 75 73 69 6e 67 20 49 6e 64 65 78 65 64 44 42 20 66 6f 72 20 73 74 6f 72 61 67 65 20 62 65 63 61 75 73 65 20 77 65 20 61 72 65 Data Ascii: Test");if(e&&(e.onupgradeneeded=()=>e.result.close(),e.onsuccess=()=>e.result.close()),"undefined"!=typeof window){const t=window,e=t.chrome\|\|t.browser\|\|t.pd;if(e&&e.runtime&&e.runtime.id)return this.vd.info("Not using IndexedDB for storage because we are
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 70 70 6f 72 74 65 64 28 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 2c 21 31 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 42 64 28 28 6f 3d 3e 7b 69 66 28 21 6f 2e 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 2e 63 6f 6e 74 61 69 6e 73 28 74 29 29 72 65 74 75 72 6e 20 72 2e 76 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 73 74 6f 72 65 20 6f 62 6a 65 63 74 20 22 2b 65 2b 22 20 69 6e 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 72 2e 64 61 74 61 62 61 73 65 2e 53 64 2b 22 20 2d 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 62 6a 65 63 74 53 74 6f 72 65 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: pported())return"function"==typeof n&&n(),!1;const r=this;return this.Bd((o=>{if(!o.objectStoreNames.contains(t))return r.vd.error("Could not store object "+e+" in "+t+" on indexedDB "+r.database.Sd+" - "+t+" is not a valid objectStore"),"function"==typeo
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 28 29 2c 76 6f 69 64 20 6e 2e 63 6c 6f 73 65 28 29 3b 63 6f 6e 73 74 20 72 3d 6e 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 6f 6e 6c 79 22 29 3b 72 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 28 29 3d 3e 6e 2e 63 6c 6f 73 65 28 29 3b 63 6f 6e 73 74 20 6f 3d 72 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 6f 70 65 6e 43 75 72 73 6f 72 28 6e 75 6c 6c 2c 22 70 72 65 76 22 29 3b 6f 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 73 2e 76 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 6f 70 65 6e 20 63 75 72 73 6f 72 20 66 6f 72 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 73 2e 64 61 74 61 62 61 73 65 2e 53 64 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ction"==typeof i&&i(),void n.close();const r=n.transaction([t],"readonly");r.oncomplete=()=>n.close();const o=r.objectStore(t).openCursor(null,"prev");o.onerror=()=>{s.vd.error("Could not open cursor for "+t+" on indexedDB "+s.database.Sd),"function"==typ
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 20 6f 70 65 6e 20 63 75 72 73 6f 72 20 66 6f 72 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 69 2e 64 61 74 61 62 61 73 65 2e 53 64 29 7d 2c 6f 2e 6f 6e 73 75 63 63 65 73 73 3d 74 3d 3e 7b 76 61 72 20 69 3b 63 6f 6e 73 74 20 73 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 72 65 73 75 6c 74 3b 6e 75 6c 6c 21 3d 73 3f 28 6e 75 6c 6c 21 3d 73 2e 76 61 6c 75 65 26 26 6e 75 6c 6c 21 3d 73 2e 6b 65 79 26 26 28 72 2e 64 65 6c 65 74 65 28 73 2e 6b 65 79 29 2e 6f 6e 73 75 63 63 65 73 73 3d 28 29 3d 3e 7b 61 2e 70 75 73 68 28 73 2e 76 61 6c 75 65 29 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 63 6f 6e 74 69 6e 75 65 26 26 73 2e 63 6f 6e Data Ascii: open cursor for "+t+" on indexedDB "+i.database.Sd)},o.onsuccess=t=>{var i;const s=null===(i=t.target)\|\|void 0===i?void 0:i.result;null!=s?(null!=s.value&&null!=s.key&&(r.delete(s.key).onsuccess=()=>{a.push(s.value)}),"function"==typeof s.continue&&s.con
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 4c 6f 67 67 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 69 6e 69 74 28 29 2c 73 2e 7a 67 3f 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 44 69 73 61 62 6c 69 6e 67 20 42 72 61 7a 65 20 6c 6f 67 67 69 6e 67 22 29 2c 73 2e 7a 67 3d 21 31 29 3a 28 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 45 6e 61 62 6c 65 64 20 42 72 61 7a 65 20 6c 6f 67 67 69 6e 67 22 29 2c 73 2e 7a 67 3d 21 30 29 7d 2c 69 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 73 2e 7a 67 29 7b 63 6f 6e 73 74 20 65 3d 22 42 72 61 7a 65 3a 20 22 2b 74 3b 6e 75 6c 6c 21 3d 73 2e 76 64 3f 73 2e 76 64 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 73 2e 7a 67 29 7b 63 6f 6e 73 74 20 65 3d 22 42 72 61 7a 65 20 53 44 Data Ascii: Logging:function(){s.init(),s.zg?(console.log("Disabling Braze logging"),s.zg=!1):(console.log("Enabled Braze logging"),s.zg=!0)},info:function(t){if(s.zg){const e="Braze: "+t;null!=s.vd?s.vd(e):console.log(e)}},warn:function(t){if(s.zg){const e="Braze SD
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 28 74 29 3e 6f 2e 5a 2e 6c 72 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 5a 2e 65 72 72 6f 72 28 60 52 65 6a 65 63 74 65 64 20 75 73 65 72 20 69 64 20 22 24 7b 74 7d 22 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 6c 6f 6e 67 65 72 20 74 68 61 6e 20 24 7b 6f 2e 5a 2e 6c 72 7d 20 62 79 74 65 73 2e 60 29 3b 69 66 28 6e 75 6c 6c 21 3d 65 26 26 21 28 30 2c 61 2e 72 6f 29 28 65 2c 22 73 65 74 20 73 69 67 6e 61 74 75 72 65 20 66 6f 72 20 6e 65 77 20 75 73 65 72 22 2c 22 73 69 67 6e 61 74 75 72 65 22 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 73 2e 5a 50 2e 63 72 28 29 3b 69 26 26 69 2e 63 68 61 6e 67 65 55 73 65 72 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 2c 73 2e 5a 50 2e 67 72 28 29 2c 65 29 7d 7d 2c 31 39 35 30 38 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b Data Ascii: (t)>o.Z.lr)return void r.Z.error(`Rejected user id "${t}" because it is longer than ${o.Z.lr} bytes.`);if(null!=e&&!(0,a.ro)(e,"set signature for new user","signature"))return;const i=s.ZP.cr();i&&i.changeUser(t.toString(),s.ZP.gr(),e)}},195088:(t,e,i)=>{
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 75 28 29 7b 63 6f 6e 73 74 20 74 3d 73 2e 5a 50 2e 6c 28 29 3b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 5a 2e 77 61 72 6e 28 61 2e 47 6f 29 3b 74 2e 63 6c 65 61 72 44 61 74 61 28 29 3b 63 6f 6e 73 74 20 65 3d 28 30 2c 6e 2e 58 50 29 28 6f 2e 5a 2e 59 74 29 3b 66 6f 72 28 6c 65 74 20 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 6f 6e 73 74 20 74 3d 65 5b 69 5d 2c 73 3d 6f 2e 5a 2e 59 74 5b 74 5d 3b 6e 65 77 20 6f 2e 5a 28 73 2c 72 2e 5a 29 2e 63 6c 65 61 72 44 61 74 61 28 29 7d 69 66 28 73 2e 5a 50 2e 58 28 29 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 73 2e 5a 50 2e 67 72 28 29 29 69 2e 63 6c 65 61 72 44 61 74 61 28 21 30 29 7d 7d 2c 38 34 32 34 31 37 3a 28 74 2c 65 2c 69 29 3d Data Ascii: nction u(){const t=s.ZP.l();if(null==t)return void r.Z.warn(a.Go);t.clearData();const e=(0,n.XP)(o.Z.Yt);for(let i=0;i<e.length;i++){const t=e[i],s=o.Z.Yt[t];new o.Z(s,r.Z).clearData()}if(s.ZP.X())for(const i of s.ZP.gr())i.clearData(!0)}},842417:(t,e,i)=
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 73 2e 4e 65 2c 22 64 61 74 65 74 69 6d 65 22 29 7d 59 28 29 7b 63 6f 6e 73 74 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 2e 74 74 2e 68 74 5d 3d 74 68 69 73 2e 69 64 2c 74 5b 6e 2e 74 74 2e 6c 65 5d 3d 74 68 69 73 2e 65 6e 61 62 6c 65 64 2c 74 5b 6e 2e 74 74 2e 70 65 5d 3d 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 2c 74 5b 6e 2e 74 74 2e 46 65 5d 3d 74 68 69 73 2e 74 72 61 63 6b 69 6e 67 53 74 72 69 6e 67 2c 74 7d 50 65 28 74 29 7b 73 2e 5a 2e 69 6e 66 6f 28 60 50 72 6f 70 65 72 74 79 20 69 73 20 6e 6f 74 20 6f 66 20 74 79 70 65 20 24 7b 74 7d 2e 60 29 7d 79 65 28 74 29 7b 73 2e 5a 2e 69 6e 66 6f 28 60 24 7b 74 7d 20 6e 6f 74 20 66 6f 75 6e 64 20 69 6e 20 66 65 61 74 75 72 65 20 66 6c 61 67 20 70 72 6f 70 65 72 74 69 65 73 2e 60 29 7d 62 65 28 74 Data Ascii: s.Ne,"datetime")}Y(){const t={};return t[n.tt.ht]=this.id,t[n.tt.le]=this.enabled,t[n.tt.pe]=this.properties,t[n.tt.Fe]=this.trackingString,t}Pe(t){s.Z.info(`Property is not of type ${t}.`)}ye(t){s.Z.info(`${t} not found in feature flag properties.`)}be(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49754	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	787	OUT	GET /web/72e88e1e9b45a34c.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1220	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 593 Connection: close CF-Ray: 8daf6adb2b63a918-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "853874dae2b4fff1668f87ea1dc3e537" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: IhR3BDUMvJGSqNawnZf1dm1deJ0XD4+SJqTk93Eeig9PZs1HqWmXLCAojdeZk7/xNHvgSLOqdc+ekU7XoVgsRz7ZNVDQCjTbD3zBk74Naeg= x-amz-replication-status: COMPLETED x-amz-request-id: 473GH5R2BCR5DXB7 x-amz-server-side-encryption: AES256 x-amz-version-id: tFEzAZIkj84MsW_w6SFdbNoiSeJKiHXg X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 6d 53 55 43 41 59 53 6e 66 6b 55 7a 75 75 34 25 32 46 6e 4b 35 77 35 4d 51 77 4f 49 70 59 55 44 25 32 42 45 79 6c 52 7a 39 5a 41 73 57 68 32 78 58 78 45 32 34 52 53 34 65 71 6a 54 4f 64 6d 69 69 30 72 25 32 46 46 59 51 73 4e 62 6d 6c 25 32 42 25 32 42 45 72 44 6f 32 70 76 44 76 51 35 64 67 59 44 34 63 64 31 5a 73 33 36 68 69 33 63 4f 77 50 45 6b 71 68 50 41 35 70 56 35 30 37 39 70 49 34 65 7a 6f 45 39 25 32 42 5a 74 61 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mSUCAYSnfkUzuu4%2FnK5w5MQwOIpYUD%2BEylRz9ZAsWh2xXxE24RS4eqjTOdmii0r%2FFYQsNbml%2B%2BErDo2pvDvQ5dgYD4cd1Zs36hi3cOwPEkqhPA5pV5079pI4ezoE9%2BZtag%3D"}],"group":"cf-nel","max_age":
2024-10-31 00:09:37 UTC	593	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 34 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 30 38 33 35 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6642],{/***/ 708358:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49755	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	787	OUT	GET /web/748178ca07be7fb4.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 19262 Connection: close CF-Ray: 8daf6adb2b40a916-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "38be64dceba955213f68196648d4ba6c" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 2t35IcXctAHsJSS9XSIJvUcU1OnJ9UgXTmO7E2LS/BX7AOjgEEWdz8Rvyv7cca/6h/q7tOpeu5g= x-amz-replication-status: COMPLETED x-amz-request-id: 473KQ2QBCQZXY3BA x-amz-server-side-encryption: AES256 x-amz-version-id: dJe126i2p.l6l.DRNMi3BqsOl37K4Bpw X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 69 46 76 61 69 42 68 65 41 36 6d 69 49 33 69 6a 31 31 79 6a 4e 5a 54 77 7a 33 6e 4d 44 50 54 49 79 4c 79 62 32 6f 25 32 42 73 6c 37 33 74 73 37 38 66 35 4a 71 44 6d 37 33 75 45 62 62 39 6f 43 62 4b 6e 6f 41 75 7a 46 52 77 50 44 53 25 32 42 54 55 65 42 74 7a 6a 65 75 5a 57 6c 42 34 38 65 36 6e 55 6b 5a 4a 4c 69 25 32 42 46 64 32 45 79 52 68 50 30 4b 38 6a 6f 31 4a 56 75 53 30 74 48 50 6e 48 62 4b 51 77 51 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7iFvaiBheA6miI3ij11yjNZTwz3nMDPTIyLyb2o%2Bsl73ts78f5JqDm73uEbb9oCbKnoAuzFRwPDS%2BTUeBtzjeuZWlB48e6nUkZJLi%2BFd2EyRhP0K8jo1JVuS0tHPnHbKQwQ%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:37 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 35 38 30 34 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{/***/ 558045:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6f 62 61 6c 2e 73 61 29 29 7d 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 65 28 76 6f 69 64 20 30 29 7d 29 7d 29 3b 61 2e 63 55 2e 74 68 65 6e 28 65 3d 3e 7b 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 66 3d 65 2e 75 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 63 61 6c 6c 28 65 2c 22 53 65 6e 73 6f 72 73 43 68 61 6e 6e 65 6c 22 29 3b 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 61 2e 4f 45 2e 56 41 26 26 6e 75 6c 6c 21 3d 65 2e 69 64 65 6e 74 69 66 79 26 26 65 2e 69 64 65 6e 74 69 66 79 28 61 2e 4f 45 2e 56 41 2c 21 30 29 7d 29 7d 72 65 74 75 72 6e 20 61 2e 63 55 7d 2c 6b 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 0a 5b 61 5d 3b 6c 65 74 20 62 Data Ascii: obal.sa))}).catch(()=>{e(void 0)})});a.cU.then(e=>{var f;null===e\|\|void 0===e?void 0:null===(f=e.use)\|\|void 0===f?void 0:f.call(e,"SensorsChannel");null!=e&&null!=a.OE.VA&&null!=e.identify&&e.identify(a.OE.VA,!0)})}return a.cU},kQ=function(a){a=[a];let b
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 65 78 22 29 2e 67 65 74 41 6c 6c 28 22 6e 75 6c 6c 22 29 29 3b 62 3d 28 62 3d 28 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 64 29 29 2e 66 6c 61 74 28 29 29 3f 62 2e 6d 61 70 28 65 3d 3e 6f 51 2e 52 28 65 2e 65 76 65 6e 74 29 29 3a 5b 5d 3b 61 77 61 69 74 20 61 2e 6e 41 3b 72 65 74 75 72 6e 20 62 7d 2c 6a 54 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 29 3b 62 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 29 3b 63 6f 6e 73 74 20 5b 64 2c 65 5d 3d 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 63 2e 63 6f 75 6e 74 28 29 Data Ascii: ex").getAll("null"));b=(b=(await Promise.all(d)).flat())?b.map(e=>oQ.R(e.event)):[];await a.nA;return b},jTa=async function(a,b){var c=b.objectStore("analytics_event_v2");b=b.objectStore("analytics_event_metadata");const [d,e]=await Promise.all([c.count()
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 77 3d 28 29 3d 3e 7b 6d 3d 21 30 3b 75 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 75 3d 76 6f 69 64 20 30 29 3b 71 28 6c 29 7d 3b 69 66 28 63 2e 73 69 67 6e 61 6c 29 7b 63 6f 6e 73 74 20 78 3d 63 2e 73 69 67 6e 61 6c 3b 0a 78 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 72 65 74 75 72 6e 7b 72 65 73 75 6c 74 3a 64 2e 74 68 65 6e 28 41 3d 3e 7b 78 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 72 65 74 75 72 6e 20 41 7d 2c 41 3d 3e 7b 78 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 74 68 72 6f 77 20 41 3b 7d 29 2c 63 61 6e 63 65 6c 3a 77 7d 7d 72 65 74 75 72 6e 7b 72 65 73 75 6c 74 3a 64 Data Ascii: onst w=()=>{m=!0;u&&(clearTimeout(u),u=void 0);q(l)};if(c.signal){const x=c.signal;x.addEventListener("abort",w);return{result:d.then(A=>{x.removeEventListener("abort",w);return A},A=>{x.removeEventListener("abort",w);throw A;}),cancel:w}}return{result:d
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 20 63 3d 61 3b 61 77 61 69 74 20 62 28 29 7d 2c 74 54 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 28 6e 65 77 20 44 61 74 65 28 61 2e 4c 65 2e 6e 6f 77 28 29 29 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 65 3d 6e 65 77 20 69 51 28 7b 65 76 65 6e 74 73 3a 62 2e 6d 61 70 28 66 3d 3e 6e 65 77 20 74 51 28 7b 2e 2e 2e 66 2c 42 63 3a 6e 65 77 20 75 51 28 7b 2e 2e 2e 66 2e 42 63 2c 71 34 3a 64 7d 29 7d 29 29 7d 29 3b 74 72 79 7b 61 77 61 69 74 20 6b 54 61 28 28 29 3d 3e 64 54 61 28 61 2e 5a 6b 2c 65 29 2c 66 3d 3e 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 5f 63 2e 66 64 7c 7c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 5f 63 2e 55 47 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 21 28 66 20 69 6e 73 74 61 6e 63 Data Ascii: c=a;await b()},tTa=async function(a,b,c){const d=(new Date(a.Le.now())).toISOString(),e=new iQ({events:b.map(f=>new tQ({...f,Bc:new uQ({...f.Bc,q4:d})}))});try{await kTa(()=>dTa(a.Zk,e),f=>f instanceof __c.fd\|\|f instanceof __c.UG)}catch(f){if(!(f instanc
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 6e 67 61 67 65 6d 65 6e 74 5f 65 76 65 6e 74 3a 76 51 28 62 2e 41 67 61 29 2c 67 74 6d 5f 69 6e 6e 6f 76 69 64 3a 76 51 28 62 2e 43 67 61 29 2c 67 74 6d 5f 62 65 6e 5f 36 30 35 3a 76 51 28 62 2e 79 67 61 29 2c 67 74 6d 5f 64 69 63 62 6f 3a 76 51 28 62 2e 7a 67 61 29 2c 67 74 6d 5f 66 70 63 5f 72 74 69 64 3a 76 51 28 62 2e 42 67 61 29 2c 67 74 6d 5f 6d 65 74 61 64 61 74 61 3a 76 51 28 62 2e 44 67 61 29 7d 7d 29 7d 2c 78 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 42 63 2c 63 3d 61 2e 6f 6a 2c 64 2c 65 2c 66 3b 76 61 72 20 67 3d 7b 61 70 70 5f 6e 61 6d 65 3a 6e 75 6c 6c 3d 3d 3d 28 64 3d 63 2e 61 70 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 6e 61 6d 65 2c 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 3a 6e Data Ascii: ngagement_event:vQ(b.Aga),gtm_innovid:vQ(b.Cga),gtm_ben_605:vQ(b.yga),gtm_dicbo:vQ(b.zga),gtm_fpc_rtid:vQ(b.Bga),gtm_metadata:vQ(b.Dga)}})},xQ=function(a){var b=a.Bc,c=a.oj,d,e,f;var g={app_name:null===(d=c.app)\|\|void 0===d?void 0:d.name,product_variant:n
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 28 61 29 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 5b 30 5d 3f 62 5b 63 5d 3d 64 3a 62 5b 63 5d 3d 64 2e 6d 61 70 28 65 3d 3e 0a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3a 62 5b 63 5d 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 64 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 29 3a 64 3b 72 65 74 75 72 6e 20 62 7d 2c 45 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 62 3d 61 2e 4c 75 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 62 2e 73 74 61 74 75 73 29 7b 76 61 72 20 63 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 61 2e 4c 75 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e Data Ascii: (a))Array.isArray(d)?"string"===typeof d[0]?b[c]=d:b[c]=d.map(e=>JSON.stringify(e)):b[c]="object"===typeof d?JSON.stringify(d):d;return b},ETa=function(a){var b;if(null===(b=a.Lu)\|\|void 0===b?0:b.status){var c;switch(null===(c=a.Lu)\|\|void 0===c?void 0:c.
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 69 73 2e 73 74 61 74 65 3d 31 29 2c 62 3b 7d 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 4c 65 3d 5f 5f 63 2e 64 64 3b 74 68 69 73 2e 59 30 3d 74 68 69 73 2e 5a 4f 3d 74 68 69 73 2e 73 74 61 74 65 3d 30 3b 74 68 69 73 2e 61 63 74 69 6f 6e 3d 61 3b 74 68 69 73 2e 63 66 61 3d 33 3b 74 68 69 73 2e 71 6f 61 3d 33 45 34 7d 7d 3b 76 61 72 20 66 54 61 3d 32 2c 65 54 61 3d 34 2c 67 54 61 3d 38 3b 76 61 72 20 44 51 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 6f 70 65 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 6c 51 28 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 51 28 62 2c 61 29 7d 61 73 79 6e 63 20 70 75 74 28 61 29 7b 63 6f 6e 73 74 20 62 3d 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 22 61 6e 61 6c 79 74 Data Ascii: is.state=1),b;}}constructor(a){this.Le=__c.dd;this.Y0=this.ZO=this.state=0;this.action=a;this.cfa=3;this.qoa=3E4}};var fTa=2,eTa=4,gTa=8;var DQ=class{static open(a){const b=lQ(a);return new DQ(b,a)}async put(a){const b=(await this.db).transaction(["analyt
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 61 6e 73 61 63 74 69 6f 6e 20 6f 6e 20 61 20 63 6c 6f 73 65 64 20 64 61 74 61 62 61 73 65 22 2c 0a 22 54 68 65 20 64 61 74 61 62 61 73 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 69 6e 67 2e 22 5d 2e 73 6f 6d 65 28 62 3d 3e 61 2e 69 6e 63 6c 75 64 65 73 28 62 29 29 2c 73 54 61 3d 61 3d 3e 5b 22 54 68 65 20 6f 62 6a 65 63 74 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6f 72 20 61 72 67 75 6d 65 6e 74 2e 22 5d 2e 73 6f 6d 65 28 62 3d 3e 61 2e 69 6e 63 6c 75 64 65 73 28 62 29 29 2c 45 51 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 63 72 65 61 74 65 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 3d 21 30 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 29 72 65 74 75 72 6e 20 61 3b 61 3d 6e 65 77 Data Ascii: ansaction on a closed database","The database connection is closing."].some(b=>a.includes(b)),sTa=a=>["The object does not support the operation or argument."].some(b=>a.includes(b)),EQ=class{static create(a,b,c,d,e,f,g,h=!0){if(void 0===g)return a;a=new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49756	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	795	OUT	GET /web/ef72ef9d495f3a56.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:37 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 2562 Connection: close CF-Ray: 8daf6adb3cf63166-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 512595 Cache-Control: public, max-age=31556926 ETag: "50a750081e7fdb205dd088b870291919" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Fri, 25 Oct 2024 01:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: UccUPHkhaXJGfGlz817RqyoFNa57SnbEtXFsjVutlaGrrKwoXJ/K0xgowIqix/OYgKG3URT/HvY= x-amz-replication-status: COMPLETED x-amz-request-id: 6F6D1N31CS2H1G56 x-amz-server-side-encryption: AES256 x-amz-version-id: 8hLF5CPLdlY6uJ15RMPBHlfY6a.VvC85 X-Content-Type-Options: nosniff
2024-10-31 00:09:37 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 63 74 4c 59 44 25 32 42 7a 68 56 56 36 56 74 62 75 59 33 46 76 4d 7a 7a 4e 72 6f 4d 30 79 4c 59 4b 71 52 42 59 25 32 46 4a 49 41 6f 44 5a 35 52 77 38 5a 4a 5a 38 6c 35 25 32 46 72 4a 4a 4a 61 4d 79 6f 61 4f 6d 4a 25 32 46 75 71 5a 6c 76 4f 6f 55 41 76 42 38 4f 4f 67 6c 72 52 38 38 73 6f 4d 4c 74 37 71 4e 49 41 62 51 63 70 33 38 77 5a 56 71 66 4e 6d 65 72 42 52 33 43 79 4d 33 47 63 6c 56 4f 4f 55 37 35 47 66 48 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ctLYD%2BzhVV6VtbuY3FvMzzNroM0yLYKqRBY%2FJIAoDZ5Rw8ZJZ8l5%2FrJJJaMyoaOmJ%2FuqZlvOoUAvB8OOglrR88soMLt7qNIAbQcp38wZVqfNmerBR3CyM3GclVOOU75GfHc%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:37 UTC	1196	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 65 71 34 50 67 41 5c 22 3a 5c 22 44 69 64 6e e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 63 6f 64 65 5c 22 2c 5c 22 50 46 4f 55 65 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 67 6d 64 2b 4e 41 5c 22 3a 5c 22 59 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 69 73 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 74 68 72 6f 75 67 68 20 63 6f 6f 6b 69 65 73 2e 20 43 68 6f 6f 73 69 6e 67 20 e2 80 9c 64 6f 20 6e 6f 74 20 73 65 6c 6c e2 80 9d 20 77 69 6c 6c 20 64 69 73 61 62 6c 65 20 74 68 65 20 6f 6e 65 73 20 74 68 61 74 20 6d 61 6b 65 20 74 68 69 6e 67 73 20 6d 6f 72 65 20 72 65 6c Data Ascii: (function() { const messages = JSON.parse("{\"eq4PgA\":\"Didnt get the code? Resend code\",\"PFOUew\":\"Continue\",\"gmd+NA\":\"Your experience is personalized through cookies. Choosing do not sell will disable the ones that make things more rel
2024-10-31 00:09:37 UTC	1366	IN	Data Raw: 61 69 6c 20 64 6f 6d 61 69 6e 2c 20 77 65 20 6d 61 79 20 73 68 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 72 5c 22 2c 5c 22 52 33 79 58 5a 77 5c 22 3a 5c 22 4f 6e 63 65 20 79 6f 75 20 65 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 73 65 6e 74 20 74 6f 20 7b 30 7d 2c 20 79 6f 75 e2 80 99 6c 6c 20 62 65 20 61 6c 6c 20 6c 6f 67 67 65 64 20 69 6e 2e 5c 22 2c 5c 22 56 33 56 51 50 77 5c 22 3a 5c 22 52 65 74 75 72 6e 20 74 6f 20 6c 6f 67 20 69 6e 5c 22 2c 5c 22 71 4c 41 4c 63 51 5c 22 3a 5c 22 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 20 77 61 73 20 73 65 6e 74 20 74 6f 20 7b 30 7d 2e 5c 22 2c 5c 22 6b 39 55 46 36 67 5c 22 3a 5c 22 4a 75 73 74 20 6f 6e 65 20 6d 6f 72 65 20 73 74 65 70 Data Ascii: ail domain, we may share information with your employer\",\"R3yXZw\":\"Once you enter the code we sent to {0}, youll be all logged in.\",\"V3VQPw\":\"Return to log in\",\"qLALcQ\":\"A verification code was sent to {0}.\",\"k9UF6g\":\"Just one more step

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49758	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	1390	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: www.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:37 UTC	724	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8038 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P6V%2BIBuOJYiA0n4WMFiRcHyG8YKPeFjlu6SZZ2fa29ceKB%2BGxZ8DS6qe8a0mB3dkanyVfpWr0EIjO2VEnbOP2790gax070qp%2BISJBdA3KRGrOO3Lsf8%2Ft%2BdpULP89Y4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8daf6adbfe932c8e-DFW
2024-10-31 00:09:37 UTC	645	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6e 2c 6f 2c 79 2c 7a 2c 42 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 65 2c 66 29 7b 66 6f 72 28 55 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 55 28 34 34 37 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 34 34 38 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 33 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 37 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 55 28 34 36 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 55 28 34 35 32 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 55 28 34 32 32 29 29 2f 37 2b 2d 70 61 72 73 65 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,n,o,y,z,B){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=parseInt(U(447))/1+-parseInt(U(448))/2+-parseInt(U(373))/3+-parseInt(U(377))/4*(parseInt(U(464))/5)+parseInt(U(452))/6+parseInt(U(422))/7+-parse
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 29 29 29 2c 49 3d 44 5b 61 34 28 33 36 35 29 5d 5b 61 34 28 33 39 39 29 5d 26 26 44 5b 61 34 28 34 31 36 29 5d 3f 44 5b 61 34 28 33 36 35 29 5d 5b 61 34 28 33 39 39 29 5d 28 6e 65 77 20 44 5b 28 61 34 28 34 31 36 29 29 5d 28 49 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 61 35 2c 50 29 7b 66 6f 72 28 61 35 3d 61 34 2c 4f 5b 61 35 28 34 32 30 29 5d 28 29 2c 50 3d 30 3b 50 3c 4f 5b 61 35 28 33 37 32 29 5d 3b 4f 5b 50 5d 3d 3d 3d 4f 5b 50 2b 31 5d 3f 4f 5b 61 35 28 34 34 34 29 5d 28 50 2b 31 2c 31 29 3a 50 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4f 7d 28 49 29 2c 4a 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 4a 3d 4a 5b 61 34 28 34 31 32 29 5d 5b 61 34 28 33 36 39 29 5d 28 4a 29 2c 4b 3d 30 3b 4b 3c 49 5b 61 34 28 33 37 32 29 5d 3b 4c 3d 49 Data Ascii: ))),I=D[a4(365)][a4(399)]&&D[a4(416)]?D[a4(365)][a4(399)](new D[(a4(416))](I)):function(O,a5,P){for(a5=a4,O[a5(420)](),P=0;P<O[a5(372)];O[P]===O[P+1]?O[a5(444)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a4(412)][a4(369)](J),K=0;K<I[a4(372)];L=I
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 31 26 54 7c 4f 3c 3c 31 2e 33 35 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 34 33 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 54 3d 31 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 4f 3c 3c 31 7c 54 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 34 33 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3d 30 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 61 61 28 34 32 34 29 5d 28 30 29 2c 47 3d 30 3b 31 36 3e 47 3b 4f 3d 54 26 31 7c 4f 3c 3c 31 2e 31 33 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 61 61 28 34 33 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 7d 4b 2d 2d 2c 30 3d 3d 4b 26 26 28 4b 3d 4d 61 74 68 5b 61 61 28 34 30 Data Ascii: 1&T\|O<<1.35,E-1==P?(P=0,N[aa(439)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;O=O<<1\|T,E-1==P?(P=0,N[aa(439)](F(O)),O=0):P++,T=0,G++);for(T=J[aa(424)](0),G=0;16>G;O=T&1\|O<<1.13,E-1==P?(P=0,N[aa(439)](F(O)),O=0):P++,T>>=1,G++);}K--,0==K&&(K=Math[aa(40
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 34 30 33 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 4d 21 3d 52 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 4f 3d 3d 30 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 51 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 34 30 33 29 5d 28 32 2c 38 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4e 26 4f 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 28 30 3c 53 3f 31 3a 30 29 2a 4d 2c 4d 3c 3c 3d 31 29 3b 54 3d 64 28 51 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 64 28 34 30 33 29 5d 28 Data Ascii: L,L+=1);for(Q=0,R=Math[ad(403)](2,2),M=1;M!=R;S=N&O,O>>=1,O==0&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);switch(Q){case 0:for(Q=0,R=Math[ad(403)](2,8),M=1;R!=M;S=N&O,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=(0<S?1:0)M,M<<=1);T=d(Q);break;case 1:for(Q=0,R=Math[ad(403)](
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 39 29 5d 2c 64 3d 33 36 30 30 2c 63 2e 74 29 26 26 28 65 3d 4d 61 74 68 5b 58 28 33 35 39 29 5d 28 2b 61 74 6f 62 28 63 2e 74 29 29 2c 66 3d 4d 61 74 68 5b 58 28 33 35 39 29 5d 28 44 61 74 65 5b 58 28 34 33 31 29 5d 28 29 2f 31 65 33 29 2c 66 2d 65 3e 64 29 29 72 65 74 75 72 6e 21 5b 5d 3b 72 65 74 75 72 6e 21 21 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 63 2c 64 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 56 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 30 28 34 35 33 29 5d 26 26 30 3c 63 5b 61 30 28 34 35 33 29 5d 5b 61 30 28 34 33 37 29 5d 5b 61 30 28 33 39 32 29 5d 5b 61 30 28 33 38 32 29 5d 28 64 29 5b 61 30 28 33 38 38 29 5d 28 61 30 28 33 38 37 29 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 63 2c 61 32 2c 64 29 7b 66 6f 72 28 61 32 3d 56 2c 64 3d Data Ascii: 9)],d=3600,c.t)&&(e=Math[X(359)](+atob(c.t)),f=Math[X(359)](Date[X(431)]()/1e3),f-e>d))return![];return!![]}function s(c,d,a0){return a0=V,d instanceof c[a0(453)]&&0<c[a0(453)][a0(437)][a0(392)][a0(382)](d)[a0(388)](a0(387))}function x(c,a2,d){for(a2=V,d=
2024-10-31 00:09:37 UTC	1369	IN	Data Raw: 62 6a 65 63 74 2c 6f 6e 74 69 6d 65 6f 75 74 2c 43 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 72 65 70 6c 61 63 65 2c 6a 73 64 2c 66 66 45 67 65 34 2c 31 30 36 39 39 33 30 6d 63 41 56 61 6a 2c 6e 61 76 69 67 61 74 6f 72 2c 73 65 6e 64 2c 72 65 61 64 79 53 74 61 74 65 2c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 2c 66 6c 6f 6f 72 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 6b 65 79 73 2c 6a 6f 69 6e 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6f 62 6a 65 63 74 2c 41 72 72 61 79 2c 6d 73 67 2c 72 65 6d 6f 76 65 43 68 69 6c 64 2c 2f 69 6e 76 69 73 69 62 6c 65 2f 6a 73 64 2c 62 69 6e 64 2c 69 66 72 61 6d 65 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 6c 65 6e 67 74 68 2c 38 35 38 30 39 39 49 4b 57 45 53 56 2c 5f Data Ascii: bject,ontimeout,Content-type,replace,jsd,ffEge4,1069930mcAVaj,navigator,send,readyState,createElement,floor,chlApiSitekey,keys,join,XMLHttpRequest,object,Array,msg,removeChild,/invisible/jsd,bind,iframe,/cdn-cgi/challenge-platform/h/,length,858099IKWESV,_
2024-10-31 00:09:37 UTC	548	IN	Data Raw: 4b 3d 5a 28 34 33 32 29 2c 4c 3d 7b 7d 2c 4c 5b 5a 28 33 36 30 29 5d 3d 68 5b 5a 28 33 37 34 29 5d 5b 5a 28 33 36 30 29 5d 2c 4c 5b 5a 28 34 32 33 29 5d 3d 68 5b 5a 28 33 37 34 29 5d 5b 5a 28 34 32 33 29 5d 2c 4c 5b 5a 28 34 34 32 29 5d 3d 68 5b 5a 28 33 37 34 29 5d 5b 5a 28 34 34 32 29 5d 2c 4c 5b 5a 28 34 30 35 29 5d 3d 68 5b 5a 28 33 37 34 29 5d 5b 5a 28 33 38 36 29 5d 2c 4d 3d 4c 2c 4a 5b 5a 28 34 34 31 29 5d 28 4b 2c 49 2c 21 21 5b 5d 29 2c 4a 5b 5a 28 34 30 32 29 5d 3d 32 35 30 30 2c 4a 5b 5a 28 34 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4a 5b 5a 28 33 37 36 29 5d 28 5a 28 34 36 30 29 2c 5a 28 34 33 33 29 29 2c 4e 3d 7b 7d 2c 4e 5b 5a 28 33 37 39 29 5d 3d 47 2c 4e 5b 5a 28 34 35 34 29 5d 3d 4d 2c 4e 5b 5a 28 34 31 39 29 5d 3d 5a 28 34 Data Ascii: K=Z(432),L={},L[Z(360)]=h[Z(374)][Z(360)],L[Z(423)]=h[Z(374)][Z(423)],L[Z(442)]=h[Z(374)][Z(442)],L[Z(405)]=h[Z(374)][Z(386)],M=L,J[Z(441)](K,I,!![]),J[Z(402)]=2500,J[Z(459)]=function(){},J[Z(376)](Z(460),Z(433)),N={},N[Z(379)]=G,N[Z(454)]=M,N[Z(419)]=Z(4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49759	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	787	OUT	GET /web/7db610c71177e514.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 10727 Connection: close CF-Ray: 8daf6adc1a853ad2-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "df76a9d6070d0e7a2de0f3838d753097" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kdZL85/l8pwomKU/AAhYHQTDYjQO6Z03i7G6E1pXWxtcrgXhkmxqpGKY5943F8TJi9MNGZ2rE8s= x-amz-replication-status: COMPLETED x-amz-request-id: 473HCQPHGS6MV24W x-amz-server-side-encryption: AES256 x-amz-version-id: 0.DpLPZiU0hDRuOvC6JWhW9O21BHFGV5 X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 67 55 70 6c 63 78 70 64 4b 77 63 42 55 42 69 41 4f 51 34 52 4e 25 32 42 67 6f 49 4d 75 6a 44 6c 73 4b 59 46 45 70 4b 30 74 51 34 50 6d 6c 4a 77 49 35 55 51 51 6b 67 43 74 67 79 70 64 4e 4d 5a 49 6c 25 32 46 63 59 57 31 69 75 41 43 77 53 56 73 35 53 31 53 38 68 56 48 52 46 73 62 6d 47 42 6e 66 4d 50 63 51 54 6c 4b 6a 45 68 44 71 6f 43 70 51 78 77 63 53 65 25 32 46 30 41 4d 49 34 68 70 45 35 4c 69 39 66 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=agUplcxpdKwcBUBiAOQ4RN%2BgoIMujDlsKYFEpK0tQ4PmlJwI5UQQkgCtgypdNMZIl%2FcYW1iuACwSVs5S1S8hVHRFsbmGBnfMPcQTlKjEhDqoCpQxwcSe%2F0AMI4hpE5Li9fk%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:38 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 30 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 37 37 34 35 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1505],{/***/ 977452:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 63 68 65 63 6b 65 64 3a 65 2c 61 72 69 61 4c 61 62 65 6c 3a 66 2c 51 65 3a 67 2c 6e 61 6d 65 3a 68 2c 76 61 6c 75 65 3a 6c 2c 6f 6e 43 68 61 6e 67 65 3a 6d 2c 6f 6e 46 6f 63 75 73 3a 71 2c 6f 6e 42 6c 75 72 3a 75 7d 29 7b 63 6f 6e 73 74 20 77 3d 42 3d 3e 7b 6e 75 6c 6c 3d 3d 6d 7c 7c 65 7c 7c 6d 28 6c 2c 42 29 7d 2c 78 3d 6f 46 28 29 2c 41 3d 6f 46 28 29 2c 7a 3d 6f 46 28 29 3b 72 65 74 75 72 6e 20 6c 46 28 5f 5f 63 2e 50 72 2c 7b 6d 61 70 3a 73 47 61 2c 73 66 3a 21 30 2c 63 68 69 6c 64 72 65 6e 3a 28 7b 72 65 66 3a 42 7d 29 3d 3e 6c 46 28 74 47 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 29 3d 3e 7b 76 61 72 20 44 3d 70 46 28 67 2c 42 29 3b 76 61 72 20 47 3d 76 6f 69 64 20 30 21 3d 3d 6c 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 7c 7c 22 6e Data Ascii: checked:e,ariaLabel:f,Qe:g,name:h,value:l,onChange:m,onFocus:q,onBlur:u}){const w=B=>{null==m\|\|e\|\|m(l,B)},x=oF(),A=oF(),z=oF();return lF(__c.Pr,{map:sGa,sf:!0,children:({ref:B})=>lF(tGa,{children:()=>{var D=pF(g,B);var G=void 0!==l?"string"===typeof l\|\|"n
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 73 46 28 4e 3d 3e 7b 76 61 72 20 51 3b 63 6f 6e 73 74 20 61 61 3d 4e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3b 61 61 26 26 28 6e 75 6c 6c 3d 3d 3d 44 7c 7c 76 6f 69 64 20 30 3d 3d 3d 44 3f 30 3a 6e 75 6c 6c 3d 3d 3d 28 51 3d 44 2e 63 75 72 72 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 51 3f 30 3a 51 2e 63 6f 6e 74 61 69 6e 73 28 61 61 29 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 7a 7c 7c 76 6f 69 64 20 30 3d 3d 3d 7a 3f 76 6f 69 64 20 30 3a 7a 28 4e 29 29 7d 2c 5b 7a 5d 29 2c 64 61 3d 73 46 28 4e 3d 3e 7b 76 61 72 20 51 3b 63 6f 6e 73 74 20 61 61 3d 4e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3b 61 61 26 26 28 6e 75 6c 6c 3d 3d 3d 0a 44 7c 7c 76 6f 69 64 20 30 3d 3d 3d 44 3f 30 3a 6e 75 6c 6c 3d 3d 3d 28 51 3d 44 2e 63 75 72 72 65 6e 74 29 7c 7c 76 6f 69 64 Data Ascii: sF(N=>{var Q;const aa=N.relatedTarget;aa&&(null===D\|\|void 0===D?0:null===(Q=D.current)\|\|void 0===Q?0:Q.contains(aa))\|\|(null===z\|\|void 0===z?void 0:z(N))},[z]),da=sF(N=>{var Q;const aa=N.relatedTarget;aa&&(null===D\|\|void 0===D?0:null===(Q=D.current)\|\|void
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3b 48 46 3d 45 46 2e 75 73 65 4d 65 6d 6f 3b 6f 46 3d 45 46 2e 75 73 65 49 64 3b 79 47 61 3d 45 46 2e 43 6f 6d 70 6f 6e 65 6e 74 3b 7a 47 61 3d 45 46 2e 66 6f 72 77 61 72 64 52 65 66 3b 5f 5f 63 2e 41 47 61 3d 45 46 2e 50 75 72 65 43 6f 6d 70 6f 6e 65 6e 74 3b 76 61 72 20 49 46 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2c 42 47 61 3d 49 46 28 39 39 33 38 36 34 29 2c 71 46 3d 49 46 2e 6e 5f 78 28 42 47 61 29 28 29 3b 76 61 72 20 70 46 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 35 38 35 37 39 29 2e 5a 3b 76 61 72 20 43 47 61 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 34 30 32 33 36 29 2e 67 6e 3b 5f 5f 63 2e 48 6d 61 3d 5f 5f 63 2e 45 28 28 29 3d 3e 28 7b 7d 29 29 3b 5f 5f 63 Data Ascii: lement;HF=EF.useMemo;oF=EF.useId;yGa=EF.Component;zGa=EF.forwardRef;__c.AGa=EF.PureComponent;var IF=__webpack_require__,BGa=IF(993864),qF=IF.n_x(BGa)();var pF=__webpack_require__(358579).Z;var CGa=__webpack_require__(240236).gn;__c.Hma=__c.E(()=>({}));__c
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 61 75 74 6f 46 6f 63 75 73 3a 22 61 6c 77 61 79 73 22 2c 2e 2e 2e 68 7d 29 3b 72 65 74 75 72 6e 28 30 2c 5f 5f 63 2e 44 46 29 28 28 7b 6f 62 3a 68 2c 69 73 4c 6f 61 64 69 6e 67 3a 6c 2c 65 72 72 6f 72 3a 6d 2c 6f 6e 53 75 62 6d 69 74 3a 71 2c 48 6e 3a 75 2c 54 6a 3a 77 2c 64 6b 3a 78 2c 78 6d 3a 41 2c 53 6a 3a 7a 7d 29 3d 3e 6c 46 28 45 47 61 2c 7b 69 73 4c 6f 61 64 69 6e 67 3a 6c 2c 65 72 72 6f 72 3a 6d 2c 6a 6c 61 3a 71 2c 66 6f 6f 74 65 72 3a 6d 46 28 5f 5f 63 2e 4e 67 2c 7b 73 70 61 63 69 6e 67 3a 22 32 75 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 41 26 26 6c 46 28 41 2c 7b 7d 29 2c 7a 26 26 6c 46 28 7a 2c 7b 7d 29 2c 6c 46 28 61 2c 7b 6c 6f 61 64 69 6e 67 3a 6c 2c 58 52 3a 75 7d 29 5d 7d 29 2c 69 77 3a 67 2c 6f 62 3a 68 2c 65 61 3a 64 2c 6c 6f 63 61 74 69 Data Ascii: autoFocus:"always",...h});return(0,__c.DF)(({ob:h,isLoading:l,error:m,onSubmit:q,Hn:u,Tj:w,dk:x,xm:A,Sj:z})=>lF(EGa,{isLoading:l,error:m,jla:q,footer:mF(__c.Ng,{spacing:"2u",children:[A&&lF(A,{}),z&&lF(z,{}),lF(a,{loading:l,XR:u})]}),iw:g,ob:h,ea:d,locati
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 64 72 65 6e 3a 5b 6c 46 28 4b 67 2c 7b 74 61 67 4e 61 6d 65 3a 6c 2c 73 69 7a 65 3a 66 2c 77 65 69 67 68 74 3a 65 2c 63 6c 61 73 73 4e 61 6d 65 3a 71 46 28 22 4b 31 76 56 71 77 22 2c 7b 5f 39 5a 5a 75 57 41 3a 62 7d 29 2c 74 6f 6e 65 3a 62 3f 22 74 65 72 74 69 61 72 79 22 3a 22 70 72 69 6d 61 72 79 22 2c 63 68 69 6c 64 72 65 6e 3a 61 7d 29 2c 22 6f 70 74 69 6f 6e 61 6c 22 3d 3d 3d 68 26 26 6c 46 28 4b 67 2c 7b 74 61 67 4e 61 6d 65 3a 22 73 70 61 6e 22 2c 73 69 7a 65 3a 66 2c 77 65 69 67 68 74 3a 65 2c 74 6f 6e 65 3a 22 74 65 72 74 69 61 72 79 22 2c 63 68 69 6c 64 72 65 6e 3a 60 20 24 7b 4a 28 22 6c 6b 54 48 33 67 22 29 7d 60 7d 29 5d 7d 29 7d 3b 5f 5f 63 2e 4f 46 3d 28 30 2c 5f 5f 63 2e 44 46 29 28 66 75 6e 63 74 69 6f 6e 28 7b 6c 61 62 65 6c 3a 61 2c 75 Data Ascii: dren:[lF(Kg,{tagName:l,size:f,weight:e,className:qF("K1vVqw",{_9ZZuWA:b}),tone:b?"tertiary":"primary",children:a}),"optional"===h&&lF(Kg,{tagName:"span",size:f,weight:e,tone:"tertiary",children:` ${J("lkTH3g")}`})]})};__c.OF=(0,__c.DF)(function({label:a,u
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 2e 2e 62 29 3b 61 2e 4f 28 74 68 69 73 29 7d 67 65 74 20 6f 6e 43 6c 69 63 6b 28 29 7b 63 6f 6e 73 74 20 62 3d 0a 74 68 69 73 2e 70 72 6f 70 73 2e 73 65 6c 65 63 74 65 64 2c 63 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 70 74 69 6f 6e 2c 64 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 43 68 61 6e 67 65 3b 72 65 74 75 72 6e 20 65 3d 3e 21 62 26 26 28 6e 75 6c 6c 3d 3d 3d 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 28 63 2e 76 61 6c 75 65 2c 65 29 29 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 20 62 3d 74 68 69 73 2e 70 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 2c 63 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 70 74 69 6f 6e 2c 64 3d 74 68 69 73 2e 70 72 6f 70 73 2e 56 55 2c 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 63 6c 61 73 73 4e 61 6d 65 2c 66 3d Data Ascii: ..b);a.O(this)}get onClick(){const b=this.props.selected,c=this.props.option,d=this.props.onChange;return e=>!b&&(null===d\|\|void 0===d?void 0:d(c.value,e))}render(){const b=this.props.disabled,c=this.props.option,d=this.props.VU,e=this.props.className,f=
2024-10-31 00:09:38 UTC	1315	IN	Data Raw: 4e 3a 4d 3d 3d 3d 47 29 3f 75 3a 76 6f 69 64 20 30 2c 4e 3f 42 3a 76 6f 69 64 20 30 29 3b 72 65 74 75 72 6e 20 6c 46 28 50 46 2c 7b 64 69 73 61 62 6c 65 64 3a 64 2c 73 65 6c 65 63 74 65 64 3a 4e 2c 6f 70 74 69 6f 6e 3a 4d 2c 56 55 3a 64 61 2c 63 6c 61 73 73 4e 61 6d 65 3a 4d 2e 63 6c 61 73 73 4e 61 6d 65 2c 51 65 3a 51 2c 6f 6e 43 68 61 6e 67 65 3a 77 2c 6f 6e 46 6f 63 75 73 3a 78 2c 6f 6e 42 6c 75 72 3a 41 7d 2c 54 29 7d 29 7d 29 7d 29 7d 29 3b 76 61 72 20 51 46 3d 28 29 3d 3e 7b 5f 5f 63 2e 5a 66 2e 54 6e 28 22 6b 65 79 62 6f 61 72 64 22 29 7d 2c 73 47 61 3d 5b 5b 22 41 72 72 6f 77 55 70 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 44 6f 77 6e 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 4c 65 66 74 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 52 69 67 68 74 22 2c 51 46 Data Ascii: N:M===G)?u:void 0,N?B:void 0);return lF(PF,{disabled:d,selected:N,option:M,VU:da,className:M.className,Qe:Q,onChange:w,onFocus:x,onBlur:A},T)})})})});var QF=()=>{__c.Zf.Tn("keyboard")},sGa=[["ArrowUp",QF],["ArrowDown",QF],["ArrowLeft",QF],["ArrowRight",QF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49760	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	615	OUT	GET /web/64de167a16d42d85.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:37 GMT Content-Type: text/javascript Content-Length: 1515 Connection: close CF-Ray: 8daf6adc1d1c315c-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75248 Cache-Control: public, max-age=31556926 ETag: "46a95c34b63209ec7a7a407521d6caf4" Expires: Fri, 31 Oct 2025 05:58:23 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: egPMN1OAMjB6o9U2CPnekj1cyHzxlLwDcKHxeCah8aH560fgiOVVnIHkiIpZsyajBIF8Hg0icN4= x-amz-replication-status: COMPLETED x-amz-request-id: 473MXRYFPVWG5CDR x-amz-server-side-encryption: AES256 x-amz-version-id: NmgB0UcXunXAz0jKmhVjEtu7ZEgM1lFn X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6f 33 65 53 33 4e 4b 59 68 35 43 6c 4b 54 36 72 31 5a 42 79 71 4d 45 6f 4d 6e 66 75 33 74 50 25 32 46 43 6d 68 75 70 4d 37 42 73 72 74 6c 5a 7a 61 6b 77 74 61 4b 4e 42 78 35 76 56 63 6d 6d 6d 5a 67 53 65 48 76 5a 47 53 6f 25 32 46 39 50 5a 43 34 48 50 42 45 39 6b 4c 4c 55 32 31 32 4e 54 53 78 62 74 36 32 77 51 67 72 52 70 42 76 5a 49 39 42 34 54 61 25 32 46 4b 38 4a 38 53 59 53 59 46 6e 35 65 25 32 42 4e 4a 6c 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o3eS3NKYh5ClKT6r1ZByqMEoMnfu3tP%2FCmhupM7BsrtlZzakwtaKNBx5vVcmmmZgSeHvZGSo%2F9PZC4HPBE9kLLU212NTSxbt62wQgrRpBvZI9B4Ta%2FK8J8SYSYFn5e%2BNJls%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:38 UTC	1197	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 33 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 31 36 34 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 65 34 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1032],{/***/ 9164:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._fe4
2024-10-31 00:09:38 UTC	318	IN	Data Raw: 3d 45 28 28 29 3d 3e 28 7b 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 2c 22 45 52 52 4f 52 22 29 2c 72 65 71 75 65 73 74 49 64 3a 53 28 31 29 2c 65 72 72 6f 72 73 3a 5f 5f 63 2e 76 28 32 2c 6e 47 61 29 7d 29 29 3b 5f 5f 63 2e 4b 43 61 3d 5f 5f 63 2e 6f 62 28 28 29 3d 3e 28 7b 74 79 70 65 3a 5b 31 2c 5f 5f 63 2e 6a 46 2c 32 2c 6f 47 61 5d 7d 29 2c 28 29 3d 3e 28 7b 7d 29 29 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 2c 0a 0a 2f 2a 2a 2a 2f 20 32 39 33 37 36 33 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 39 31 36 34 29 2c 0a 0a 2f 2a 2a 2a 2f 20 33 30 34 36 36 34 3a 0a 28 5f 2c 20 5f 5f 2c 20 72 29 20 3d 3e 20 72 28 39 31 36 Data Ascii: =E(()=>({type:p("A?",2,"ERROR"),requestId:S(1),errors:__c.v(2,nGa)}));__c.KCa=__c.ob(()=>({type:[1,__c.jF,2,oGa]}),()=>({}));}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);},/*/ 293763:(_, __, r) => r(9164),/*/ 304664:(_, __, r) => r(916

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49761	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:37 UTC	660	OUT	GET /chunk-batch/778ac51ce098c575.strings.js+899bf0e7605d8095.js HTTP/1.1 Host: chunk-composing.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1148	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 11002 Connection: close CF-Ray: 8daf6adcbb2f699c-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 16790 Cache-Control: public, max-age=31556926 Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Fri, 13 Sep 2024 01:56:43 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static Timing-Allow-Origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 14 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: h2w9FVJm1cgLr9GdKRk5Dcn3ZC3/es4WT0gVMoP0jhaNUKQGVKDvTjq29o6UkRsyDHPs4U7Jv8g= x-amz-replication-status: COMPLETED x-amz-request-id: 1NQ6A8DM4SJJC1DN x-amz-server-side-encryption: AES256 x-amz-version-id: uUw0HFvKWUp4vHKdUVdIoBsUDeU6AdT6 X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	362	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 65 39 37 53 51 49 49 34 33 49 59 6e 25 32 42 6e 47 48 59 76 59 55 70 45 4a 77 64 53 30 6a 43 42 68 25 32 46 6c 71 6d 66 62 34 35 59 66 6f 32 4b 37 4b 6b 37 67 6c 79 43 4b 4c 5a 4e 59 38 32 59 37 6b 63 50 70 73 38 39 6e 45 66 45 77 54 59 46 51 66 50 53 66 4f 46 7a 50 71 6c 52 57 4d 79 7a 43 35 33 50 52 35 25 32 46 52 36 49 31 53 73 66 44 38 4b 31 39 77 42 64 31 48 45 51 7a 4e 36 42 4e 61 54 34 38 6b 75 71 35 69 51 61 43 73 37 77 57 66 32 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3e97SQII43IYn%2BnGHYvYUpEJwdS0jCBh%2Flqmfb45Yfo2K7Kk7glyCKLZNY82Y7kcPps89nEfEwTYFQfPSfOFzPqlRWMyzC53PR5%2FR6I1SsfD8K19wBd1HEQzN6BNaT48kuq5iQaCs7wWf2s%3D"}],"group":"cf-nel","max
2024-10-31 00:09:38 UTC	1228	IN	Data Raw: 3b 2f 2f 20 5f 5f 46 49 4c 45 5f 43 4f 4e 54 45 4e 54 5f 46 4f 52 5f 5f 3a 37 37 38 61 63 35 31 63 65 30 39 38 63 35 37 35 2e 73 74 72 69 6e 67 73 2e 6a 73 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 58 59 7a 33 43 41 5c 22 3a 5c 22 49 66 20 79 6f 75 20 64 6f 6e e2 80 99 74 20 6b 6e 6f 77 20 79 6f 75 72 20 5a 50 45 20 65 6d 61 69 6c 2c 20 70 6c 65 61 73 65 20 61 73 6b 20 79 6f 75 72 20 73 63 68 6f 6f 6c 20 61 64 6d 69 6e 2e 5c 22 2c 5c 22 7a 43 45 54 34 77 5c 22 3a 5c 22 57 65 e2 80 99 6c 6c 20 63 68 65 63 6b 20 69 66 20 79 6f 75 20 61 6c 72 65 61 64 79 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 2e 20 59 6f 75 20 63 61 6e e2 80 99 74 20 73 69 67 6e 20 Data Ascii: ;// __FILE_CONTENT_FOR__:778ac51ce098c575.strings.js(function() { const messages = JSON.parse("{\"XYz3CA\":\"If you dont know your ZPE email, please ask your school admin.\",\"zCET4w\":\"Well check if you already have an account. You cant sign
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 20 69 6e 2e 5c 22 2c 5c 22 55 51 6b 7a 73 77 5c 22 3a 5c 22 57 65 20 63 6f 75 6c 64 6e e2 80 99 74 20 6c 6f 67 20 79 6f 75 20 69 6e 20 76 69 61 20 53 53 4f 20 6f 6e 20 74 68 69 73 20 70 61 67 65 2e 20 50 6c 65 61 73 65 20 67 6f 20 74 6f 20 74 68 65 20 3c 61 20 68 72 65 66 3d 5c 5c 5c 22 2f 6c 6f 67 69 6e 5c 5c 5c 22 20 74 61 72 67 65 74 3d 5c 5c 5c 22 5f 62 6c 61 6e 6b 5c 5c 5c 22 20 72 65 6c 3d 5c 5c 5c 22 6e 6f 6f 70 65 6e 65 72 5c 5c 5c 22 3e 43 61 6e 76 61 20 6c 6f 67 69 6e 20 70 61 67 65 3c 2f 61 3e 20 61 6e 64 20 74 72 79 20 69 6e 73 74 65 61 64 2e 5c 22 2c 5c 22 75 58 36 53 79 51 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 6d 6f 62 69 6c 65 20 6f 72 20 65 6d 61 69 6c 5c 22 2c 5c 22 79 68 33 6c 38 41 5c 22 3a 5c 22 4c 65 74 20 75 73 20 Data Ascii: in.\",\"UQkzsw\":\"We couldnt log you in via SSO on this page. Please go to the <a href=\\\"/login\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Canva login page</a> and try instead.\",\"uX6SyQ\":\"Continue with mobile or email\",\"yh3l8A\":\"Let us
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 20 7c 7c 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 5f 63 29 20 7b 76 61 72 20 4b 68 3d 5f 5f 63 2e 4b 68 3b 76 61 72 20 4a 3d 5f 5f 63 2e 4a 3b 76 61 72 20 6e 3d 5f 5f 63 2e 6e 3b 0a 76 61 72 20 50 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 59 2e 74 72 61 63 6b 28 4f 70 62 2c 7b 73 6f 75 72 63 65 3a 61 2e 73 6f 75 72 63 65 2c 6d 6f 64 65 3a 62 7d 29 7d 2c 55 70 62 3d 66 75 6e 63 74 69 6f 6e 28 7b 48 3a 61 2c 6e 68 3a 62 2c 6f 62 3a 63 2c 4f 61 3a 64 2c 73 74 6f 72 65 3a 65 2c 64 75 3a 66 2c 70 69 61 3a 67 7d 29 7b 72 65 74 75 72 6e 20 73 38 28 28 29 3d 3e 7b 51 70 62 28 28 29 3d 3e 7b 5f 5f 63 2e 56 65 28 61 2c 7b 4c 61 3a 60 63 6f 6e 74 69 6e 75 65 5f 77 69 74 68 5f 24 7b 52 70 62 5b 65 2e 50 62 2e 52 68 5d 7d 60 2c 6c 6f 63 61 74 69 6f Data Ascii: \|\| {};(function(__c) {var Kh=__c.Kh;var J=__c.J;var n=__c.n;var Ppb=function(a,b){a.Y.track(Opb,{source:a.source,mode:b})},Upb=function({H:a,nh:b,ob:c,Oa:d,store:e,du:f,pia:g}){return s8(()=>{Qpb(()=>{__c.Ve(a,{La:`continue_with_${Rpb[e.Pb.Rh]}`,locatio
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 62 6f 22 2c 5b 31 39 5d 3a 22 71 71 22 2c 5b 32 5d 3a 22 61 74 6c 61 73 73 69 61 6e 22 2c 5b 38 5d 3a 22 67 6f 6f 67 6c 65 61 64 73 22 2c 5b 34 5d 3a 22 64 72 6f 70 62 6f 78 22 2c 5b 36 5d 3a 22 67 69 74 68 75 62 22 2c 5b 39 5d 3a 22 67 6f 6f 67 6c 65 61 70 70 6c 69 63 65 6e 73 69 6e 67 22 2c 5b 31 30 5d 3a 22 67 6f 6f 67 6c 65 5f 64 61 74 61 5f 77 6f 72 6b 66 6c 6f 77 73 22 2c 5b 31 31 5d 3a 22 69 6e 73 74 61 67 72 61 6d 22 2c 5b 31 33 5d 3a 22 6c 61 72 6b 22 2c 5b 31 35 5d 3a 22 6c 69 6e 6b 65 64 69 6e 22 2c 5b 31 36 5d 3a 22 6d 61 69 6c 63 68 69 6d 70 22 2c 5b 31 38 5d 3a 22 70 69 6e 74 65 72 65 73 74 22 2c 5b 32 31 5d 3a 22 74 72 65 6c 6c 6f 22 2c 5b 32 32 5d 3a 22 74 75 6d 62 6c 72 22 2c 5b 32 33 5d 3a 22 74 77 69 74 74 65 72 22 2c 5b 32 30 5d 3a 22 Data Ascii: bo",[19]:"qq",[2]:"atlassian",[8]:"googleads",[4]:"dropbox",[6]:"github",[9]:"googleapplicensing",[10]:"google_data_workflows",[11]:"instagram",[13]:"lark",[15]:"linkedin",[16]:"mailchimp",[18]:"pinterest",[21]:"trello",[22]:"tumblr",[23]:"twitter",[20]:"
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 3d 3e 74 38 28 5f 5f 63 2e 52 6c 2c 7b 68 65 61 64 69 6e 67 3a 65 2c 50 61 3a 66 2c 79 61 3a 61 2e 68 70 3f 76 6f 69 64 20 30 3a 62 2c 6f 47 3a 4a 28 22 32 42 57 2b 6d 51 22 29 7d 29 7d 2c 66 71 62 3d 28 61 2c 62 29 3d 3e 7b 73 77 69 74 63 68 28 61 2e 74 79 70 65 29 7b 63 61 73 65 20 22 44 45 46 41 55 4c 54 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 62 3b 63 61 73 65 20 22 4f 41 55 54 48 5f 4c 49 4e 4b 49 4e 47 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4a 28 22 79 68 33 6c 38 41 22 29 3b 63 61 73 65 20 22 42 45 4c 41 4a 41 52 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4a 28 22 43 49 43 69 2f 67 22 29 3b 63 61 73 65 20 22 57 4f 52 4b 5f 45 4d 41 49 4c 5f 48 45 41 44 49 4e 47 22 3a 72 65 74 75 72 6e 20 4a 28 22 5a 4f 73 67 53 51 22 Data Ascii: =>t8(__c.Rl,{heading:e,Pa:f,ya:a.hp?void 0:b,oG:J("2BW+mQ")})},fqb=(a,b)=>{switch(a.type){case "DEFAULT_HEADING":return b;case "OAUTH_LINKING_HEADING":return J("yh3l8A");case "BELAJAR_HEADING":return J("CICi/g");case "WORK_EMAIL_HEADING":return J("ZOsgSQ"
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 74 68 69 73 2e 42 2e 44 69 2e 59 74 28 7b 73 74 6f 72 65 3a 62 2e 50 62 2c 0a 4a 3a 63 7d 29 3b 69 66 28 6c 2e 6f 6b 29 7b 76 61 72 20 64 3d 5f 5f 63 2e 6e 53 28 6c 2e 76 61 6c 75 65 29 3b 50 70 62 28 74 68 69 73 2e 42 2e 48 2c 59 70 62 28 64 29 29 3b 62 2e 71 65 2e 47 65 2e 76 61 6c 75 65 3d 62 2e 50 62 2e 76 61 6c 75 65 3b 62 2e 71 65 2e 47 65 2e 55 61 3d 62 2e 50 62 2e 55 61 3b 76 61 72 20 65 3d 61 77 61 69 74 20 5f 5f 63 2e 75 69 28 7b 71 67 3a 7b 61 63 74 69 6f 6e 3a 31 33 2c 64 67 3a 6e 65 77 20 5f 5f 63 2e 44 69 28 7b 69 64 65 6e 74 69 74 79 3a 5f 5f 63 2e 53 53 28 64 29 7d 29 7d 2c 45 62 3a 74 68 69 73 2e 45 62 2c 75 73 61 67 65 3a 22 63 6f 6e 74 69 6e 75 65 57 69 74 68 41 63 63 6f 75 6e 74 50 61 6e 65 6c 50 72 65 73 65 6e 74 65 72 2e 63 6f 6e 74 Data Ascii: this.B.Di.Yt({store:b.Pb,J:c});if(l.ok){var d=__c.nS(l.value);Ppb(this.B.H,Ypb(d));b.qe.Ge.value=b.Pb.value;b.qe.Ge.Ua=b.Pb.Ua;var e=await __c.ui({qg:{action:13,dg:new __c.Di({identity:__c.SS(d)})},Eb:this.Eb,usage:"continueWithAccountPanelPresenter.cont
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 69 5b 30 5d 3b 5f 5f 63 2e 52 53 28 78 29 3f 73 65 74 54 69 6d 65 6f 75 74 28 61 73 79 6e 63 28 29 3d 3e 7b 74 68 69 73 2e 47 28 61 2c 7b 6b 69 6e 64 3a 30 7d 29 3b 61 77 61 69 74 20 74 68 69 73 2e 42 2e 51 6c 28 5f 5f 63 2e 4d 69 5b 78 5d 2c 30 3d 3d 3d 62 2e 6b 69 6e 64 3f 62 2e 65 6d 61 69 6c 3a 76 6f 69 64 20 30 2c 21 31 29 7d 29 3a 28 74 68 69 73 2e 42 2e 44 2e 65 72 72 6f 72 28 22 52 65 63 65 69 76 65 64 20 61 6e 20 75 6e 73 75 70 70 6f 72 74 65 64 20 70 6c 61 74 66 6f 72 6d 22 2c 7b 65 78 74 72 61 3a 6e 65 77 20 4d 61 70 28 5b 5b 22 70 6c 61 74 66 6f 72 6d 22 2c 5a 70 62 5b 78 5d 5d 5d 29 7d 29 2c 0a 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 65 74 53 74 61 74 75 73 28 22 65 72 72 6f 72 22 29 2c 74 Data Ascii: i[0];__c.RS(x)?setTimeout(async()=>{this.G(a,{kind:0});await this.B.Ql(__c.Mi[x],0===b.kind?b.email:void 0,!1)}):(this.B.D.error("Received an unsupported platform",{extra:new Map([["platform",Zpb[x]]])}),null===e\|\|void 0===e?void 0:e.setStatus("error"),t
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 44 5f 50 41 4e 45 4c 22 2c 76 6f 69 64 20 30 2c 7b 73 74 6f 72 65 3a 61 2c 4a 3a 65 7d 29 3b 74 68 69 73 2e 47 28 61 2c 7b 6b 69 6e 64 3a 30 7d 29 3b 62 72 65 61 6b 7d 6c 2e 66 73 3f 61 77 61 69 74 20 4b 68 28 74 68 69 73 2e 42 2e 4c 2c 22 41 43 43 4f 55 4e 54 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 5f 53 49 47 4e 55 50 5f 50 41 4e 45 4c 22 2c 7b 54 63 3a 71 3f 67 3a 76 6f 69 64 20 30 2c 78 62 3a 68 2c 47 61 3a 62 7d 2c 7b 73 74 6f 72 65 3a 61 2c 4a 3a 65 7d 29 3a 61 77 61 69 74 20 4b 68 28 74 68 69 73 2e 42 2e 4c 2c 22 53 49 47 4e 55 50 5f 43 4f 44 45 5f 56 45 52 49 46 49 43 41 54 49 4f 4e 5f 50 41 4e 45 4c 22 2c 7b 47 61 3a 62 2c 78 62 3a 68 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 76 6f 69 64 20 30 2c 4e 63 3a 76 6f 69 64 20 30 2c 24 63 3a 76 6f 69 64 20 30 Data Ascii: D_PANEL",void 0,{store:a,J:e});this.G(a,{kind:0});break}l.fs?await Kh(this.B.L,"ACCOUNT_INFORMATION_SIGNUP_PANEL",{Tc:q?g:void 0,xb:h,Ga:b},{store:a,J:e}):await Kh(this.B.L,"SIGNUP_CODE_VERIFICATION_PANEL",{Ga:b,xb:h,displayName:void 0,Nc:void 0,$c:void 0
2024-10-31 00:09:38 UTC	191	IN	Data Raw: 4d 3a 21 30 7d 29 3a 75 2c 73 74 6f 72 65 3a 63 7d 7d 7d 3b 0a 7d 29 2e 63 61 6c 6c 28 73 65 6c 66 2c 20 73 65 6c 66 2e 5f 66 65 34 64 39 39 65 62 65 30 64 32 64 32 35 39 36 34 36 61 38 30 64 32 35 30 31 35 30 64 34 37 29 3b 7d 0a 0a 7d 5d 29 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 63 68 75 6e 6b 2d 63 6f 6d 70 6f 73 69 6e 67 2e 63 61 6e 76 61 2e 63 6f 6d 2f 63 68 75 6e 6b 2d 62 61 74 63 68 2d 73 6d 2f 39 2b 32 32 5f 73 6f 75 72 63 65 6d 61 70 73 2f 38 39 39 62 66 30 65 37 36 30 35 64 38 30 39 35 2e 6a 73 2e 6d 61 70 Data Ascii: M:!0}):u,store:c}}};}).call(self, self._fe4d99ebe0d2d259646a80d250150d47);}}])//# sourceMappingURL=https://chunk-composing.canva.com/chunk-batch-sm/9+22_sourcemaps/899bf0e7605d8095.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49757	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	615	OUT	GET /web/2359b9fab9478cec.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 16541 Connection: close CF-Ray: 8daf6ade09bc6b44-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "bc7c8830d463c88348fa070b1100ac08" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 9EuBRRQKVh0DhD4f9TF4RwpnX9zaLl6cVFj1SHI6gRlbA3SwdLlaqnP9M27Uv6bzAkJOldEaRlw= x-amz-replication-status: COMPLETED x-amz-request-id: 473HK83TKF5FZAV0 x-amz-server-side-encryption: AES256 x-amz-version-id: yhtb7B4KnNnpfU0jfealcDy0D__8yIYd X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	348	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 35 53 7a 70 43 46 55 76 31 54 39 4e 41 54 7a 70 36 33 4a 38 57 44 68 55 43 52 39 4e 55 54 63 48 25 32 42 41 57 41 7a 51 69 4d 61 74 68 79 6c 51 79 36 41 48 53 59 49 33 36 41 69 44 35 4b 6d 62 50 77 71 56 52 33 36 45 47 56 4f 4c 68 57 51 38 6b 7a 56 35 72 75 4d 61 66 30 73 56 7a 65 4e 56 25 32 42 41 38 41 41 4c 76 36 69 70 53 6c 67 66 30 33 50 41 68 5a 65 63 71 56 4b 4a 32 30 46 63 73 46 53 62 34 6c 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5SzpCFUv1T9NATzp63J8WDhUCR9NUTcH%2BAWAzQiMathylQy6AHSYI36AiD5KmbPwqVR36EGVOLhWQ8kzV5ruMaf0sVzeNV%2BA8AALv6ipSlgf03PAhZecqVKJ20FcsFSb4l8%3D"}],"group":"cf-nel","max_age":604800}
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 32 37 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 37 37 34 32 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2527],{/***/ 277425:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 2e 6d 61 70 28 28 5b 63 2c 64 5d 29 3d 3e 28 7b 6b 65 79 3a 63 2c 76 61 6c 75 65 3a 4b 51 28 64 29 7d 29 29 7d 7d 3a 7b 7d 7d 3b 54 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 6e 65 77 20 4d 61 70 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 6f 66 20 61 29 61 3d 62 2e 67 65 74 28 63 2e 53 69 29 2c 61 7c 7c 28 61 3d 5b 5d 2c 62 2e 73 65 74 28 63 2e 53 69 2c 61 29 29 2c 61 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 4e 51 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 28 61 29 2f 31 45 33 3b 61 3d 4d 61 74 68 2e 74 72 75 6e 63 28 62 29 3b 62 3d 4e 75 6d 62 65 72 28 28 62 2d 61 29 2e 74 6f 46 69 78 65 64 28 39 29 29 2a 4d 51 3b 6c 65 74 20 5b 63 2c 64 5d 3d 5b 61 2c 62 5d 3b 64 3e 4d 51 26 26 28 64 2d 3d 4d 51 2c 63 Data Ascii: .map(([c,d])=>({key:c,value:KQ(d)}))}}:{}};TTa=function(a){const b=new Map;for(const c of a)a=b.get(c.Si),a\|\|(a=[],b.set(c.Si,a)),a.push(c);return b};NQ=function(a,b){b=b(a)/1E3;a=Math.trunc(b);b=Number((b-a).toFixed(9))*MQ;let [c,d]=[a,b];d>MQ&&(d-=MQ,c
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 5d 29 3b 5f 5f 63 2e 53 51 3d 46 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 5d 29 3b 5f 5f 63 2e 54 51 3d 45 28 28 29 3d 3e 28 7b 79 65 61 72 3a 52 28 31 29 2c 6d 6f 6e 74 68 3a 52 28 32 29 2c 64 61 79 3a 52 28 33 29 7d 29 29 3b 5f 5f 63 2e 55 51 3d 46 28 28 29 3d 3e 5b 31 2c 32 2c 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 32 2c 31 33 2c 31 34 2c 31 35 2c 31 36 2c 31 37 2c 31 38 2c 31 39 5d 2c 31 29 3b 5f 5f 63 2e 56 51 3d 46 28 28 29 3d 3e 5b 30 2c 31 2c 32 2c 33 2c 34 2c 35 2c 36 5d 29 3b 55 54 61 3d 46 28 28 29 3d 3e 5b 31 Data Ascii: (()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16]);__c.SQ=F(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15]);__c.TQ=E(()=>({year:R(1),month:R(2),day:R(3)}));__c.UQ=F(()=>[1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19],1);__c.VQ=F(()=>[0,1,2,3,4,5,6]);UTa=F(()=>[1
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 2c 63 6a 61 3a 71 72 28 36 29 7d 29 29 3b 0a 5f 5f 63 2e 6e 52 3d 45 28 28 29 3d 3e 28 7b 61 70 70 49 64 3a 53 28 31 29 2c 54 53 3a 50 28 32 29 2c 61 31 3a 74 72 28 33 29 2c 73 72 61 3a 74 72 28 34 29 7d 29 29 3b 24 54 61 3d 46 28 28 29 3d 3e 5b 31 2c 32 2c 33 5d 29 3b 5f 5f 63 2e 6f 52 3d 45 28 28 29 3d 3e 28 7b 64 6f 63 74 79 70 65 3a 79 28 31 2c 24 54 61 29 2c 64 62 61 3a 56 28 32 29 7d 29 29 3b 70 52 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 34 33 37 36 33 29 3b 71 52 3d 70 52 2e 6a 73 78 3b 72 52 3d 70 52 2e 6a 73 78 73 3b 61 55 61 3d 70 52 2e 46 72 61 67 6d 65 6e 74 3b 76 61 72 20 73 52 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 38 37 35 36 30 34 29 2c 74 52 3d 73 52 2e 75 73 65 45 66 66 65 63 74 2c 62 55 Data Ascii: ,cja:qr(6)}));__c.nR=E(()=>({appId:S(1),TS:P(2),a1:tr(3),sra:tr(4)}));$Ta=F(()=>[1,2,3]);__c.oR=E(()=>({doctype:y(1,$Ta),dba:V(2)}));pR=__webpack_require__(443763);qR=pR.jsx;rR=pR.jsxs;aUa=pR.Fragment;var sR=__webpack_require__(875604),tR=sR.useEffect,bU
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 53 54 59 4c 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 76 61 72 20 66 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 30 2c 22 54 48 45 4d 45 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 5f 5f 63 2e 48 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 31 2c 22 43 4f 4c 4c 41 42 4f 52 41 54 4f 52 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 5f 5f 63 2e 49 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 32 32 2c 22 44 45 45 50 5f 43 41 54 45 47 4f 52 59 5f 50 52 45 46 45 52 45 4e 43 45 22 29 2c 41 Data Ascii: STYLE_PREFERENCE"),Sc:v(11,DR)}));var fUa=E(()=>({...uR(),type:p("A?",20,"THEME_PREFERENCE"),Sc:v(11,DR)}));__c.HR=E(()=>({...uR(),type:p("A?",21,"COLLABORATOR_PREFERENCE"),Sc:v(11,DR)}));__c.IR=E(()=>({...uR(),type:p("A?",22,"DEEP_CATEGORY_PREFERENCE"),A
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 33 31 2c 22 43 41 54 45 47 4f 52 59 5f 50 55 42 4c 49 53 48 5f 50 52 4f 46 49 4c 45 22 29 2c 71 61 61 3a 76 28 31 32 2c 53 52 29 7d 29 29 3b 76 61 72 20 6e 55 61 3d 45 28 28 29 3d 3e 28 7b 73 75 62 6a 65 63 74 3a 79 28 31 2c 5f 5f 63 2e 52 51 29 2c 76 61 6c 75 65 3a 50 28 32 29 7d 29 29 3b 76 61 72 20 6f 55 61 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 33 32 2c 22 54 45 41 43 48 45 52 5f 53 55 42 4a 45 43 54 5f 50 52 4f 46 49 4c 45 22 29 2c 55 51 61 3a 76 28 31 31 2c 6e 55 61 29 7d 29 29 3b 5f 5f 63 2e 54 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 33 33 2c 22 42 52 41 4e 44 5f 53 45 41 54 5f 45 58 Data Ascii: >({...uR(),type:p("A?",31,"CATEGORY_PUBLISH_PROFILE"),qaa:v(12,SR)}));var nUa=E(()=>({subject:y(1,__c.RQ),value:P(2)}));var oUa=E(()=>({...uR(),type:p("A?",32,"TEACHER_SUBJECT_PROFILE"),UQa:v(11,nUa)}));__c.TR=E(()=>({...uR(),type:p("A?",33,"BRAND_SEAT_EX
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 50 52 4f 50 45 4e 53 49 54 59 5f 54 4f 5f 42 45 43 4f 4d 45 5f 50 41 49 44 22 29 2c 64 54 3a 50 28 31 31 29 2c 48 50 3a 43 28 31 32 2c 65 52 29 2c 6d 4f 3a 43 28 31 33 2c 65 52 29 2c 6f 4f 3a 43 28 31 34 2c 65 52 29 2c 49 50 3a 74 72 28 31 35 29 2c 6e 4f 3a 74 72 28 31 36 29 2c 70 4f 3a 74 72 28 31 37 29 7d 29 29 3b 5f 5f 63 2e 59 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 34 35 2c 22 50 52 4f 50 45 4e 53 49 54 59 5f 54 4f 5f 53 48 41 52 45 22 29 2c 41 6e 61 3a 50 28 31 31 29 7d 29 29 3b 5f 5f 63 2e 5a 52 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 34 36 2c 22 54 4f 4f 4c 54 49 50 5f 45 4e 47 41 47 45 4d 45 4e 54 5f 53 43 4f 52 45 22 29 2c 4b 71 61 3a 50 28 31 31 29 Data Ascii: PROPENSITY_TO_BECOME_PAID"),dT:P(11),HP:C(12,eR),mO:C(13,eR),oO:C(14,eR),IP:tr(15),nO:tr(16),pO:tr(17)}));__c.YR=E(()=>({...uR(),type:p("A?",45,"PROPENSITY_TO_SHARE"),Ana:P(11)}));__c.ZR=E(()=>({...uR(),type:p("A?",46,"TOOLTIP_ENGAGEMENT_SCORE"),Kqa:P(11)
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 22 2c 35 38 2c 22 43 41 4e 56 41 56 45 52 53 41 52 59 5f 50 52 4f 46 49 4c 45 22 29 2c 52 59 3a 71 72 28 31 31 29 2c 52 63 61 3a 71 72 28 31 32 29 2c 62 64 61 3a 71 72 28 31 33 29 2c 71 6b 61 3a 52 28 31 34 29 2c 75 63 61 3a 52 28 31 35 29 2c 73 64 61 3a 71 72 28 31 36 29 2c 42 66 61 3a 71 72 28 31 37 29 2c 6c 68 61 3a 50 28 31 38 29 2c 6b 61 61 3a 79 28 31 39 2c 5f 5f 63 2e 61 52 29 7d 29 29 3b 5f 5f 63 2e 62 53 3d 45 28 28 29 3d 3e 28 7b 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 5f 5f 63 2e 63 53 3d 45 28 28 29 3d 3e 28 7b 53 63 3a 76 28 31 31 2c 44 52 29 7d 29 29 3b 5f 5f 63 2e 64 53 3d 45 28 28 29 3d 3e 28 7b 2e 2e 2e 75 52 28 29 2c 74 79 70 65 3a 70 28 22 41 3f 22 2c 35 39 2c 22 44 49 52 45 43 54 49 4f 4e 41 4c 5f 43 4f 4c 4c 41 42 4f 52 41 54 4f Data Ascii: ",58,"CANVAVERSARY_PROFILE"),RY:qr(11),Rca:qr(12),bda:qr(13),qka:R(14),uca:R(15),sda:qr(16),Bfa:qr(17),lha:P(18),kaa:y(19,__c.aR)}));__c.bS=E(()=>({Sc:v(11,DR)}));__c.cS=E(()=>({Sc:v(11,DR)}));__c.dS=E(()=>({...uR(),type:p("A?",59,"DIRECTIONAL_COLLABORATO
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 30 2c 5f 5f 63 2e 41 72 29 28 31 31 29 7d 29 29 3b 76 61 72 20 66 53 3d 46 28 28 29 3d 3e 5b 31 2c 7b 41 61 3a 21 30 7d 2c 32 2c 7b 41 61 3a 21 30 7d 2c 33 2c 7b 41 61 3a 21 30 7d 2c 34 2c 7b 41 61 3a 21 30 7d 2c 35 2c 7b 41 61 3a 21 30 7d 2c 36 2c 7b 41 61 3a 21 30 7d 2c 37 2c 7b 41 61 3a 21 30 7d 2c 38 2c 7b 41 61 3a 21 30 7d 2c 39 2c 7b 41 61 3a 21 30 7d 2c 31 30 2c 7b 41 61 3a 21 30 7d 2c 31 31 2c 7b 41 61 3a 21 30 7d 2c 31 32 2c 7b 41 61 3a 21 30 7d 2c 31 33 2c 7b 41 61 3a 21 30 7d 2c 31 34 2c 7b 41 61 3a 21 30 7d 2c 31 35 2c 7b 41 61 3a 21 30 7d 2c 31 36 2c 7b 41 61 3a 21 30 7d 2c 31 37 2c 7b 41 61 3a 21 30 7d 2c 31 38 2c 7b 41 61 3a 21 30 7d 2c 31 39 2c 7b 41 61 3a 21 30 7d 2c 32 30 2c 7b 41 61 3a 21 30 7d 2c 32 31 2c 7b 41 61 3a 21 30 7d 2c 32 Data Ascii: (0,__c.Ar)(11)}));var fS=F(()=>[1,{Aa:!0},2,{Aa:!0},3,{Aa:!0},4,{Aa:!0},5,{Aa:!0},6,{Aa:!0},7,{Aa:!0},8,{Aa:!0},9,{Aa:!0},10,{Aa:!0},11,{Aa:!0},12,{Aa:!0},13,{Aa:!0},14,{Aa:!0},15,{Aa:!0},16,{Aa:!0},17,{Aa:!0},18,{Aa:!0},19,{Aa:!0},20,{Aa:!0},21,{Aa:!0},2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49762	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	795	OUT	GET /web/6f9b607367582042.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1191	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 17949 Connection: close CF-Ray: 8daf6adff9464755-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 658039 Cache-Control: public, max-age=31556926 ETag: "e24eba32ca9d242c9afad9f41d1a40d2" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Fri, 20 Sep 2024 01:42:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 21 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ZegMZwXb2h9Yosq1EhCvDMVopd+K3CCuad+X5uIEulnY2bWbr9C+Qbifq38OVKoCqjwtiUWUjW4= x-amz-replication-status: COMPLETED x-amz-request-id: K77AG5RS59TQEZB2 x-amz-server-side-encryption: AES256 x-amz-version-id: .nVSCBU02II49NM4YXW9LBvBeht1yw.L X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 61 67 69 61 44 48 53 71 30 44 6a 25 32 46 5a 30 25 32 46 36 37 4d 52 51 25 32 42 6e 73 4e 58 6a 76 43 62 6d 34 4b 74 56 4b 37 75 73 75 25 32 42 31 6d 57 67 51 68 67 4d 54 7a 58 77 49 76 4f 57 50 32 41 39 63 6f 78 54 64 63 66 49 38 55 25 32 46 55 55 75 33 47 63 67 35 6c 54 56 44 45 51 55 53 36 39 54 78 6b 45 34 58 64 53 62 32 37 33 58 35 32 57 56 25 32 42 77 4a 47 52 5a 74 77 52 33 42 4e 39 42 4d 45 64 69 25 32 46 77 73 4f 6b 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zagiaDHSq0Dj%2FZ0%2F67MRQ%2BnsNXjvCbm4KtVK7usu%2B1mWgQhgMTzXwIvOWP2A9coxTdcfI8U%2FUUu3Gcg5lTVDEQUS69TxkE4XdSb273X52WV%2BwJGRZtwR3BN9BMEdi%2FwsOko%3D"}],"group":"cf-nel","max_age
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 33 50 62 4a 49 51 5c 22 3a 5c 22 50 61 64 75 61 5c 22 2c 5c 22 57 55 78 31 5a 41 5c 22 3a 5c 22 55 6c 73 61 6e 5c 22 2c 5c 22 50 58 36 76 58 77 5c 22 3a 5c 22 56 65 72 63 65 6c 6c 69 5c 22 2c 5c 22 51 31 4a 4c 55 51 5c 22 3a 5c 22 42 6f 74 73 77 61 6e 61 5c 22 2c 5c 22 56 36 74 63 6f 51 5c 22 3a 5c 22 4b 61 6e 61 67 61 77 61 5c 22 2c 5c 22 52 76 52 69 76 51 5c 22 3a 5c 22 43 68 69 6e 61 5c 22 2c 5c 22 46 76 59 75 37 51 5c 22 3a 5c 22 54 68 69 73 20 70 61 73 73 77 6f 72 64 20 69 73 20 63 6f 6d 6d 6f 6e 20 61 6e 64 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 4f 6f 73 4c 71 51 5c 22 3a 5c 22 50 68 69 6c Data Ascii: (function() { const messages = JSON.parse("{\"3PbJIQ\":\"Padua\",\"WUx1ZA\":\"Ulsan\",\"PX6vXw\":\"Vercelli\",\"Q1JLUQ\":\"Botswana\",\"V6tcoQ\":\"Kanagawa\",\"RvRivQ\":\"China\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"OosLqQ\":\"Phil
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 5c 22 2c 5c 22 53 4e 6e 36 49 77 5c 22 3a 5c 22 47 72 6f 73 73 65 74 6f 5c 22 2c 5c 22 43 6c 6b 31 6f 51 5c 22 3a 5c 22 43 61 6d 62 6f 64 69 61 5c 22 2c 5c 22 4f 37 4f 53 78 51 5c 22 3a 5c 22 54 72 65 76 69 73 6f 5c 22 2c 5c 22 51 36 64 54 6d 77 5c 22 3a 5c 22 4b 79 6f 74 6f 5c 22 2c 5c 22 6f 7a 55 6b 72 51 5c 22 3a 5c 22 44 6f 6d 69 6e 69 63 61 5c 22 2c 5c 22 6a 56 72 38 67 41 5c 22 3a 5c 22 55 74 61 68 5c 22 2c 5c 22 6c 65 71 71 36 77 5c 22 3a 5c 22 4c 65 62 61 6e 6f 6e 5c 22 2c 5c 22 6b 57 57 53 52 67 5c 22 3a 5c 22 41 6f 6d 6f 72 69 5c 22 2c 5c 22 4f 59 4b 6e 6c 67 5c 22 3a 5c 22 4c 61 74 76 69 61 5c 22 2c 5c 22 34 6f 31 48 38 77 5c 22 3a 5c 22 52 6f 6d 65 5c 22 2c 5c 22 57 71 79 7a 32 67 5c 22 3a 5c 22 4d 61 72 6c 62 6f 72 6f 75 67 68 5c 22 2c 5c 22 Data Ascii: \",\"SNn6Iw\":\"Grosseto\",\"Clk1oQ\":\"Cambodia\",\"O7OSxQ\":\"Treviso\",\"Q6dTmw\":\"Kyoto\",\"ozUkrQ\":\"Dominica\",\"jVr8gA\":\"Utah\",\"leqq6w\":\"Lebanon\",\"kWWSRg\":\"Aomori\",\"OYKnlg\":\"Latvia\",\"4o1H8w\":\"Rome\",\"Wqyz2g\":\"Marlborough\",\"
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 22 54 6c 61 78 63 61 6c 61 5c 22 2c 5c 22 4e 42 72 6f 2f 77 5c 22 3a 5c 22 54 75 6e 69 73 69 61 5c 22 2c 5c 22 69 6a 6c 57 79 41 5c 22 3a 5c 22 53 6f 6e 64 72 69 6f 5c 22 2c 5c 22 56 52 2b 38 6f 77 5c 22 3a 5c 22 56 65 6e 65 7a 75 65 6c 61 2c 20 42 6f 6c 69 76 61 72 69 61 6e 20 52 65 70 75 62 6c 69 63 20 6f 66 5c 22 2c 5c 22 50 53 6d 78 75 41 5c 22 3a 5c 22 57 65 73 74 65 72 6e 20 53 61 68 61 72 61 5c 22 2c 5c 22 78 31 34 74 46 41 5c 22 3a 5c 22 53 61 6f 20 54 6f 6d 65 20 61 6e 64 20 50 72 69 6e 63 69 70 65 5c 22 2c 5c 22 31 43 2b 48 61 77 5c 22 3a 5c 22 4d 79 61 6e 6d 61 72 5c 22 2c 5c 22 30 57 71 79 33 77 5c 22 3a 5c 22 50 65 6e 6e 73 79 6c 76 61 6e 69 61 5c 22 2c 5c 22 70 2f 39 59 6a 67 5c 22 3a 5c 22 44 61 65 6a 65 6f 6e 5c 22 2c 5c 22 48 58 52 41 42 Data Ascii: "Tlaxcala\",\"NBro/w\":\"Tunisia\",\"ijlWyA\":\"Sondrio\",\"VR+8ow\":\"Venezuela, Bolivarian Republic of\",\"PSmxuA\":\"Western Sahara\",\"x14tFA\":\"Sao Tome and Principe\",\"1C+Haw\":\"Myanmar\",\"0Wqy3w\":\"Pennsylvania\",\"p/9Yjg\":\"Daejeon\",\"HXRAB
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 22 7a 4c 38 30 68 77 5c 22 3a 5c 22 47 75 61 6d 5c 22 2c 5c 22 53 70 50 78 63 41 5c 22 3a 5c 22 44 61 74 65 73 20 61 72 65 20 6f 66 74 65 6e 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 63 43 6c 74 47 67 5c 22 3a 5c 22 4d 69 65 5c 22 2c 5c 22 54 33 52 63 33 77 5c 22 3a 5c 22 47 65 6e 6f 61 5c 22 2c 5c 22 32 51 51 56 77 67 5c 22 3a 5c 22 54 72 65 6e 74 6f 5c 22 2c 5c 22 4f 73 48 63 44 41 5c 22 3a 5c 22 50 61 72 61 67 75 61 79 5c 22 2c 5c 22 63 52 46 48 59 51 5c 22 3a 5c 22 4e 69 63 61 72 61 67 75 61 5c 22 2c 5c 22 72 50 2f 54 2f 67 5c 22 3a 5c 22 43 6f 6c 6f 72 61 64 6f 5c 22 2c 5c 22 36 6b 6a 77 74 51 5c 22 3a 5c 22 42 6f 6c 6f 67 6e 61 5c 22 2c 5c 22 70 38 73 35 46 51 5c 22 3a 5c 22 52 6f 76 69 67 6f 5c 22 2c 5c 22 54 78 72 54 72 67 5c 22 Data Ascii: "zL80hw\":\"Guam\",\"SpPxcA\":\"Dates are often easy to guess.\",\"cCltGg\":\"Mie\",\"T3Rc3w\":\"Genoa\",\"2QQVwg\":\"Trento\",\"OsHcDA\":\"Paraguay\",\"cRFHYQ\":\"Nicaragua\",\"rP/T/g\":\"Colorado\",\"6kjwtQ\":\"Bologna\",\"p8s5FQ\":\"Rovigo\",\"TxrTrg\"
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 5c 22 3a 5c 22 53 61 6e 74 61 20 43 61 74 61 72 69 6e 61 5c 22 2c 5c 22 6c 4a 4b 46 68 41 5c 22 3a 5c 22 54 61 72 61 6e 61 6b 69 5c 22 2c 5c 22 50 4c 4b 78 48 77 5c 22 3a 5c 22 46 75 6b 75 6f 6b 61 5c 22 2c 5c 22 42 78 74 42 74 67 5c 22 3a 5c 22 43 65 61 72 c3 a1 5c 22 2c 5c 22 76 37 6e 70 70 41 5c 22 3a 5c 22 53 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 5c 22 2c 5c 22 4a 66 75 7a 56 51 5c 22 3a 5c 22 43 72 6f 74 6f 6e 65 5c 22 2c 5c 22 6f 56 62 73 6e 67 5c 22 3a 5c 22 41 63 72 65 5c 22 2c 5c 22 6c 64 50 76 6c 77 5c 22 3a 5c 22 54 6f 6b 79 6f 5c 22 2c 5c 22 53 49 6f 4c 53 41 5c 22 3a 5c 22 46 6f 67 67 69 61 5c 22 2c 5c 22 62 32 39 32 7a 77 5c 22 3a 5c 22 48 79 6f 67 6f 5c 22 2c 5c 22 44 50 6b 41 48 41 5c 22 3a 5c 22 47 65 6f 72 67 69 61 5c 22 2c 5c 22 61 Data Ascii: \":\"Santa Catarina\",\"lJKFhA\":\"Taranaki\",\"PLKxHw\":\"Fukuoka\",\"BxtBtg\":\"Cear\",\"v7nppA\":\"Solomon Islands\",\"JfuzVQ\":\"Crotone\",\"oVbsng\":\"Acre\",\"ldPvlw\":\"Tokyo\",\"SIoLSA\":\"Foggia\",\"b292zw\":\"Hyogo\",\"DPkAHA\":\"Georgia\",\"a
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 75 61 74 6f 72 69 61 6c 20 47 75 69 6e 65 61 5c 22 2c 5c 22 32 4a 49 36 44 51 5c 22 3a 5c 22 4f 69 74 61 5c 22 2c 5c 22 56 61 6c 75 56 41 5c 22 3a 5c 22 42 72 61 7a 69 6c 5c 22 2c 5c 22 71 65 59 35 66 51 5c 22 3a 5c 22 42 65 72 67 61 6d 6f 5c 22 2c 5c 22 72 35 6d 65 61 67 5c 22 3a 5c 22 53 65 79 63 68 65 6c 6c 65 73 5c 22 2c 5c 22 53 2f 67 4c 33 77 5c 22 3a 5c 22 4b 61 6e 73 61 73 5c 22 2c 5c 22 7a 73 2b 30 75 41 5c 22 3a 5c 22 50 6c 65 61 73 65 20 65 6e 73 75 72 65 20 79 6f 75 20 68 61 76 65 20 65 6e 74 65 72 65 64 20 61 20 76 61 6c 69 64 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 2e 5c 22 2c 5c 22 43 64 6e 79 30 41 5c 22 3a 5c 22 4c 69 62 65 72 69 61 5c 22 2c 5c 22 4e 33 6c 61 71 51 5c 22 3a 5c 22 4e 6f 72 74 68 20 4d 61 63 65 64 6f 6e 69 61 Data Ascii: uatorial Guinea\",\"2JI6DQ\":\"Oita\",\"ValuVA\":\"Brazil\",\"qeY5fQ\":\"Bergamo\",\"r5meag\":\"Seychelles\",\"S/gL3w\":\"Kansas\",\"zs+0uA\":\"Please ensure you have entered a valid verification code.\",\"Cdny0A\":\"Liberia\",\"N3laqQ\":\"North Macedonia
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 22 2c 5c 22 7a 76 56 7a 49 51 5c 22 3a 5c 22 49 72 61 6e 5c 22 2c 5c 22 57 4f 4e 74 58 51 5c 22 3a 5c 22 47 75 79 61 6e 61 5c 22 2c 5c 22 76 74 48 62 46 51 5c 22 3a 5c 22 49 62 61 72 61 6b 69 5c 22 2c 5c 22 39 73 78 4f 32 67 5c 22 3a 5c 22 50 65 72 6e 61 6d 62 75 63 6f 5c 22 2c 5c 22 34 37 5a 70 48 51 5c 22 3a 5c 22 48 69 64 61 6c 67 6f 5c 22 2c 5c 22 43 73 73 6e 66 41 5c 22 3a 5c 22 4f 73 61 6b 61 5c 22 2c 5c 22 56 52 52 2b 4e 77 5c 22 3a 5c 22 4d 65 67 68 c4 81 6c 61 79 61 5c 22 2c 5c 22 56 6f 44 61 32 77 5c 22 3a 5c 22 4c 75 78 65 6d 62 6f 75 72 67 5c 22 2c 5c 22 58 58 5a 33 57 77 5c 22 3a 5c 22 48 69 6d c4 81 63 68 61 6c 20 50 72 61 64 65 73 68 5c 22 2c 5c 22 32 67 2f 59 54 41 5c 22 3a 5c 22 41 6e 67 75 69 6c 6c 61 5c 22 2c 5c 22 74 6d 34 7a 6e 51 5c Data Ascii: ",\"zvVzIQ\":\"Iran\",\"WONtXQ\":\"Guyana\",\"vtHbFQ\":\"Ibaraki\",\"9sxO2g\":\"Pernambuco\",\"47ZpHQ\":\"Hidalgo\",\"CssnfA\":\"Osaka\",\"VRR+Nw\":\"Meghlaya\",\"VoDa2w\":\"Luxembourg\",\"XXZ3Ww\":\"Himchal Pradesh\",\"2g/YTA\":\"Anguilla\",\"tm4znQ\
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 77 6f 72 64 5c 22 2c 5c 22 35 72 48 50 59 51 5c 22 3a 5c 22 41 66 67 68 61 6e 69 73 74 61 6e 5c 22 2c 5c 22 2b 61 77 4a 73 67 5c 22 3a 5c 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 5c 22 2c 5c 22 79 38 2b 35 4a 51 5c 22 3a 5c 22 c3 85 6c 61 6e 64 20 49 73 6c 61 6e 64 73 5c 22 2c 5c 22 30 6d 6a 54 54 51 5c 22 3a 5c 22 4d 61 6e 74 75 61 5c 22 2c 5c 22 43 6e 36 43 77 41 5c 22 3a 5c 22 e2 80 93 5c 22 2c 5c 22 4e 4c 45 45 38 51 5c 22 3a 5c 22 45 67 79 70 74 5c 22 2c 5c 22 6b 6a 6b 37 4f 77 5c 22 3a 5c 22 53 61 6e 20 4c 75 69 73 20 50 6f 74 6f 73 c3 ad 5c 22 2c 5c 22 74 53 65 70 58 67 5c 22 3a 5c 22 41 6e 64 68 72 61 20 50 72 61 64 65 73 68 5c 22 2c 5c 22 46 61 64 67 7a 41 5c 22 3a 5c 22 4c 69 76 6f 72 6e 6f 5c 22 2c 5c 22 41 75 79 68 78 77 5c 22 3a 5c 22 4d 69 Data Ascii: word\",\"5rHPYQ\":\"Afghanistan\",\"+awJsg\":\"New Hampshire\",\"y8+5JQ\":\"land Islands\",\"0mjTTQ\":\"Mantua\",\"Cn6CwA\":\"\",\"NLEE8Q\":\"Egypt\",\"kjk7Ow\":\"San Luis Potos\",\"tSepXg\":\"Andhra Pradesh\",\"FadgzA\":\"Livorno\",\"Auyhxw\":\"Mi
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 5c 22 72 4d 52 45 41 67 5c 22 3a 5c 22 43 61 6d 65 72 6f 6f 6e 5c 22 2c 5c 22 4b 61 38 77 68 41 5c 22 3a 5c 22 42 72 75 6e 65 69 20 44 61 72 75 73 73 61 6c 61 6d 5c 22 2c 5c 22 6f 4f 63 33 74 77 5c 22 3a 5c 22 50 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 5c 22 2c 5c 22 39 41 57 4e 6e 77 5c 22 3a 5c 22 4e 65 77 66 6f 75 6e 64 6c 61 6e 64 20 61 6e 64 20 4c 61 62 72 61 64 6f 72 5c 22 2c 5c 22 7a 34 61 74 53 77 5c 22 3a 5c 22 42 6f 6c 7a 61 6e 6f 5c 22 2c 5c 22 70 2f 43 71 2b 67 5c 22 3a 5c 22 56 69 62 6f 20 56 61 6c 65 6e 74 69 61 5c 22 2c 5c 22 43 2f 4d 52 78 67 5c 22 3a 5c 22 48 75 6e 67 61 72 79 5c 22 2c 5c 22 44 6f 65 74 6a 77 5c 22 3a 5c 22 43 68 69 65 74 69 5c 22 2c 5c 22 47 43 4e 79 44 41 5c 22 3a 5c 22 50 75 Data Ascii: \"rMREAg\":\"Cameroon\",\"Ka8whA\":\"Brunei Darussalam\",\"oOc3tw\":\"Please confirm your password.\",\"9AWNnw\":\"Newfoundland and Labrador\",\"z4atSw\":\"Bolzano\",\"p/Cq+g\":\"Vibo Valentia\",\"C/MRxg\":\"Hungary\",\"Doetjw\":\"Chieti\",\"GCNyDA\":\"Pu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49763	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	615	OUT	GET /web/1d5da80170c7d950.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1189	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 5937 Connection: close CF-Ray: 8daf6adffb7946d7-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "f4d914aefebb2d814ff3be48ec26b488" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 8FXYPTsjpz2BwZ/p3Baoh2Hw3vjHovly7R45JNTYjpFIUiYnOMZMDGNsv7eEjvrrY72i7KmnAWI= x-amz-replication-status: COMPLETED x-amz-request-id: 473Q42VAVMQBJM7R x-amz-server-side-encryption: AES256 x-amz-version-id: MMp_p3fhFRz3j0m0I7o2UD0JUstZziKk X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	346	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6e 58 56 79 4c 4a 48 36 36 71 37 38 78 4b 4c 5a 30 34 62 48 69 54 48 6a 68 77 64 66 6a 38 47 36 53 33 64 69 34 74 51 46 33 70 33 32 43 50 45 68 36 68 6c 55 78 58 6f 6c 42 6a 4c 6a 35 6d 4d 31 4b 66 53 59 6c 6b 4f 6a 55 4b 76 75 53 37 62 33 6a 66 7a 6b 7a 48 6f 31 4d 79 34 7a 25 32 46 45 34 6e 48 67 4c 6d 37 75 56 32 66 65 55 5a 51 64 59 57 75 43 43 61 46 6c 51 77 41 44 57 6e 38 59 38 52 41 6b 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nXVyLJH66q78xKLZ04bHiTHjhwdfj8G6S3di4tQF3p32CPEh6hlUxXolBjLj5mM1KfSYlkOjUKvuS7b3jfzkzHo1My4z%2FE4nHgLm7uV2feUZQdYWuCCaFlQwADWn8Y8RAkU%3D"}],"group":"cf-nel","max_age":604800}N
2024-10-31 00:09:38 UTC	1203	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 33 34 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 32 33 38 30 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9134],{/***/ 523808:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6e 61 6d 65 3a 62 2e 6e 61 6d 65 2c 7a 51 61 3a 60 24 7b 62 2e 64 75 72 61 74 69 6f 6e 7d 6d 73 60 2c 2e 2e 2e 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 28 62 2e 61 74 74 72 73 2e 65 6e 74 72 69 65 73 28 29 29 7d 3b 65 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 68 20 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 29 29 66 3d 64 5b 68 5d 2c 65 5b 68 5d 3d 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 66 29 3a 66 3b 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 28 65 29 3b 0a 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 28 29 3b 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 61 2e 4c 51 Data Ascii: name:b.name,zQa:`${b.duration}ms`,...Object.fromEntries(b.attrs.entries())};e={};for(const h of Object.keys(d))f=d[h],e[h]=f instanceof Object?JSON.stringify(f):f;console.table(e);console.groupEnd();null===c\|\|void 0===c?void 0:c();console.groupEnd();a.LQ
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 61 63 68 65 64 22 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 74 68 69 73 2e 4f 47 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 61 3b 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 74 46 3d 0a 63 3b 74 68 69 73 2e 73 65 6e 64 3d 64 3b 74 68 69 73 2e 4f 47 3d 6e 65 77 20 53 65 74 3b 76 61 72 20 65 3b 74 68 69 73 2e 72 4e 3d 6e 75 6c 6c 21 3d 3d 28 65 3d 61 2e 72 4e 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 49 6e 66 69 6e 69 74 79 7d 7d 3b 76 61 72 20 24 6f 62 3d 28 7b 42 71 61 3a 61 2c 75 72 6c 3a 62 7d 29 3d 3e 63 3d 3e 7b 63 6f 6e 73 74 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 29 2c 65 3d 7b 41 63 63 65 70 74 3a 22 61 Data Ascii: ached"))}async flush(){await Promise.all(this.OG)}constructor(a,b,c,d){this.config=a;this.D=b;this.tF=c;this.send=d;this.OG=new Set;var e;this.rN=null!==(e=a.rN)&&void 0!==e?e:Infinity}};var $ob=({Bqa:a,url:b})=>c=>{const d=JSON.stringify(c),e={Accept:"a
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 3e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 4b 49 26 26 74 68 69 73 2e 61 43 28 29 29 3b 30 3c 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 26 26 6e 75 6c 6c 3d 3d 74 68 69 73 2e 74 69 6d 65 72 26 26 28 74 68 69 73 2e 74 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 74 68 69 73 2e 61 43 28 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 4c 49 29 29 7d 61 73 79 6e 63 20 66 6c 75 73 68 28 29 7b 74 68 69 73 2e 61 43 28 29 3b 61 77 61 69 74 20 74 68 69 73 2e 76 66 2e 66 6c 75 73 68 28 29 7d 61 43 28 29 7b 74 72 79 7b 74 68 69 73 2e 76 66 2e 70 72 6f 63 65 73 73 28 74 68 69 73 2e 62 75 66 66 65 72 29 7d 63 61 74 63 68 28 61 29 7b 74 68 69 73 2e 44 2e 75 61 28 61 2c 7b 4c 62 3a 60 46 61 69 6c 65 64 20 74 6f Data Ascii: buffer.length>=this.config.KI&&this.aC());0<this.buffer.length&&null==this.timer&&(this.timer=setTimeout(()=>this.aC(),this.config.LI))}async flush(){this.aC();await this.vf.flush()}aC(){try{this.vf.process(this.buffer)}catch(a){this.D.ua(a,{Lb:`Failed to
2024-10-31 00:09:38 UTC	627	IN	Data Raw: 3a 5f 5f 63 2e 67 38 7d 29 29 3b 68 38 28 63 2c 71 3d 3e 6e 65 77 20 6d 28 62 2c 71 29 29 7d 68 38 28 63 2c 6d 3d 3e 6e 65 77 20 65 70 62 28 6d 29 29 3b 69 66 28 22 43 4f 4e 53 4f 4c 45 22 3d 3d 3d 61 2e 71 63 29 72 65 74 75 72 6e 20 63 2e 62 75 69 6c 64 28 6e 65 77 20 61 70 62 29 3b 63 6f 6e 73 74 20 64 3d 24 6f 62 28 7b 75 72 6c 3a 61 2e 65 6e 64 70 6f 69 6e 74 2c 42 71 61 3a 31 45 34 7d 29 2c 65 3d 5a 6f 62 28 7b 75 72 6c 3a 61 2e 65 6e 64 70 6f 69 6e 74 2c 6e 61 76 69 67 61 74 6f 72 7d 29 2c 0a 66 3d 61 73 79 6e 63 20 6d 3d 3e 7b 74 72 79 7b 61 77 61 69 74 20 65 28 6d 29 7d 63 61 74 63 68 28 71 29 7b 72 65 74 75 72 6e 20 71 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 38 3f 62 2e 43 46 28 6e 65 77 20 5f 5f 63 2e 6f 64 28 71 2e 6d 65 73 73 61 67 65 2c 2e 30 Data Ascii: :__c.g8}));h8(c,q=>new m(b,q))}h8(c,m=>new epb(m));if("CONSOLE"===a.qc)return c.build(new apb);const d=$ob({url:a.endpoint,Bqa:1E4}),e=Zob({url:a.endpoint,navigator}),f=async m=>{try{await e(m)}catch(q){return q instanceof i8?b.CF(new __c.od(q.message,.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49766	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	615	OUT	GET /web/72e88e1e9b45a34c.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1220	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 593 Connection: close CF-Ray: 8daf6adff830460b-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "853874dae2b4fff1668f87ea1dc3e537" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: IhR3BDUMvJGSqNawnZf1dm1deJ0XD4+SJqTk93Eeig9PZs1HqWmXLCAojdeZk7/xNHvgSLOqdc+ekU7XoVgsRz7ZNVDQCjTbD3zBk74Naeg= x-amz-replication-status: COMPLETED x-amz-request-id: 473GH5R2BCR5DXB7 x-amz-server-side-encryption: AES256 x-amz-version-id: tFEzAZIkj84MsW_w6SFdbNoiSeJKiHXg X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 43 61 38 5a 48 63 59 54 71 6f 72 4f 62 50 33 7a 56 74 53 6f 66 67 4b 4f 47 31 6f 54 63 6b 57 76 76 48 5a 78 6e 48 48 62 68 59 31 52 50 64 41 63 42 53 5a 51 53 65 6d 51 4f 34 50 37 65 25 32 46 43 63 46 7a 56 6a 53 37 50 75 42 38 55 39 56 67 48 31 63 78 25 32 46 59 66 47 53 37 77 77 49 41 61 68 35 6b 65 78 33 4c 39 68 7a 42 42 68 38 76 4b 58 41 72 69 47 25 32 42 6b 52 39 25 32 46 53 48 65 55 41 5a 4e 34 74 57 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eCa8ZHcYTqorObP3zVtSofgKOG1oTckWvvHZxnHHbhY1RPdAcBSZQSemQO4P7e%2FCcFzVjS7PuB8U9VgH1cx%2FYfGS7wwIAah5kex3L9hzBBh8vKXAriG%2BkR9%2FSHeUAZN4tWs%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:38 UTC	593	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 36 34 32 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 37 30 38 33 35 38 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 73 65 6c 66 2e 5f 66 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[6642],{/***/ 708358:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);self._f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49767	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	623	OUT	GET /web/ef72ef9d495f3a56.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 2562 Connection: close CF-Ray: 8daf6ae00c91e510-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 512596 Cache-Control: public, max-age=31556926 ETag: "50a750081e7fdb205dd088b870291919" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Fri, 25 Oct 2024 01:33:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 26 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: UccUPHkhaXJGfGlz817RqyoFNa57SnbEtXFsjVutlaGrrKwoXJ/K0xgowIqix/OYgKG3URT/HvY= x-amz-replication-status: COMPLETED x-amz-request-id: 6F6D1N31CS2H1G56 x-amz-server-side-encryption: AES256 x-amz-version-id: 8hLF5CPLdlY6uJ15RMPBHlfY6a.VvC85 X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	344	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 57 67 4f 65 67 6f 33 48 31 62 72 59 52 4f 34 43 6f 39 74 4b 39 41 53 48 70 62 4c 34 42 4c 71 48 34 69 70 68 6b 6e 58 55 70 6b 69 73 46 44 6d 7a 45 53 37 37 47 78 55 36 48 59 38 71 52 33 55 37 39 6a 49 4c 35 59 73 56 4c 4f 66 35 62 66 38 71 56 66 65 79 35 4f 47 54 41 4b 32 62 6a 54 33 74 69 42 61 57 43 77 6b 4a 67 55 6d 59 6d 5a 43 64 4c 34 50 4c 55 72 6b 63 6a 6a 74 62 6c 31 68 76 56 4b 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 4e 45 4c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgOego3H1brYRO4Co9tK9ASHpbL4BLqH4iphknXUpkisFDmzES77GxU6HY8qR3U79jIL5YsVLOf5bf8qVfey5OGTAK2bjT3tiBaWCwkJgUmYmZCdL4PLUrkcjjtbl1hvVKU%3D"}],"group":"cf-nel","max_age":604800}NEL
2024-10-31 00:09:38 UTC	1204	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 65 71 34 50 67 41 5c 22 3a 5c 22 44 69 64 6e e2 80 99 74 20 67 65 74 20 74 68 65 20 63 6f 64 65 3f 20 52 65 73 65 6e 64 20 63 6f 64 65 5c 22 2c 5c 22 50 46 4f 55 65 77 5c 22 3a 5c 22 43 6f 6e 74 69 6e 75 65 5c 22 2c 5c 22 67 6d 64 2b 4e 41 5c 22 3a 5c 22 59 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 69 73 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 74 68 72 6f 75 67 68 20 63 6f 6f 6b 69 65 73 2e 20 43 68 6f 6f 73 69 6e 67 20 e2 80 9c 64 6f 20 6e 6f 74 20 73 65 6c 6c e2 80 9d 20 77 69 6c 6c 20 64 69 73 61 62 6c 65 20 74 68 65 20 6f 6e 65 73 20 74 68 61 74 20 6d 61 6b 65 20 74 68 69 6e 67 73 20 6d 6f 72 65 20 72 65 6c Data Ascii: (function() { const messages = JSON.parse("{\"eq4PgA\":\"Didnt get the code? Resend code\",\"PFOUew\":\"Continue\",\"gmd+NA\":\"Your experience is personalized through cookies. Choosing do not sell will disable the ones that make things more rel
2024-10-31 00:09:38 UTC	1358	IN	Data Raw: 69 6e 2c 20 77 65 20 6d 61 79 20 73 68 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 72 5c 22 2c 5c 22 52 33 79 58 5a 77 5c 22 3a 5c 22 4f 6e 63 65 20 79 6f 75 20 65 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 73 65 6e 74 20 74 6f 20 7b 30 7d 2c 20 79 6f 75 e2 80 99 6c 6c 20 62 65 20 61 6c 6c 20 6c 6f 67 67 65 64 20 69 6e 2e 5c 22 2c 5c 22 56 33 56 51 50 77 5c 22 3a 5c 22 52 65 74 75 72 6e 20 74 6f 20 6c 6f 67 20 69 6e 5c 22 2c 5c 22 71 4c 41 4c 63 51 5c 22 3a 5c 22 41 20 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 64 65 20 77 61 73 20 73 65 6e 74 20 74 6f 20 7b 30 7d 2e 5c 22 2c 5c 22 6b 39 55 46 36 67 5c 22 3a 5c 22 4a 75 73 74 20 6f 6e 65 20 6d 6f 72 65 20 73 74 65 70 5c 22 2c 5c 22 38 6b 4c Data Ascii: in, we may share information with your employer\",\"R3yXZw\":\"Once you enter the code we sent to {0}, youll be all logged in.\",\"V3VQPw\":\"Return to log in\",\"qLALcQ\":\"A verification code was sent to {0}.\",\"k9UF6g\":\"Just one more step\",\"8kL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49764	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	787	OUT	GET /web/f4d98df598273a74.js HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 52177 Connection: close CF-Ray: 8daf6ae00f234647-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "8f1c21026a9e88936f7211a1b26242cb" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: LVEnT2AcESjmC2wUftTVXficoS/Aa4wWHq6MaLbe9tt4jw93T4m5dtv3BKljmTqZZTSoT4vKC6o= x-amz-replication-status: COMPLETED x-amz-request-id: 473N3RVDY8C92F9C x-amz-server-side-encryption: AES256 x-amz-version-id: Ie7VFlV0_ycEUmSCNNkbcq4ST31DsEtk X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	358	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 45 64 32 30 5a 34 6f 69 54 6f 63 4e 6c 41 4f 69 65 6a 5a 76 25 32 46 38 4e 75 76 62 44 55 31 54 6a 45 6f 32 6d 50 58 72 37 70 53 37 58 70 39 68 66 48 39 76 71 4b 47 4e 55 52 6b 6f 53 41 6b 75 49 46 36 32 33 47 43 6f 66 38 77 48 76 57 25 32 46 59 6f 50 6d 71 42 71 43 49 4b 63 56 53 46 47 5a 57 25 32 46 6c 53 6b 70 36 62 25 32 46 62 45 67 33 43 6c 25 32 46 54 6f 64 68 36 64 53 44 56 43 32 56 25 32 46 38 38 49 4d 25 32 46 47 6d 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LEd20Z4oiTocNlAOiejZv%2F8NuvbDU1TjEo2mPXr7pS7Xp9hfH9vqKGNURkoSAkuIF623GCof8wHvW%2FYoPmqBqCIKcVSFGZW%2FlSkp6b%2FbEg3Cl%2FTodh6dSDVC2V%2F88IM%2FGmU%3D"}],"group":"cf-nel","max_age
2024-10-31 00:09:38 UTC	1190	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 38 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 37 33 37 35 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9888],{/***/ 273752:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 2e 73 6c 69 63 65 28 29 2c 58 44 3a 67 2c 73 6c 69 63 65 3a 5b 30 2c 6c 5d 7d 29 2c 65 2b 3d 6c 3b 65 6c 73 65 20 69 66 28 65 3e 3d 62 26 26 66 3e 63 29 66 3d 63 2d 65 2c 64 2e 70 75 73 68 28 7b 6c 61 62 65 6c 3a 68 2e 6c 61 62 65 6c 2c 6f 70 74 69 6f 6e 73 3a 68 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 63 65 28 30 2c 66 29 2c 58 44 3a 67 2c 73 6c 69 63 65 3a 5b 30 2c 66 5d 7d 29 2c 65 2b 3d 6c 3b 65 6c 73 65 20 69 66 28 65 3c 62 26 26 66 3e 63 29 7b 66 3d 62 2d 65 3b 63 6f 6e 73 74 20 6d 3d 63 2d 65 3b 64 2e 70 75 73 68 28 7b 6c 61 62 65 6c 3a 68 2e 6c 61 62 65 6c 2c 6f 70 74 69 6f 6e 73 3a 68 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 63 65 28 66 2c 0a 6d 29 2c 58 44 3a 67 2c 73 6c 69 63 65 3a 5b 66 2c 6d 5d 7d 29 3b 65 2b 3d 6c 7d 7d 7d 72 65 74 75 72 6e 20 64 7d Data Ascii: .slice(),XD:g,slice:[0,l]}),e+=l;else if(e>=b&&f>c)f=c-e,d.push({label:h.label,options:h.options.slice(0,f),XD:g,slice:[0,f]}),e+=l;else if(e<b&&f>c){f=b-e;const m=c-e;d.push({label:h.label,options:h.options.slice(f,m),XD:g,slice:[f,m]});e+=l}}}return d}
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 7b 67 6a 3a 62 3d 5f 5f 63 2e 6a 6d 2c 69 74 65 6d 3a 63 3d 51 3d 3e 49 28 62 2c 7b 2e 2e 2e 51 7d 29 2c 57 44 3a 64 2c 24 42 3a 65 2c 76 61 6c 75 65 3a 66 2c 61 63 74 69 76 65 49 6e 64 65 78 3a 67 2c 69 64 3a 68 2c 61 72 69 61 4c 61 62 65 6c 3a 6c 2c 7a 61 3a 6d 2c 68 65 61 64 65 72 3a 71 2c 66 6f 6f 74 65 72 3a 75 2c 79 67 3a 77 2c 4e 69 3a 78 2c 49 6e 3a 41 2c 48 70 3a 7a 2c 63 6c 61 73 73 4e 61 6d 65 3a 42 2c 63 68 69 6c 64 72 65 6e 3a 44 2c 44 55 3a 47 2c 52 48 61 3a 48 3d 5f 5f 63 2e 6f 79 61 7d 3d 61 2c 4d 3d 28 30 2c 5f 5f 63 2e 43 63 29 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 51 3d 5b 5d 3b 64 2e 66 6f 72 45 61 63 68 28 28 61 61 2c 66 61 29 3d 3e 7b 61 61 2e 6f 70 74 69 6f 6e 73 2e 66 6f 72 45 61 Data Ascii: function(a){const {gj:b=__c.jm,item:c=Q=>I(b,{...Q}),WD:d,$B:e,value:f,activeIndex:g,id:h,ariaLabel:l,za:m,header:q,footer:u,yg:w,Ni:x,In:A,Hp:z,className:B,children:D,DU:G,RHa:H=__c.oya}=a,M=(0,__c.Cc)(()=>{const Q=[];d.forEach((aa,fa)=>{aa.options.forEa
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 5f 5f 63 2e 6c 6d 2c 7b 7d 29 7d 29 2c 49 28 5f 5f 63 2e 6d 6d 2c 7b 69 74 65 6d 3a 63 2c 54 49 3a 68 2c 69 64 3a 4e 3f 76 6f 69 64 20 30 3a 68 2c 72 6f 6c 65 3a 4e 3f 22 67 72 6f 75 70 22 3a 22 6c 69 73 74 62 6f 78 22 2c 61 72 69 61 4c 61 62 65 6c 3a 4e 3f 6b 61 2e 6c 61 62 65 6c 3a 6c 2c 7a 61 3a 4e 3f 76 6f 69 64 20 30 3a 6d 2c 4c 41 3a 64 61 2c 76 61 6c 75 65 3a 66 2c 4a 32 3a 65 2e 66 69 6e 64 49 6e 64 65 78 28 49 61 3d 3e 0a 49 61 3d 3d 3d 6b 61 2e 6f 70 74 69 6f 6e 73 5b 30 5d 29 2c 61 63 74 69 76 65 49 6e 64 65 78 3a 67 2c 6c 61 62 65 6c 3a 74 61 3f 6b 61 2e 6c 61 62 65 6c 3a 76 6f 69 64 20 30 2c 6f 70 74 69 6f 6e 73 3a 6b 61 2e 6f 70 74 69 6f 6e 73 2c 79 67 3a 77 2c 49 6e 3a 41 2c 48 70 3a 7a 2c 4e 69 3a 78 7d 29 5d 7d 2c 6b 61 2e 58 44 29 7d 29 Data Ascii: __c.lm,{})}),I(__c.mm,{item:c,TI:h,id:N?void 0:h,role:N?"group":"listbox",ariaLabel:N?ka.label:l,za:N?void 0:m,LA:da,value:f,J2:e.findIndex(Ia=>Ia===ka.options[0]),activeIndex:g,label:ta?ka.label:void 0,options:ka.options,yg:w,In:A,Hp:z,Ni:x})]},ka.XD)})
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 72 3a 71 2e 67 65 74 45 72 72 6f 72 28 75 29 2c 73 38 3a 78 2c 0a 72 65 71 75 69 72 65 64 3a 21 30 2c 2e 2e 2e 7a 7d 29 7d 29 3b 72 65 74 75 72 6e 7b 6e 68 3a 79 53 28 28 7b 6f 6e 42 6c 75 72 3a 7a 2c 6f 6e 43 68 61 6e 67 65 3a 42 2c 2e 2e 2e 44 7d 29 3d 3e 7b 63 6f 6e 73 74 20 47 3d 7a 53 28 28 29 3d 3e 7b 71 2e 49 56 28 75 29 3b 71 2e 41 56 28 75 29 3b 7a 26 26 7a 28 29 7d 2c 5b 7a 5d 29 2c 48 3d 7a 53 28 54 3d 3e 7b 71 2e 69 68 28 75 2c 54 29 3b 71 2e 4b 54 28 75 29 3b 42 26 26 42 28 54 29 7d 2c 5b 42 5d 29 3b 41 53 28 28 29 3d 3e 7b 71 2e 63 36 28 75 29 3b 72 65 74 75 72 6e 20 49 56 61 28 71 2c 75 29 7d 2c 5b 5d 29 3b 63 6f 6e 73 74 20 4d 3d 75 2e 70 6c 61 63 65 68 6f 6c 64 65 72 7c 7c 44 56 61 28 63 29 3b 72 65 74 75 72 6e 20 77 53 28 41 2c 7b 77 6c Data Ascii: r:q.getError(u),s8:x,required:!0,...z})});return{nh:yS(({onBlur:z,onChange:B,...D})=>{const G=zS(()=>{q.IV(u);q.AV(u);z&&z()},[z]),H=zS(T=>{q.ih(u,T);q.KT(u);B&&B(T)},[B]);AS(()=>{q.c6(u);return IVa(q,u)},[]);const M=u.placeholder\|\|DVa(c);return wS(A,{wl
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 37 51 22 29 3b 63 61 73 65 20 22 52 65 63 65 6e 74 20 79 65 61 72 73 20 61 72 65 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 22 3a 72 65 74 75 72 6e 20 4a 28 22 52 47 4a 4d 55 77 22 29 3b 63 61 73 65 20 22 41 76 6f 69 64 20 72 65 63 65 6e 74 20 79 65 61 72 73 22 3a 72 65 74 75 72 6e 20 4a 28 22 52 47 4a 4d 55 77 22 29 3b 63 61 73 65 20 22 41 76 6f 69 64 20 79 65 61 72 73 20 74 68 61 74 20 61 72 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 79 6f 75 22 3a 72 65 74 75 72 6e 20 4a 28 22 52 47 4a 4d 55 77 22 29 3b 0a 63 61 73 65 20 22 44 61 74 65 73 20 61 72 65 20 6f 66 74 65 6e 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 22 3a 72 65 74 75 72 6e 20 4a 28 22 53 70 50 78 63 41 22 29 3b 63 61 73 65 20 22 41 76 6f 69 64 20 64 61 74 65 73 20 61 6e 64 20 79 65 Data Ascii: 7Q");case "Recent years are easy to guess":return J("RGJMUw");case "Avoid recent years":return J("RGJMUw");case "Avoid years that are associated with you":return J("RGJMUw");case "Dates are often easy to guess":return J("SpPxcA");case "Avoid dates and ye
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 69 68 28 5b 53 56 61 2c 2e 2e 2e 62 5d 29 3b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 69 68 28 5b 45 53 2c 46 53 2c 2e 2e 2e 62 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 54 56 61 28 69 68 28 5b 45 53 2c 46 53 2c 2e 2e 2e 62 5d 29 29 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 61 29 3b 7d 7d 3b 47 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 22 63 75 72 72 65 6e 74 2d 70 61 73 73 77 6f 72 64 22 3b 63 61 73 65 20 30 3a 63 61 73 65 20 32 3a 72 65 74 75 72 6e 22 6e 65 77 2d 70 61 73 73 77 6f 72 64 22 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 61 29 3b 7d 7d 3b 0a 5f 5f Data Ascii: ){switch(a){case 1:return ih([SVa,...b]);case 0:return ih([ES,FS,...b]);case 2:return TVa(ih([ES,FS,...b]));default:throw new n(a);}};GS=function(a){switch(a){case 1:return"current-password";case 0:case 2:return"new-password";default:throw new n(a);}};__
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 22 29 3a 76 6f 69 64 20 30 2c 0a 69 4a 3a 69 61 2c 6f 6e 43 68 61 6e 67 65 3a 70 61 2c 73 53 3a 63 61 3d 6c 3f 44 3a 76 6f 69 64 20 30 7d 29 3d 3e 7b 63 6f 6e 73 74 20 6b 61 3d 5f 5f 63 2e 6e 68 28 75 29 2c 74 61 3d 4c 53 28 28 29 3d 3e 6e 75 6c 6c 21 3d 3d 51 26 26 76 6f 69 64 20 30 21 3d 3d 51 3f 51 3a 6b 61 2c 5b 51 2c 6b 61 5d 29 2c 49 61 3d 7a 53 28 53 61 3d 3e 7b 5f 5f 63 2e 6d 68 28 75 2c 53 61 29 3b 70 61 26 26 70 61 28 53 61 29 7d 2c 5b 70 61 5d 29 2c 47 61 3d 4c 53 28 28 29 3d 3e 28 7b 69 64 3a 53 61 7d 29 3d 3e 77 53 28 7a 2c 7b 51 66 3a 74 61 2c 57 5f 3a 4e 2c 69 64 3a 53 61 7d 29 2c 5b 4e 2c 74 61 5d 29 3b 72 65 74 75 72 6e 20 77 53 28 42 2c 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 47 2c 64 69 73 61 62 6c 65 64 3a 64 61 2c 6e 61 6d 65 3a 54 2c Data Ascii: "):void 0,iJ:ia,onChange:pa,sS:ca=l?D:void 0})=>{const ka=__c.nh(u),ta=LS(()=>null!==Q&&void 0!==Q?Q:ka,[Q,ka]),Ia=zS(Sa=>{__c.mh(u,Sa);pa&&pa(Sa)},[pa]),Ga=LS(()=>({id:Sa})=>wS(z,{Qf:ta,W_:N,id:Sa}),[N,ta]);return wS(B,{placeholder:G,disabled:da,name:T,
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 68 6f 6e 65 6e 75 6d 62 65 72 22 5d 29 3b 5f 5f 63 2e 48 66 28 62 2c 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 5f 5f 63 2e 6b 28 61 2e 6e 6f 72 6d 61 6c 69 7a 65 2c 22 4e 6f 72 6d 61 6c 69 7a 65 50 68 6f 6e 65 4e 75 6d 62 65 72 41 70 69 52 65 71 75 65 73 74 23 6e 6f 72 6d 61 6c 69 7a 65 20 72 65 71 75 69 72 65 64 22 29 7d 29 3b 62 3d 5f 5f 63 2e 4d 66 28 62 29 3b 63 6f 6e 73 74 20 5b 63 2c 7b 6e 38 3a 64 7d 5d 3d 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 68 69 73 2e 79 62 2e 70 6f 73 74 28 62 2c 24 56 61 2e 4e 28 61 2e 62 6f 64 79 29 2c 7b 75 63 3a 22 6e 6f 72 6d 61 6c 69 7a 65 70 68 6f 6e 65 6e 75 6d 62 65 72 61 70 69 22 7d 29 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 65 28 31 34 33 34 33 33 29 2e 74 68 65 6e 28 28 29 3d Data Ascii: honenumber"]);__c.Hf(b,{normalize:__c.k(a.normalize,"NormalizePhoneNumberApiRequest#normalize required")});b=__c.Mf(b);const [c,{n8:d}]=await Promise.all([this.yb.post(b,$Va.N(a.body),{uc:"normalizephonenumberapi"}),__webpack_require__.me(143433).then(()=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49765	104.16.103.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	871	OUT	GET /web/images/42153edee14c6bb2affb2bdb5c065004.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1333	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: image/webp Content-Length: 316952 Connection: close CF-Ray: 8daf6ae03cb5e83b-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 654525 Cache-Control: public, max-age=31556926 Content-Disposition: inline; filename="42153edee14c6bb2affb2bdb5c065004.webp" ETag: "42153edee14c6bb2affb2bdb5c065004" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Fri, 15 Mar 2024 02:49:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: qual=85, origFmt=jpeg, origSize=453219 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: mz6jyN7AbDCeIvwK9NXIOUfpJPhsStYg63OQb1BUXGHKBnzatBYvHaKNUinF5+TboenPARH/D8U= x-amz-replication-status: COMPLETED x-amz-request-id: AVRY1G4XR7NS3K69 x-amz-server-side-encryption: AES256 x-amz-version-id: bgZMNXUVYzlzdEm4QXBxT4m22A8.fcS9 X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 52 56 76 54 4b 31 59 65 47 54 33 6e 6d 65 70 64 6f 65 74 33 25 32 42 69 4e 32 51 67 72 68 35 54 64 34 72 76 66 69 52 43 71 4e 32 36 39 58 62 5a 4d 76 6d 61 4b 50 4c 4f 25 32 46 63 42 67 61 33 39 67 4d 39 48 38 55 33 51 4a 79 76 44 70 48 77 74 45 4c 75 7a 6a 44 30 5a 56 67 30 6a 49 73 68 33 38 75 33 38 75 63 25 32 46 37 7a 25 32 42 63 52 75 46 32 41 44 6f 67 59 76 67 4e 35 30 25 32 46 58 7a 63 52 37 44 49 6d 43 33 71 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVvTK1YeGT3nmepdoet3%2BiN2Qgrh5Td4rvfiRCqN269XbZMvmaKPLO%2FcBga39gM9H8U3QJyvDpHwtELuzjD0ZVg0jIsh38u38uc%2F7z%2BcRuF2ADogYvgN50%2FXzcR7DImC3qE%3D"}],"group":"cf-nel","max_age":60
2024-10-31 00:09:38 UTC	1051	IN	Data Raw: 52 49 46 46 10 d6 04 00 57 45 42 50 56 50 38 20 04 d6 04 00 10 4e 0d 9d 01 2a 80 07 38 04 3e 49 20 8c 44 a2 a2 23 13 e9 f6 8c 30 04 84 b1 b7 4b 4c dc 4d 16 2f b9 ee 2b fa 5f b0 3c 14 6b 1e 71 4a d5 ff 7f 98 9f fc 36 65 3f e5 ea fd e6 5f f7 7a 1f ff d3 e9 5e 50 0b d6 3f ee 3a d7 7c 26 dd 81 7c ea ee cd f9 a3 b6 37 7a af 34 cf 2d 9e ce 5f f1 79 e7 ed 58 f3 31 e9 5f fe cf a2 6f b1 7d 69 fe c0 e7 c5 71 7f 93 ff 47 68 ac 9b f2 7f e0 7f 9c fd c8 ff 13 fb 9d f3 67 c9 bd d6 fb 2b f0 1f e5 7f dc 7f 86 fd c3 fb c1 fe 6f fe 7f bc 3f 53 3e 0b fd d7 fe af f8 1f e7 3f 75 fd ff b9 9f fe 37 f9 2f f2 9f fc ff d0 7f ff ff ff f7 53 fd a7 fe 2f f5 9f e9 3f f6 7c e2 fe 9d fe 47 ff 1f fa 9f df 3f a1 8f e6 bf d3 3f e2 ff 88 ff 19 ff cb fc e7 ff ff ff ff 8a ff ed fe e3 7c 0c ff Data Ascii: RIFFWEBPVP8 N*8>I D#0KLM/+_<kqJ6e?_z^P?:\|&\|7z4-_yX1_o}iqGhg+o?S>?u7/S/?\|G??\|
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 05 90 f6 05 a3 f4 3a b9 2f f4 08 74 34 d5 6e d8 78 1f 06 18 0f 70 45 a5 5e bb 3a 55 2f 4b c6 55 b0 a1 b4 ec 4f 52 a7 b2 32 89 b4 69 42 1c ca 66 72 e6 12 2b 61 ad 88 ca 19 e2 ef 96 53 0d 50 4a b9 c1 e3 d2 46 84 ea 4a c9 3d a1 ee ba e8 63 c7 6d 27 f7 79 09 32 2a 61 d3 52 a3 fa 3d 2b 31 6d c7 66 99 22 c2 dc d0 f7 bc a6 33 05 62 b2 83 9a 4f 7a ac e3 db 93 6c 4e c4 0b b6 bb b0 43 b2 b1 19 42 ab 2b d5 fc 9e 8e 92 ff fb 21 b6 6f 48 7b 46 7a 56 a0 18 7d 23 2a 2f f3 b5 87 e2 95 5a 0a fc 21 8b 38 bb cf 4c 8d 42 3f 9f 88 cf 62 3e 89 36 e7 8d b6 88 2c 0d 74 9c 05 1b 01 69 76 38 a3 13 b8 d5 17 27 34 b9 b9 2b e6 bd 47 0f 64 b0 e2 fc 88 aa 71 d0 8f 3c 7f 3e ff 6f cc 4e 0c 29 01 39 cd 23 fd 52 22 49 5d fc 43 18 d5 99 65 dc 16 80 2f 2a 5b 67 22 90 f4 f5 c6 96 60 8f e2 56 Data Ascii: :/t4nxpE^:U/KUOR2iBfr+aSPJFJ=cm'y2aR=+1mf"3bOzlNCB+!oH{FzV}#/Z!8LB?b>6,tiv8'4+Gdq<>oN)9#R"I]Ce/*[g"`V
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 3f 9f d4 3f 01 bb 85 dc 5e d3 b6 8a 91 a2 36 e0 ce 0d 7d f9 83 5a ce 1d ed 1c 75 19 5d b4 7a 2a 8b 2e 54 48 0a 98 5f 52 35 9c 8a b9 56 60 97 fa bc 7d 38 42 c9 48 b6 62 ae 0d 82 f4 62 cb f5 db e1 0b 82 b7 29 a9 60 c9 a5 82 0c bd c5 dc 03 b5 43 e6 25 09 06 63 9d bc 5c 13 08 3c ef bd 52 c0 25 f5 b0 64 13 0c 68 41 6a 3b 8d 36 79 a8 3f 16 41 05 75 fc e3 3b 49 c0 b7 5b 83 85 7a fa ee 8f 1c f4 af 13 58 c2 71 e6 f9 f2 51 c9 57 ff ad 0d 61 d3 9d ce 8f 77 f3 bc 27 8b cc 63 27 b1 26 95 a7 fd 3a 02 91 48 5c 29 4b 31 d3 17 c6 e9 a1 71 a5 f9 90 b4 7d d6 1f 4f de c9 0f c4 28 df da 9e e6 17 c0 fa af eb 3f 6f 41 e0 ff ae 13 f1 c6 48 e3 8b 4e 40 81 e5 a4 02 16 1f 7c a3 b0 75 54 3d 4b 3e e2 b1 a4 9f 67 8c f2 79 f1 58 36 65 0d 79 c6 d6 06 ae 75 9c 48 f4 a7 fb 26 a1 a9 a9 96 Data Ascii: ??^6}Zu]z*.TH_R5V`}8BHbb)`C%c\<R%dhAj;6y?Au;I[zXqQWaw'c'&:H\)K1q}O(?oAHN@\|uT=K>gyX6eyuH&
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 4f 66 c0 7e 73 f3 3a 5f 82 ca 38 0d 56 4c 6c d6 25 e6 88 db cb 20 d7 64 22 6c 2b 65 1d 1f 43 45 bf 81 32 26 fd b8 00 08 d3 f0 bd 11 3f ca c8 3b 51 fe 78 da ce c5 e5 b9 b8 a5 3b 98 13 3c 48 c8 89 49 af e7 f3 78 9f e7 71 d1 be 1a 29 bc 9b 98 69 fc a9 3e b8 43 64 58 30 3a ff 2a 10 15 3f a2 ae a9 04 8c cf 86 1a 66 de 35 f2 5e 53 00 91 f1 1f 00 0b 34 d1 47 16 8d 52 50 8a 29 83 e3 dc 00 af 89 99 0d eb 2b 30 5a de 38 0c 2a 53 7e 42 db f1 b9 46 67 11 d1 6f 7e 1c a9 6a 0f 21 59 60 fd bd cf 97 c7 d1 04 06 03 ed 63 23 8f 0a 6f 5c b8 f9 d4 bf 04 f4 91 84 d0 99 45 81 5c 1d c3 32 d7 1c c6 8b 85 58 45 9a ea a6 87 6d a0 1c 57 89 3f 8d a2 a6 39 0f d4 08 da b2 96 47 a2 08 fc a9 ff d2 25 44 0e 79 d1 e8 4b 51 8e 87 30 4a cd b8 46 93 13 2e fe 26 36 58 d1 4d 1b a5 89 fe af 78 Data Ascii: Of~s:_8VLl% d"l+eCE2&?;Qx;<HIxq)i>CdX0:?f5^S4GRP)+0Z8S~BFgo~j!Y`c#o\E\2XEmW?9G%DyKQ0JF.&6XMx
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: d6 8c 5d 90 18 2d 1f 4f 10 19 c3 a5 23 97 4d c2 49 af 74 de 63 43 5b e8 e0 5f 97 41 1b 5a ca c3 c6 1b 02 ae ce 41 b2 43 e0 af f8 62 cd 4d 6c 2d bb a1 f0 4d fd f4 78 3c 10 cd f9 70 af d6 01 1e 8f 9d 88 54 22 10 19 e4 1e 27 87 20 34 50 c9 21 f4 f4 9e 4b 11 17 f0 f6 66 a9 c2 d1 e8 e1 e1 88 cf 83 7e fa a3 e9 45 b5 2b 3b 90 38 15 a4 e5 96 91 6e 1a 9a 43 a8 9f eb 56 ee 91 86 f6 fd b6 22 d3 fb e2 01 37 24 a0 44 31 82 87 fa b8 f0 6a 34 aa e4 98 47 60 d5 a0 1a 8b c4 a4 80 0f 98 bc 59 15 fb 7f b4 9c a5 90 e2 2e 5c 04 5a 2e 15 e2 0b 5c 8b 77 8f f0 25 79 f5 a1 df be 40 07 55 46 fc 3b 38 d8 05 9b 24 1b 3d 61 e4 93 52 9e f8 74 f0 60 9e 3e e1 8d d5 a9 81 eb e1 73 c9 f3 11 40 e6 27 2d bf 54 1b ae 23 91 22 62 39 c1 db 2f a6 bc 2b 1d d0 7d 14 74 83 cf d5 15 c9 df 03 1d bb Data Ascii: ]-O#MItcC[_AZACbMl-Mx<pT"' 4P!Kf~E+;8nCV"7$D1j4G`Y.\Z.\w%y@UF;8$=aRt`>s@'-T#"b9/+}t
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: e6 70 fb 83 9a 43 e0 4b 34 1f 9b dc e9 9a ad ba 10 06 a3 a9 cb a5 40 a3 29 38 9b f5 b4 94 c7 5c 72 af 4b e9 79 cf d2 36 fc 37 07 de d2 a1 67 34 b0 15 72 13 d3 7d d9 50 37 18 7e b6 00 c7 5a 23 5e 98 58 e7 fe ad 32 3b e4 7f 2e ba 1a 0a 7a b9 6d 22 10 8a 46 aa 16 6c 9b 23 58 37 51 0c a2 9e dd b1 85 eb 6c f6 aa 49 e8 d2 ab ba 77 77 df 5b bd 88 d3 7c a8 0e ca 59 a2 16 b9 51 34 c6 b2 e4 4f f8 f5 70 66 87 ee ff 20 2f 5c 85 ca 3e ed aa fd e4 58 25 52 87 ec cd 30 d3 9e 52 a0 e8 4a 29 5e e0 ac 54 dc ae 81 51 87 c5 2c 00 e2 e9 4f a6 37 36 e5 0a 29 a1 c5 94 f0 03 bf c1 30 66 bc cb 03 59 d1 9b f3 4c 61 c7 f4 94 f5 41 07 f2 68 5b e9 7d 04 0a 8f 32 3e 7c b1 18 5d e4 84 09 b1 99 ba ed 9d 7f 84 30 47 5a 7a 47 2f 3d 0f f8 9d 59 09 07 99 67 3e e5 08 bd 05 71 39 6b 76 ea 39 Data Ascii: pCK4@)8\rKy67g4r}P7~Z#^X2;.zm"Fl#X7QlIww[\|YQ4Opf /\>X%R0RJ)^TQ,O76)0fYLaAh[}2>\|]0GZzG/=Yg>q9kv9
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 14 52 00 69 bc d9 8f 87 0c bc cb 08 78 40 89 3d 8c 01 8b 63 b6 b9 f1 c5 c5 cf 42 9f 47 9d 7f d5 54 ff 0e 48 bb 8b 33 0e c0 67 e3 4b d8 88 03 01 03 79 0e 79 12 5f 0f f1 c9 51 46 46 d8 1e 07 14 1e f5 d8 aa 44 65 36 34 60 7f bc 5b 60 df a5 9d 4c 6a 8d 96 79 87 68 0d cd 3f 7a 79 d2 cf 7c 06 c8 1d 05 ef 79 dc 2d dc 9b 24 5b c4 3c 72 ba 85 aa ef 5f 53 af 9a e4 7d 76 4f 6c 9b 83 5b bf 27 61 ea e9 c7 eb 90 65 5f 04 b6 a9 20 3d a6 be 1d eb c5 b2 13 2e 16 c7 25 57 eb 38 32 a0 4e cc 85 97 7a 66 14 90 61 5c 9a 30 7a d8 8c eb 4a 7c 48 be 48 b2 24 09 eb 12 64 56 a4 48 96 4e fc a9 f1 c2 47 79 ac 4b ef e5 42 bd fb 3c 09 86 eb 28 da 36 5a dc 9f 76 0a 10 dc bd cb 05 8d e9 24 2a c1 44 33 93 a9 59 5f 79 4f a9 c2 7c 9e f5 01 8d af 0d 3c d7 f3 fd 05 ea 7a 90 2c 0e eb 50 21 48 Data Ascii: Rix@=cBGTH3gKyy_QFFDe64`[`Ljyh?zy\|y-$[<r_S}vOl['ae_ =.%W82Nzfa\0zJ\|HH$dVHNGyKB<(6Zv$*D3Y_yO\|<z,P!H
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: ae 2f d2 3c fe 49 95 cb c3 c1 90 01 48 8a 5e e8 26 64 10 11 81 63 4e 48 9a ab 5a 6d 00 f9 f0 32 25 d7 f2 14 79 87 a3 56 0e 7b dd 53 05 b0 31 48 a6 2a ba 86 06 55 d7 7f 63 a5 20 97 8b ce 43 48 81 d4 0b 15 41 d0 cd cc 3b a8 fe 18 91 03 a0 30 8d fb be a8 2b b6 52 0f b1 66 02 ad 1f 59 32 f9 ea 4e 47 af 3b e3 05 5f 3c 8d de 27 ae 11 ed cd e1 11 fe 0e ba 6e f0 e8 eb a8 7f 9c 7b f2 a2 8e dd 6a cd bb 04 4a 8e 4a 1f b9 14 03 0b 8e 10 30 0d 7e c5 fe 9b b7 9e 06 0b 39 b2 ae 98 46 2e 11 78 32 86 60 2c ec f2 31 db ea 18 6c aa 05 ad c7 92 ca 34 44 9b 65 d8 9b 00 3d e9 11 c5 ee d8 4a a4 91 ff 7c 17 a1 8c ab e4 f7 18 b2 43 75 87 a0 08 fa e1 c5 66 bd f4 1c ac 5b 63 32 b2 09 b9 61 9e 2a 3e e1 f1 38 71 f8 d9 f1 06 f5 c5 dd 1b d1 9a 4c 58 fa f2 fb fe 63 e1 d3 f9 19 35 e9 b6 Data Ascii: /<IH^&dcNHZm2%yV{S1HUc CHA;0+RfY2NG;_<'n{jJJ0~9F.x2`,1l4De=J\|Cuf[c2a>8qLXc5
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 89 a3 d1 4f 47 d1 f0 62 b6 10 26 f9 78 15 9f d5 42 f0 d9 e3 5f a6 69 5a 19 b6 0b b7 de fe 42 a0 a2 d6 d6 2d 52 00 03 b4 e9 4b a1 fe 6e 2e 72 2b 08 f9 8e 88 36 d4 da 53 a8 95 c7 71 3a fa fc 41 f6 a2 99 60 e7 72 0f 7a c6 8e d3 05 32 77 f1 67 13 fd e9 02 bc d1 74 c8 b9 4b 1c 98 3a b2 88 7d bb 7e 5d 4e d6 94 aa a3 99 8b 89 9b 50 02 9a f9 ce ec a4 b1 6d 21 71 be 19 fe 1e aa 86 30 de 3a 4a da d7 02 e7 ab 93 fb 39 a9 14 01 bf c9 b3 ab 47 53 da ef ae 99 af 14 9a 31 53 7f 29 87 cf 80 8f ad 00 45 e1 9e ed 73 fa 3a bc 9b 55 71 de 05 19 0b 52 75 6e 51 8e 0f b1 a2 2a 84 31 48 35 59 0e 70 20 6c db c1 d9 e9 be f8 2f 43 0d 1d fa a8 5a 03 15 f4 22 eb 85 cb 7e 46 f8 db 8f bf e7 13 a3 14 9c a9 62 c1 0f a4 31 d5 4a 40 f4 f9 4f 09 8e eb d6 be 21 a1 7d 43 7a f6 6f ab 75 96 f6 Data Ascii: OGb&xB_iZB-RKn.r+6Sq:A`rz2wgtK:}~]NPm!q0:J9GS1S)Es:UqRunQ*1H5Yp l/CZ"~Fb1J@O!}Czou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49773	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	615	OUT	GET /web/748178ca07be7fb4.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 19262 Connection: close CF-Ray: 8daf6ae0bcd268fc-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "38be64dceba955213f68196648d4ba6c" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: 2t35IcXctAHsJSS9XSIJvUcU1OnJ9UgXTmO7E2LS/BX7AOjgEEWdz8Rvyv7cca/6h/q7tOpeu5g= x-amz-replication-status: COMPLETED x-amz-request-id: 473KQ2QBCQZXY3BA x-amz-server-side-encryption: AES256 x-amz-version-id: dJe126i2p.l6l.DRNMi3BqsOl37K4Bpw X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 72 6d 61 63 6a 58 68 5a 72 63 39 76 54 6f 74 47 74 63 49 51 69 50 32 37 39 44 33 6f 50 77 66 53 55 4d 4d 6c 6d 34 43 58 31 46 69 54 52 32 46 6f 44 35 56 38 48 4c 59 7a 45 79 64 25 32 42 4c 59 79 56 53 56 5a 56 51 25 32 46 4e 6e 25 32 42 6c 72 35 61 36 65 49 75 37 78 6c 57 72 61 34 57 51 55 73 46 46 77 48 44 66 71 71 79 6e 79 4f 57 65 61 70 72 34 74 33 38 4d 6a 31 45 58 79 6e 79 4c 51 52 32 4a 38 76 54 4d 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0rmacjXhZrc9vTotGtcIQiP279D3oPwfSUMMlm4CX1FiTR2FoD5V8HLYzEyd%2BLYyVSVZVQ%2FNn%2Blr5a6eIu7xlWra4WQUsFFwHDfqqynyOWeapr4t38Mj1EXynyLQR2J8vTM%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:38 UTC	1198	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 33 39 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 35 35 38 30 34 35 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[2395],{/***/ 558045:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6f 62 61 6c 2e 73 61 29 29 7d 29 2e 63 61 74 63 68 28 28 29 3d 3e 7b 65 28 76 6f 69 64 20 30 29 7d 29 7d 29 3b 61 2e 63 55 2e 74 68 65 6e 28 65 3d 3e 7b 76 61 72 20 66 3b 6e 75 6c 6c 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 66 3d 65 2e 75 73 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 63 61 6c 6c 28 65 2c 22 53 65 6e 73 6f 72 73 43 68 61 6e 6e 65 6c 22 29 3b 6e 75 6c 6c 21 3d 65 26 26 6e 75 6c 6c 21 3d 61 2e 4f 45 2e 56 41 26 26 6e 75 6c 6c 21 3d 65 2e 69 64 65 6e 74 69 66 79 26 26 65 2e 69 64 65 6e 74 69 66 79 28 61 2e 4f 45 2e 56 41 2c 21 30 29 7d 29 7d 72 65 74 75 72 6e 20 61 2e 63 55 7d 2c 6b 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 0a 5b 61 5d 3b 6c 65 74 20 62 Data Ascii: obal.sa))}).catch(()=>{e(void 0)})});a.cU.then(e=>{var f;null===e\|\|void 0===e?void 0:null===(f=e.use)\|\|void 0===f?void 0:f.call(e,"SensorsChannel");null!=e&&null!=a.OE.VA&&null!=e.identify&&e.identify(a.OE.VA,!0)})}return a.cU},kQ=function(a){a=[a];let b
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 65 78 22 29 2e 67 65 74 41 6c 6c 28 22 6e 75 6c 6c 22 29 29 3b 62 3d 28 62 3d 28 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 64 29 29 2e 66 6c 61 74 28 29 29 3f 62 2e 6d 61 70 28 65 3d 3e 6f 51 2e 52 28 65 2e 65 76 65 6e 74 29 29 3a 5b 5d 3b 61 77 61 69 74 20 61 2e 6e 41 3b 72 65 74 75 72 6e 20 62 7d 2c 6a 54 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 76 32 22 29 3b 62 3d 62 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 61 6e 61 6c 79 74 69 63 73 5f 65 76 65 6e 74 5f 6d 65 74 61 64 61 74 61 22 29 3b 63 6f 6e 73 74 20 5b 64 2c 65 5d 3d 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 63 2e 63 6f 75 6e 74 28 29 Data Ascii: ex").getAll("null"));b=(b=(await Promise.all(d)).flat())?b.map(e=>oQ.R(e.event)):[];await a.nA;return b},jTa=async function(a,b){var c=b.objectStore("analytics_event_v2");b=b.objectStore("analytics_event_metadata");const [d,e]=await Promise.all([c.count()
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6f 6e 73 74 20 77 3d 28 29 3d 3e 7b 6d 3d 21 30 3b 75 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 75 3d 76 6f 69 64 20 30 29 3b 71 28 6c 29 7d 3b 69 66 28 63 2e 73 69 67 6e 61 6c 29 7b 63 6f 6e 73 74 20 78 3d 63 2e 73 69 67 6e 61 6c 3b 0a 78 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 72 65 74 75 72 6e 7b 72 65 73 75 6c 74 3a 64 2e 74 68 65 6e 28 41 3d 3e 7b 78 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 72 65 74 75 72 6e 20 41 7d 2c 41 3d 3e 7b 78 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 62 6f 72 74 22 2c 77 29 3b 74 68 72 6f 77 20 41 3b 7d 29 2c 63 61 6e 63 65 6c 3a 77 7d 7d 72 65 74 75 72 6e 7b 72 65 73 75 6c 74 3a 64 Data Ascii: onst w=()=>{m=!0;u&&(clearTimeout(u),u=void 0);q(l)};if(c.signal){const x=c.signal;x.addEventListener("abort",w);return{result:d.then(A=>{x.removeEventListener("abort",w);return A},A=>{x.removeEventListener("abort",w);throw A;}),cancel:w}}return{result:d
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 20 63 3d 61 3b 61 77 61 69 74 20 62 28 29 7d 2c 74 54 61 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 28 6e 65 77 20 44 61 74 65 28 61 2e 4c 65 2e 6e 6f 77 28 29 29 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 65 3d 6e 65 77 20 69 51 28 7b 65 76 65 6e 74 73 3a 62 2e 6d 61 70 28 66 3d 3e 6e 65 77 20 74 51 28 7b 2e 2e 2e 66 2c 42 63 3a 6e 65 77 20 75 51 28 7b 2e 2e 2e 66 2e 42 63 2c 71 34 3a 64 7d 29 7d 29 29 7d 29 3b 74 72 79 7b 61 77 61 69 74 20 6b 54 61 28 28 29 3d 3e 64 54 61 28 61 2e 5a 6b 2c 65 29 2c 66 3d 3e 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 5f 63 2e 66 64 7c 7c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 5f 63 2e 55 47 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 21 28 66 20 69 6e 73 74 61 6e 63 Data Ascii: c=a;await b()},tTa=async function(a,b,c){const d=(new Date(a.Le.now())).toISOString(),e=new iQ({events:b.map(f=>new tQ({...f,Bc:new uQ({...f.Bc,q4:d})}))});try{await kTa(()=>dTa(a.Zk,e),f=>f instanceof __c.fd\|\|f instanceof __c.UG)}catch(f){if(!(f instanc
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6e 67 61 67 65 6d 65 6e 74 5f 65 76 65 6e 74 3a 76 51 28 62 2e 41 67 61 29 2c 67 74 6d 5f 69 6e 6e 6f 76 69 64 3a 76 51 28 62 2e 43 67 61 29 2c 67 74 6d 5f 62 65 6e 5f 36 30 35 3a 76 51 28 62 2e 79 67 61 29 2c 67 74 6d 5f 64 69 63 62 6f 3a 76 51 28 62 2e 7a 67 61 29 2c 67 74 6d 5f 66 70 63 5f 72 74 69 64 3a 76 51 28 62 2e 42 67 61 29 2c 67 74 6d 5f 6d 65 74 61 64 61 74 61 3a 76 51 28 62 2e 44 67 61 29 7d 7d 29 7d 2c 78 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 42 63 2c 63 3d 61 2e 6f 6a 2c 64 2c 65 2c 66 3b 76 61 72 20 67 3d 7b 61 70 70 5f 6e 61 6d 65 3a 6e 75 6c 6c 3d 3d 3d 28 64 3d 63 2e 61 70 70 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 6e 61 6d 65 2c 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 3a 6e Data Ascii: ngagement_event:vQ(b.Aga),gtm_innovid:vQ(b.Cga),gtm_ben_605:vQ(b.yga),gtm_dicbo:vQ(b.zga),gtm_fpc_rtid:vQ(b.Bga),gtm_metadata:vQ(b.Dga)}})},xQ=function(a){var b=a.Bc,c=a.oj,d,e,f;var g={app_name:null===(d=c.app)\|\|void 0===d?void 0:d.name,product_variant:n
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 61 29 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 5b 30 5d 3f 62 5b 63 5d 3d 64 3a 62 5b 63 5d 3d 64 2e 6d 61 70 28 65 3d 3e 0a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3a 62 5b 63 5d 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 64 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 64 29 3a 64 3b 72 65 74 75 72 6e 20 62 7d 2c 45 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 62 3d 61 2e 4c 75 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 30 3a 62 2e 73 74 61 74 75 73 29 7b 76 61 72 20 63 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 61 2e 4c 75 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e Data Ascii: (a))Array.isArray(d)?"string"===typeof d[0]?b[c]=d:b[c]=d.map(e=>JSON.stringify(e)):b[c]="object"===typeof d?JSON.stringify(d):d;return b},ETa=function(a){var b;if(null===(b=a.Lu)\|\|void 0===b?0:b.status){var c;switch(null===(c=a.Lu)\|\|void 0===c?void 0:c.
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 69 73 2e 73 74 61 74 65 3d 31 29 2c 62 3b 7d 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 4c 65 3d 5f 5f 63 2e 64 64 3b 74 68 69 73 2e 59 30 3d 74 68 69 73 2e 5a 4f 3d 74 68 69 73 2e 73 74 61 74 65 3d 30 3b 74 68 69 73 2e 61 63 74 69 6f 6e 3d 61 3b 74 68 69 73 2e 63 66 61 3d 33 3b 74 68 69 73 2e 71 6f 61 3d 33 45 34 7d 7d 3b 76 61 72 20 66 54 61 3d 32 2c 65 54 61 3d 34 2c 67 54 61 3d 38 3b 76 61 72 20 44 51 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 6f 70 65 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 6c 51 28 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 51 28 62 2c 61 29 7d 61 73 79 6e 63 20 70 75 74 28 61 29 7b 63 6f 6e 73 74 20 62 3d 28 61 77 61 69 74 20 74 68 69 73 2e 64 62 29 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 22 61 6e 61 6c 79 74 Data Ascii: is.state=1),b;}}constructor(a){this.Le=__c.dd;this.Y0=this.ZO=this.state=0;this.action=a;this.cfa=3;this.qoa=3E4}};var fTa=2,eTa=4,gTa=8;var DQ=class{static open(a){const b=lQ(a);return new DQ(b,a)}async put(a){const b=(await this.db).transaction(["analyt
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 61 6e 73 61 63 74 69 6f 6e 20 6f 6e 20 61 20 63 6c 6f 73 65 64 20 64 61 74 61 62 61 73 65 22 2c 0a 22 54 68 65 20 64 61 74 61 62 61 73 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 69 73 20 63 6c 6f 73 69 6e 67 2e 22 5d 2e 73 6f 6d 65 28 62 3d 3e 61 2e 69 6e 63 6c 75 64 65 73 28 62 29 29 2c 73 54 61 3d 61 3d 3e 5b 22 54 68 65 20 6f 62 6a 65 63 74 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6f 72 20 61 72 67 75 6d 65 6e 74 2e 22 5d 2e 73 6f 6d 65 28 62 3d 3e 61 2e 69 6e 63 6c 75 64 65 73 28 62 29 29 2c 45 51 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 63 72 65 61 74 65 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 3d 21 30 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 29 72 65 74 75 72 6e 20 61 3b 61 3d 6e 65 77 Data Ascii: ansaction on a closed database","The database connection is closing."].some(b=>a.includes(b)),sTa=a=>["The object does not support the operation or argument."].some(b=>a.includes(b)),EQ=class{static create(a,b,c,d,e,f,g,h=!0){if(void 0===g)return a;a=new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49774	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	1249	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js? HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:38 UTC	720	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8132 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3tUnfqwNKaWd4RPtY2hj%2FtJVDcc9bR5WNrHCG%2BBSAeXcud8XvrYCj6o9Nd6F%2FM3h5r3d1neTRXdLjoUqSiXZywWfEFfaOc6rGWL4y7r8rulhHVutx6w2HQyiz3xz4Yg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8daf6ae1199c4620-DFW
2024-10-31 00:09:38 UTC	649	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 68 2c 69 2c 6e 2c 6f 2c 73 2c 7a 2c 41 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 55 2c 65 2c 66 29 7b 66 6f 72 28 55 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 55 28 34 35 33 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 55 28 34 34 38 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 34 36 39 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 55 28 34 35 36 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 55 28 33 38 37 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 55 28 34 31 37 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 33 37 31 29 29 2f 37 2b 70 61 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,n,o,s,z,A){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=parseInt(U(453))/1(parseInt(U(448))/2)+-parseInt(U(469))/3(-parseInt(U(456))/4)+parseInt(U(387))/5*(parseInt(U(417))/6)+-parseInt(U(371))/7+pa
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 54 29 7b 69 66 28 61 32 3d 61 30 2c 6e 75 6c 6c 3d 3d 44 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 48 3d 7b 7d 2c 49 3d 7b 7d 2c 4a 3d 27 27 2c 4b 3d 32 2c 4c 3d 33 2c 4d 3d 32 2c 4e 3d 5b 5d 2c 4f 3d 30 2c 50 3d 30 2c 51 3d 30 3b 51 3c 44 5b 61 32 28 34 36 33 29 5d 3b 51 2b 3d 31 29 69 66 28 52 3d 44 5b 61 32 28 33 36 34 29 5d 28 51 29 2c 4f 62 6a 65 63 74 5b 61 32 28 34 35 31 29 5d 5b 61 32 28 33 37 35 29 5d 5b 61 32 28 34 30 30 29 5d 28 48 2c 52 29 7c 7c 28 48 5b 52 5d 3d 4c 2b 2b 2c 49 5b 52 5d 3d 21 30 29 2c 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 61 32 28 34 35 31 29 5d 5b 61 32 28 33 37 35 29 5d 5b 61 32 28 34 30 30 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 61 32 28 34 35 31 29 5d 5b 61 32 28 33 37 35 29 5d 5b Data Ascii: T){if(a2=a0,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[a2(463)];Q+=1)if(R=D[a2(364)](Q),Object[a2(451)][a2(375)][a2(400)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[a2(451)][a2(375)][a2(400)](H,S))J=S;else{if(Object[a2(451)][a2(375)][
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 2c 47 3d 30 3b 47 3c 4d 3b 4f 3d 31 26 54 7c 4f 3c 3c 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 61 32 28 34 33 34 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 29 7b 4e 5b 61 32 28 34 33 34 29 5d 28 46 28 4f 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 50 2b 2b 3b 72 65 74 75 72 6e 20 4e 5b 61 32 28 33 36 33 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 61 33 29 7b 72 65 74 75 72 6e 20 61 33 3d 61 30 2c 6e 75 6c 6c 3d 3d 44 3f 27 27 3a 44 3d 3d 27 27 3f 6e 75 6c 6c 3a 65 2e 69 28 44 5b 61 33 28 34 36 33 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 34 29 7b 72 65 74 75 72 6e 20 61 34 3d 61 33 2c 44 5b 61 34 Data Ascii: ,G=0;G<M;O=1&T\|O<<1,P==E-1?(P=0,N[a2(434)](F(O)),O=0):P++,T>>=1,G++);for(;;)if(O<<=1,E-1==P){N[a2(434)](F(O));break}else P++;return N[a2(363)]('')},'j':function(D,a3){return a3=a0,null==D?'':D==''?null:e.i(D[a3(463)],32768,function(E,a4){return a4=a3,D[a4
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 7d 28 29 2c 6f 3d 7b 7d 2c 6f 5b 56 28 34 37 33 29 5d 3d 27 6f 27 2c 6f 5b 56 28 34 35 32 29 5d 3d 27 73 27 2c 6f 5b 56 28 34 34 30 29 5d 3d 27 75 27 2c 6f 5b 56 28 33 39 30 29 5d 3d 27 7a 27 2c 6f 5b 56 28 34 35 38 29 5d 3d 27 6e 27 2c 6f 5b 56 28 34 36 34 29 5d 3d 27 49 27 2c 6f 5b 56 28 34 35 37 29 5d 3d 27 62 27 2c 73 3d 6f 2c 68 5b 56 28 33 38 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 47 2c 61 61 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 61 61 3d 56 2c 45 3d 3d 3d 6e 75 6c 6c 7c 7c 45 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 47 3b 66 6f 72 28 49 3d 79 28 45 29 2c 44 5b 61 61 28 34 35 35 29 5d 5b 61 61 28 33 36 36 29 5d 26 26 28 49 3d 49 5b 61 61 28 34 36 35 29 5d 28 44 5b 61 61 28 34 35 35 29 5d 5b 61 61 28 33 36 36 Data Ascii: }(),o={},o[V(473)]='o',o[V(452)]='s',o[V(440)]='u',o[V(390)]='z',o[V(458)]='n',o[V(464)]='I',o[V(457)]='b',s=o,h[V(381)]=function(D,E,F,G,aa,I,J,K,L,M,N){if(aa=V,E===null\|\|E===void 0)return G;for(I=y(E),D[aa(455)][aa(366)]&&(I=I[aa(465)](D[aa(455)][aa(366
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 64 3d 21 5b 5d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 66 2c 44 29 7b 28 61 66 3d 61 65 2c 21 64 29 26 26 28 64 3d 21 21 5b 5d 2c 44 3d 42 28 29 2c 6c 28 63 2e 72 2c 44 2e 72 29 2c 44 2e 65 26 26 6d 28 61 66 28 34 36 30 29 2c 44 2e 65 29 29 7d 2c 69 5b 61 65 28 34 32 30 29 5d 21 3d 3d 61 65 28 34 31 35 29 29 3f 65 28 29 3a 68 5b 61 65 28 34 30 35 29 5d 3f 69 5b 61 65 28 34 30 35 29 5d 28 61 65 28 34 32 37 29 2c 65 29 3a 28 66 3d 69 5b 61 65 28 34 32 39 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b 61 65 28 34 32 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 67 29 7b 61 67 3d 61 65 2c 66 28 29 2c 69 5b 61 67 28 34 32 30 29 5d 21 3d 3d 61 67 28 34 31 35 29 26 26 28 69 5b 61 67 28 34 32 39 29 5d 3d 66 2c 65 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: d=![],e=function(af,D){(af=ae,!d)&&(d=!![],D=B(),l(c.r,D.r),D.e&&m(af(460),D.e))},i[ae(420)]!==ae(415))?e():h[ae(405)]?i[ae(405)](ae(427),e):(f=i[ae(429)]\|\|function(){},i[ae(429)]=function(ag){ag=ae,f(),i[ag(420)]!==ag(415)&&(i[ag(429)]=f,e())})}function
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 5b 28 5a 28 34 32 35 29 29 5d 28 29 2c 21 4a 29 72 65 74 75 72 6e 3b 4b 3d 5a 28 34 30 38 29 2c 4c 3d 7b 7d 2c 4c 5b 5a 28 34 33 30 29 5d 3d 68 5b 5a 28 33 39 35 29 5d 5b 5a 28 34 33 30 29 5d 2c 4c 5b 5a 28 34 31 36 29 5d 3d 68 5b 5a 28 33 39 35 29 5d 5b 5a 28 34 31 36 29 5d 2c 4c 5b 5a 28 34 32 33 29 5d 3d 68 5b 5a 28 33 39 35 29 5d 5b 5a 28 34 32 33 29 5d 2c 4c 5b 5a 28 34 30 33 29 5d 3d 68 5b 5a 28 33 39 35 29 5d 5b 5a 28 33 37 33 29 5d 2c 4d 3d 4c 2c 4a 5b 5a 28 34 37 32 29 5d 28 4b 2c 49 2c 21 21 5b 5d 29 2c 4a 5b 5a 28 33 38 36 29 5d 3d 32 35 30 30 2c 4a 5b 5a 28 34 36 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 4a 5b 5a 28 34 33 33 29 5d 28 5a 28 33 37 37 29 2c 5a 28 34 30 32 29 29 2c 4e 3d 7b 7d 2c 4e 5b 5a 28 34 30 37 29 5d 3d 47 2c 4e 5b Data Ascii: [(Z(425))](),!J)return;K=Z(408),L={},L[Z(430)]=h[Z(395)][Z(430)],L[Z(416)]=h[Z(395)][Z(416)],L[Z(423)]=h[Z(395)][Z(423)],L[Z(403)]=h[Z(395)][Z(373)],M=L,J[Z(472)](K,I,!![]),J[Z(386)]=2500,J[Z(468)]=function(){},J[Z(433)](Z(377),Z(402)),N={},N[Z(407)]=G,N[
2024-10-31 00:09:38 UTC	638	IN	Data Raw: 6e 67 2c 63 68 6c 41 70 69 55 72 6c 2c 36 59 4f 47 75 4c 54 2c 69 66 72 61 6d 65 2c 6a 73 64 2c 72 65 61 64 79 53 74 61 74 65 2c 63 68 63 74 78 2c 69 73 41 72 72 61 79 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 2f 30 2e 36 34 34 35 31 30 35 32 36 36 35 35 36 38 31 33 3a 31 37 33 30 33 32 39 38 39 37 3a 6b 43 6b 7a 34 45 36 6d 46 63 35 5f 5a 47 6f 69 7a 76 41 4a 4a 4e 46 56 4c 49 75 56 58 38 66 53 30 37 5a 78 77 39 61 68 73 59 49 2f 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 32 30 34 30 38 7a 53 49 68 79 64 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 63 61 74 63 68 2c 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 2c 63 68 6c 41 70 69 53 69 74 65 6b 65 79 2c 6d 73 67 2c 6d 61 70 2c 73 65 74 52 65 71 75 65 73 74 Data Ascii: ng,chlApiUrl,6YOGuLT,iframe,jsd,readyState,chctx,isArray,chlApiRumWidgetAgeMs,/0.6445105266556813:1730329897:kCkz4E6mFc5_ZGoizvAJJNFVLIuVX8fS07Zxw9ahsYI/,XMLHttpRequest,20408zSIhyd,DOMContentLoaded,catch,onreadystatechange,chlApiSitekey,msg,map,setRequest

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49775	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	615	OUT	GET /web/7db610c71177e514.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:38 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:38 GMT Content-Type: text/javascript Content-Length: 10727 Connection: close CF-Ray: 8daf6ae1ca23e54e-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75249 Cache-Control: public, max-age=31556926 ETag: "df76a9d6070d0e7a2de0f3838d753097" Expires: Fri, 31 Oct 2025 05:58:24 GMT Last-Modified: Wed, 30 Oct 2024 03:11:42 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: kdZL85/l8pwomKU/AAhYHQTDYjQO6Z03i7G6E1pXWxtcrgXhkmxqpGKY5943F8TJi9MNGZ2rE8s= x-amz-replication-status: COMPLETED x-amz-request-id: 473HCQPHGS6MV24W x-amz-server-side-encryption: AES256 x-amz-version-id: 0.DpLPZiU0hDRuOvC6JWhW9O21BHFGV5 X-Content-Type-Options: nosniff
2024-10-31 00:09:38 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6e 32 43 46 4a 41 25 32 42 38 48 37 78 49 30 6a 32 69 30 58 6b 6a 5a 61 34 6e 4f 79 76 4d 46 35 68 35 67 31 49 42 52 5a 72 61 65 6a 58 72 72 30 42 51 59 4c 45 62 79 52 70 6f 5a 45 4f 55 6c 6e 67 6e 70 4b 74 45 74 69 70 25 32 46 71 32 63 57 6e 68 30 4a 32 63 58 49 77 77 41 47 63 78 4b 66 33 41 4c 65 7a 57 44 5a 4c 6c 4a 44 30 34 4f 6b 45 33 53 68 35 73 44 66 32 4d 4e 58 70 4a 25 32 46 65 32 46 44 32 79 50 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n2CFJA%2B8H7xI0j2i0XkjZa4nOyvMF5h5g1IBRZraejXrr0BQYLEbyRpoZEOUlngnpKtEtip%2Fq2cWnh0J2cXIwwAGcxKf3ALezWDZLlJD04OkE3Sh5sDf2MNXpJ%2Fe2FD2yPs%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 35 30 35 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 39 37 37 34 35 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[1505],{/***/ 977452:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 65 66 3a 42 7d 29 3d 3e 6c 46 28 74 47 61 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 29 3d 3e 7b 76 61 72 20 44 3d 70 46 28 67 2c 42 29 3b 76 61 72 20 47 3d 76 6f 69 64 20 30 21 3d 3d 6c 3f 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 3f 6c 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6c 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 6d 46 28 6e 46 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 6c 46 28 22 69 6e 70 75 74 22 2c 7b 69 64 3a 78 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 66 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 21 66 26 26 61 3f 41 3a 76 6f 69 64 20 30 2c 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 3a 62 3f 7a 3a 76 6f 69 64 20 30 2c 74 79 70 65 3a 22 72 Data Ascii: ef:B})=>lF(tGa,{children:()=>{var D=pF(g,B);var G=void 0!==l?"string"===typeof l\|\|"number"===typeof l?l:JSON.stringify(l):void 0;return mF(nF,{children:[lF("input",{id:x,"aria-label":f,"aria-labelledby":!f&&a?A:void 0,"aria-describedby":b?z:void 0,type:"r
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 72 20 51 3b 63 6f 6e 73 74 20 61 61 3d 4e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3b 61 61 26 26 28 6e 75 6c 6c 3d 3d 3d 0a 44 7c 7c 76 6f 69 64 20 30 3d 3d 3d 44 3f 30 3a 6e 75 6c 6c 3d 3d 3d 28 51 3d 44 2e 63 75 72 72 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 51 3f 30 3a 51 2e 63 6f 6e 74 61 69 6e 73 28 61 61 29 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 42 7c 7c 76 6f 69 64 20 30 3d 3d 3d 42 3f 76 6f 69 64 20 30 3a 42 28 4e 29 29 7d 2c 5b 42 5d 29 3b 69 66 28 22 62 75 74 74 6f 6e 22 3d 3d 3d 78 29 72 65 74 75 72 6e 20 6c 46 28 77 47 61 2c 7b 6f 70 74 69 6f 6e 73 3a 64 2c 76 61 6c 75 65 3a 47 2c 6f 6e 43 68 61 6e 67 65 3a 4d 2c 63 6c 61 73 73 4e 61 6d 65 3a 75 2c 64 69 73 61 62 6c 65 64 3a 66 2c 69 64 3a 67 2c 61 72 69 61 4c 61 62 65 6c 3a 68 2c 7a 61 3a 6c Data Ascii: r Q;const aa=N.relatedTarget;aa&&(null===D\|\|void 0===D?0:null===(Q=D.current)\|\|void 0===Q?0:Q.contains(aa))\|\|(null===B\|\|void 0===B?void 0:B(N))},[B]);if("button"===x)return lF(wGa,{options:d,value:G,onChange:M,className:u,disabled:f,id:g,ariaLabel:h,za:l
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 71 75 69 72 65 5f 5f 28 33 35 38 35 37 39 29 2e 5a 3b 76 61 72 20 43 47 61 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 34 30 32 33 36 29 2e 67 6e 3b 5f 5f 63 2e 48 6d 61 3d 5f 5f 63 2e 45 28 28 29 3d 3e 28 7b 7d 29 29 3b 5f 5f 63 2e 41 43 61 3d 5f 5f 63 2e 45 28 28 29 3d 3e 28 7b 67 67 3a 5f 5f 63 2e 76 72 28 31 29 2c 6a 67 3a 5f 5f 63 2e 76 72 28 32 29 7d 29 29 3b 5f 5f 63 2e 44 47 61 3d 5f 5f 63 2e 45 28 28 29 3d 3e 28 7b 4c 50 3a 5f 5f 63 2e 56 28 31 29 2c 75 51 3a 5f 5f 63 2e 56 28 32 29 7d 29 29 3b 5f 5f 63 2e 4a 46 3d 46 46 28 28 7b 68 65 61 64 69 6e 67 3a 61 2c 50 61 3a 62 2c 79 61 3a 63 2c 50 6c 3a 64 2c 63 68 69 6c 64 72 65 6e 3a 65 7d 29 3d 3e 6d 46 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 78 4d 6d 34 31 77 Data Ascii: quire__(358579).Z;var CGa=__webpack_require__(240236).gn;__c.Hma=__c.E(()=>({}));__c.ACa=__c.E(()=>({gg:__c.vr(1),jg:__c.vr(2)}));__c.DGa=__c.E(()=>({LP:__c.V(1),uQ:__c.V(2)}));__c.JF=FF(({heading:a,Pa:b,ya:c,Pl:d,children:e})=>mF("div",{className:"xMm41w
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 75 22 2c 63 68 69 6c 64 72 65 6e 3a 5b 41 26 26 6c 46 28 41 2c 7b 7d 29 2c 7a 26 26 6c 46 28 7a 2c 7b 7d 29 2c 6c 46 28 61 2c 7b 6c 6f 61 64 69 6e 67 3a 6c 2c 58 52 3a 75 7d 29 5d 7d 29 2c 69 77 3a 67 2c 6f 62 3a 68 2c 65 61 3a 64 2c 6c 6f 63 61 74 69 6f 6e 3a 65 2c 49 72 61 3a 4a 28 22 50 46 4f 55 65 77 22 29 2c 76 61 6c 69 64 61 74 65 3a 66 2c 54 6a 3a 77 2c 64 6b 3a 78 7d 29 29 7d 3b 5f 5f 63 2e 4c 46 3d 46 46 28 28 7b 43 69 3a 61 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 62 2c 71 61 3a 63 2c 6f 62 3a 64 2c 53 67 3a 65 2c 68 65 61 64 69 6e 67 3a 66 2c 50 61 3a 67 2c 6f 6e 53 75 62 6d 69 74 3a 68 2c 54 65 3a 6c 2c 51 63 3a 6d 2c 48 6e 3a 71 2c 79 61 3a 75 2c 52 65 3a 77 2c 54 6a 3a 78 2c 64 6b 3a 41 2c 78 6d 3a 7a 2c 53 6a 3a 42 7d 29 3d 3e 7b 67 3d 6c Data Ascii: u",children:[A&&lF(A,{}),z&&lF(z,{}),lF(a,{loading:l,XR:u})]}),iw:g,ob:h,ea:d,location:e,Ira:J("PFOUew"),validate:f,Tj:w,dk:x}))};__c.LF=FF(({Ci:a,errorMessage:b,qa:c,ob:d,Sg:e,heading:f,Pa:g,onSubmit:h,Te:l,Qc:m,Hn:q,ya:u,Re:w,Tj:x,dk:A,xm:z,Sj:B})=>{g=l
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 6e 65 3a 22 74 65 72 74 69 61 72 79 22 2c 63 68 69 6c 64 72 65 6e 3a 60 20 24 7b 4a 28 22 6c 6b 54 48 33 67 22 29 7d 60 7d 29 5d 7d 29 7d 3b 5f 5f 63 2e 4f 46 3d 28 30 2c 5f 5f 63 2e 44 46 29 28 66 75 6e 63 74 69 6f 6e 28 7b 6c 61 62 65 6c 3a 61 2c 75 6e 3a 62 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 63 2c 65 72 72 6f 72 3a 64 2c 74 6f 6e 65 3a 65 2c 63 68 69 6c 64 72 65 6e 3a 66 2c 63 6f 6e 74 72 6f 6c 3a 67 2c 6d 6f 64 65 3a 68 3d 22 6e 6f 6e 65 22 2c 76 61 6c 75 65 3a 6c 2c 62 64 3a 6d 2c 73 74 6f 72 65 3a 71 2c 6e 61 6d 65 3a 75 7d 29 7b 63 6f 6e 73 74 20 77 3d 6f 46 28 29 2c 78 3d 6f 46 28 29 2c 41 3d 6f 46 28 29 2c 7a 3d 6f 46 28 29 2c 42 3d 5f 5f 63 2e 67 68 28 7b 73 74 6f 72 65 3a 71 2c 6e 61 6d 65 3a 75 2c 76 61 6c 75 65 3a 6c 2c 62 64 3a 6d 7d 29 Data Ascii: ne:"tertiary",children:` ${J("lkTH3g")}`})]})};__c.OF=(0,__c.DF)(function({label:a,un:b,description:c,error:d,tone:e,children:f,control:g,mode:h="none",value:l,bd:m,store:q,name:u}){const w=oF(),x=oF(),A=oF(),z=oF(),B=__c.gh({store:q,name:u,value:l,bd:m})
2024-10-31 00:09:38 UTC	1369	IN	Data Raw: 20 62 3d 74 68 69 73 2e 70 72 6f 70 73 2e 64 69 73 61 62 6c 65 64 2c 63 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 70 74 69 6f 6e 2c 64 3d 74 68 69 73 2e 70 72 6f 70 73 2e 56 55 2c 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 63 6c 61 73 73 4e 61 6d 65 2c 66 3d 74 68 69 73 2e 70 72 6f 70 73 2e 51 65 2c 67 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 46 6f 63 75 73 2c 68 3d 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 42 6c 75 72 3b 76 61 72 20 6c 3b 72 65 74 75 72 6e 20 6c 46 28 47 47 61 2c 7b 61 72 69 61 4c 61 62 65 6c 3a 63 2e 61 72 69 61 4c 61 62 65 6c 2c 73 65 6c 65 63 74 65 64 3a 74 68 69 73 2e 70 72 6f 70 73 2e 73 65 6c 65 63 74 65 64 2c 64 69 73 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 28 6c 3d 63 2e 64 69 73 61 62 6c 65 64 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c Data Ascii: b=this.props.disabled,c=this.props.option,d=this.props.VU,e=this.props.className,f=this.props.Qe,g=this.props.onFocus,h=this.props.onBlur;var l;return lF(GGa,{ariaLabel:c.ariaLabel,selected:this.props.selected,disabled:null!==(l=c.disabled)&&void 0!==l?l
2024-10-31 00:09:38 UTC	1144	IN	Data Raw: 28 22 6b 65 79 62 6f 61 72 64 22 29 7d 2c 73 47 61 3d 5b 5b 22 41 72 72 6f 77 55 70 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 44 6f 77 6e 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 4c 65 66 74 22 2c 51 46 5d 2c 5b 22 41 72 72 6f 77 52 69 67 68 74 22 2c 51 46 5d 5d 3b 76 61 72 20 52 46 2c 48 47 61 3b 52 46 3d 61 3d 3e 62 3d 3e 61 2e 74 65 73 74 28 62 29 3f 5f 5f 63 2e 75 7a 2e 76 61 6c 69 64 28 29 3a 5f 5f 63 2e 75 7a 2e 69 6e 76 61 6c 69 64 28 29 3b 48 47 61 3d 52 46 28 2f 5e 5b 5e 40 5c 73 3a 5d 2b 40 5b 5e 40 5e 2e 5d 2b 5c 2e 5b 5e 40 5d 2b 24 2f 29 3b 5f 5f 63 2e 49 47 61 3d 52 46 28 2f 5e 28 3f 3a 5b 61 2d 7a 30 2d 39 21 23 24 25 26 27 2a 2b 2f 3d 3f 5e 5f 60 7b 7c 7d 7e 2d 5d 2b 28 3f 3a 5c 2e 5b 61 2d 7a 30 2d 39 21 23 24 25 26 27 2a 2b 2f 3d 3f 5e 5f 60 Data Ascii: ("keyboard")},sGa=[["ArrowUp",QF],["ArrowDown",QF],["ArrowLeft",QF],["ArrowRight",QF]];var RF,HGa;RF=a=>b=>a.test(b)?__c.uz.valid():__c.uz.invalid();HGa=RF(/^[^@\s:]+@[^@^.]+\.[^@]+$/);__c.IGa=RF(/^(?:[a-z0-9!#$%&'+/=?^_`{\|}~-]+(?:\.[a-z0-9!#$%&'+/=?^_`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49770	142.250.186.142	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	386	OUT	GET /.well-known/web-identity HTTP/1.1 Host: google.com Connection: keep-alive Accept: application/json Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: webidentity User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:39 UTC	466	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/.well-known/web-identity Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 244 X-XSS-Protection: 0 Date: Thu, 31 Oct 2024 00:05:18 GMT Expires: Thu, 31 Oct 2024 00:35:18 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 260 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:39 UTC	244	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 2e 77 65 6c 6c 2d 6b 6e 6f 77 6e 2f 77 65 62 2d 69 64 65 6e 74 69 74 79 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/.well-known/web-identity">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49776	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	1462	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/8daf6abd5a378c58 HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 15975 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:38 UTC	15975	OUT	Data Raw: 7b 22 77 70 22 3a 22 61 38 54 42 2b 51 53 62 2b 6f 54 2b 30 64 2d 53 4c 53 4b 72 47 42 51 36 72 69 76 72 68 58 68 52 52 51 62 53 74 55 72 33 77 36 4f 77 41 54 72 75 33 46 43 2d 77 6f 53 39 72 30 4c 54 4d 5a 38 38 72 69 6d 52 72 34 72 52 36 52 54 53 72 73 52 53 37 2d 4e 42 6d 6f 38 44 59 79 42 33 77 63 38 76 69 49 39 4b 64 4d 65 42 37 63 2b 6c 76 71 53 49 55 33 6d 68 72 2b 54 54 45 68 75 51 44 5a 72 32 4d 5a 41 67 44 72 67 42 64 75 72 51 6c 54 72 68 42 51 51 42 63 30 42 68 72 53 77 72 47 6f 31 72 53 71 44 72 24 70 62 69 4d 38 46 53 69 6d 5a 54 72 51 70 44 72 51 2d 43 47 72 43 51 72 53 44 73 41 6a 54 79 39 76 36 51 4d 51 53 67 37 76 38 55 2b 63 56 6e 67 33 72 58 42 51 68 50 78 38 72 62 31 38 77 64 41 33 57 73 4d 72 43 6e 67 6d 63 58 69 42 72 6a 6d 58 41 68 Data Ascii: {"wp":"a8TB+QSb+oT+0d-SLSKrGBQ6rivrhXhRRQbStUr3w6OwATru3FC-woS9r0LTMZ88rimRr4rR6RTSrsRS7-NBmo8DYyB3wc8viI9KdMeB7c+lvqSIU3mhr+TTEhuQDZr2MZAgDrgBdurQlTrhBQQBc0BhrSwrGo1rSqDr$pbiM8FSimZTrQpDrQ-CGrCQrSDsAjTy9v6QMQSg7v8U+cVng3rXBQhPx8rb18wdA3WsMrCngmcXiBrjmXAh
2024-10-31 00:09:39 UTC	1355	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.canva.com; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; Path=/; Expires=Fri, 31-Oct-25 00:09:39 GMT; Domain=.canva.com; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2FXeeAkZX44ZmajPjQfBXtHutpaV641OKBiZdPNwZpX2H9u1SCe9HbbxTNfN8Eeit%2B%2FEnWjtfjtiJjVG4XdWdOaevR6HRZOQkFuph272b2XyOmcfhAxbRnEJjt%2Bocus%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8daf6ae2982ee8fd-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49777	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:38 UTC	1810	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive X-Canva-Brand: BAAAAAAAAAA X-Canva-App: login sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 391016d X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20241028-21 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:39 UTC	1083	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6ae2cca845ef-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin x-request-id: 8daf6ae2cca845ef x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rXhWcYJMTS6rvxhkJ%2FXunFLT%2FyCPf2ldCepMCiP1iGSSZA3vZWpQFy%2BigLzoYBA8RN6TUTlkK5%2F2MW2ckCci5LbqUZ%2FKXpFg4QUso7maLT7GWfcnqg%2BWMlLfYk2OfBs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:39 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 69 38 73 43 36 4c 36 5f 57 77 52 41 57 4c 77 54 4f 6e 51 38 57 66 46 32 4a 6b 63 74 6f 49 36 7a 71 5f 6f 34 44 6f 61 6d 45 57 50 6c 49 37 4b 79 44 6e 61 34 72 44 33 36 45 79 33 56 53 6f 50 72 57 6c 51 6f 6c 32 58 71 59 71 5a 74 34 30 33 78 44 66 35 56 46 34 61 63 48 50 49 22 2c 22 42 22 3a 31 37 33 30 33 34 30 35 37 39 30 37 34 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"i8sC6L6_WwRAWLwTOnQ8WfF2JkctoI6zq_o4DoamEWPlI7KyDna4rD36Ey3VSoPrWlQol2XqYqZt403xDf5VF4acHPI","B":1730340579074}
2024-10-31 00:09:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49779	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	622	OUT	GET /web/f0398d1166314304.vendor.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:39 UTC	1192	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript Content-Length: 115121 Connection: close CF-Ray: 8daf6ae3b9e44766-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 670437 Cache-Control: public, max-age=31556926 ETag: "cb1826af86c8190ceb1ff4f70e255c6d" Expires: Fri, 31 Oct 2025 05:58:25 GMT Last-Modified: Wed, 02 Oct 2024 01:22:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 03 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: GkibssxVH7IbbwIaE7sFd9JAZcH8EH6j8sYlylHzcxMSSxsIv8YBwTo1bK2aGIJUEfHXyZeTYjA= x-amz-replication-status: COMPLETED x-amz-request-id: 8BNXMRFCTCF55H7R x-amz-server-side-encryption: AES256 x-amz-version-id: oRoD7y5rqQdsCJGoBSIV9k9OhxwghWkV X-Content-Type-Options: nosniff
2024-10-31 00:09:39 UTC	350	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 62 47 6a 69 4e 6e 63 76 46 42 38 75 53 59 77 46 6c 44 6e 46 70 35 62 43 31 62 4b 52 25 32 46 6f 30 6e 4c 61 4f 32 6d 6b 32 63 45 56 65 57 32 38 65 6b 36 59 46 36 37 58 55 38 74 33 54 6c 69 41 36 25 32 46 68 53 4b 61 7a 63 6e 6f 69 35 62 53 6e 56 6c 66 4f 6e 46 75 45 70 32 51 6b 6f 51 46 6c 35 68 35 4d 4e 51 37 38 6c 78 69 64 50 4f 54 6a 68 77 6e 56 32 57 62 70 62 4b 52 70 38 77 67 79 6f 79 25 32 42 7a 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbGjiNncvFB8uSYwFlDnFp5bC1bKR%2Fo0nLaO2mk2cEVeW28ek6YF67XU8t3TliA6%2FhSKazcnoi5bSnVlfOnFuEp2QkoQFl5h5MNQ78lxidPOTjhwnV2WbpbKRp8wgyoy%2Bzo%3D"}],"group":"cf-nel","max_age":604800
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 31 33 36 5d 2c 7b 38 39 39 31 37 31 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 54 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 74 20 65 3d 28 74 2b 22 3d 22 2e 72 65 70 65 61 74 28 28 34 2d 74 2e 6c 65 6e 67 74 68 25 34 29 25 34 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 2b 22 29 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2f 22 29 2c 69 3d 61 74 6f 62 28 65 29 2c 73 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 69 2e 6c Data Ascii: "use strict";(self.webpackChunk_canva_web=self.webpackChunk_canva_web\|\|[]).push([[5136],{899171:(t,e,i)=>{i.d(e,{Z:()=>s});const s={Tn:function(t){const e=(t+"=".repeat((4-t.length%4)%4)).replace(/\-/g,"+").replace(/_/g,"/"),i=atob(e),s=new Uint8Array(i.l
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6d 65 26 26 65 2e 72 75 6e 74 69 6d 65 2e 69 64 29 72 65 74 75 72 6e 20 74 68 69 73 2e 76 64 2e 69 6e 66 6f 28 22 4e 6f 74 20 75 73 69 6e 67 20 49 6e 64 65 78 65 64 44 42 20 66 6f 72 20 73 74 6f 72 61 67 65 20 62 65 63 61 75 73 65 20 77 65 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 69 6e 73 69 64 65 20 61 6e 20 65 78 74 65 6e 73 69 6f 6e 22 29 2c 21 31 7d 72 65 74 75 72 6e 21 30 7d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 64 2e 69 6e 66 6f 28 22 4e 6f 74 20 75 73 69 6e 67 20 49 6e 64 65 78 65 64 44 42 20 66 6f 72 20 73 74 6f 72 61 67 65 20 64 75 65 20 74 6f 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 3a 20 22 2b 74 29 2c 21 31 7d 7d 42 64 28 74 2c 65 29 7b 76 61 72 20 69 3b 63 6f 6e 73 74 20 73 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d Data Ascii: me&&e.runtime.id)return this.vd.info("Not using IndexedDB for storage because we are running inside an extension"),!1}return!0}}catch(t){return this.vd.info("Not using IndexedDB for storage due to following error: "+t),!1}}Bd(t,e){var i;const s=null===(i=
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 72 2e 64 61 74 61 62 61 73 65 2e 53 64 2b 22 20 2d 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 6f 62 6a 65 63 74 53 74 6f 72 65 22 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 28 29 2c 76 6f 69 64 20 6f 2e 63 6c 6f 73 65 28 29 3b 63 6f 6e 73 74 20 61 3d 6f 2e 74 72 61 6e 73 61 63 74 69 6f 6e 28 5b 74 5d 2c 22 72 65 61 64 77 72 69 74 65 22 29 3b 61 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 28 29 3d 3e 6f 2e 63 6c 6f 73 65 28 29 3b 63 6f 6e 73 74 20 75 3d 61 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 74 29 2e 70 75 74 28 69 2c 65 29 3b 75 2e 6f 6e 65 72 72 6f 72 3d 28 29 3d 3e 7b 72 2e 76 64 2e 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 73 74 6f 72 65 20 6f 62 6a 65 Data Ascii: n indexedDB "+r.database.Sd+" - "+t+" is not a valid objectStore"),"function"==typeof n&&n(),void o.close();const a=o.transaction([t],"readwrite");a.oncomplete=()=>o.close();const u=a.objectStore(t).put(i,e);u.onerror=()=>{r.vd.error("Could not store obje
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 65 72 72 6f 72 28 22 43 6f 75 6c 64 20 6e 6f 74 20 6f 70 65 6e 20 63 75 72 73 6f 72 20 66 6f 72 20 22 2b 74 2b 22 20 6f 6e 20 69 6e 64 65 78 65 64 44 42 20 22 2b 73 2e 64 61 74 61 62 61 73 65 2e 53 64 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 28 29 7d 2c 6f 2e 6f 6e 73 75 63 63 65 73 73 3d 74 3d 3e 7b 76 61 72 20 73 3b 63 6f 6e 73 74 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 73 3d 74 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 72 65 73 75 6c 74 3b 6e 75 6c 6c 21 3d 6e 26 26 6e 75 6c 6c 21 3d 6e 2e 76 61 6c 75 65 26 26 6e 75 6c 6c 21 3d 6e 2e 6b 65 79 3f 65 28 6e 2e 6b 65 79 2c 6e 2e 76 61 6c 75 65 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 69 28 29 7d 7d 29 Data Ascii: error("Could not open cursor for "+t+" on indexedDB "+s.database.Sd),"function"==typeof i&&i()},o.onsuccess=t=>{var s;const n=null===(s=t.target)\|\|void 0===s?void 0:s.result;null!=n&&null!=n.value&&null!=n.key?e(n.key,n.value):"function"==typeof i&&i()}})
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 2e 64 65 6c 65 74 65 28 73 2e 6b 65 79 29 2e 6f 6e 73 75 63 63 65 73 73 3d 28 29 3d 3e 7b 61 2e 70 75 73 68 28 73 2e 76 61 6c 75 65 29 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 63 6f 6e 74 69 6e 75 65 26 26 73 2e 63 6f 6e 74 69 6e 75 65 28 29 29 3a 61 2e 6c 65 6e 67 74 68 3e 30 26 26 65 28 61 29 7d 7d 29 29 7d 63 6c 65 61 72 44 61 74 61 28 29 7b 69 66 28 21 74 68 69 73 2e 69 73 53 75 70 70 6f 72 74 65 64 28 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 69 20 69 6e 20 74 68 69 73 2e 64 61 74 61 62 61 73 65 2e 73 73 29 7b 63 6f 6e 73 74 20 65 3d 69 3b 74 68 69 73 2e 64 61 74 61 62 61 73 65 2e 73 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 74 68 69 73 2e 64 61 Data Ascii: .delete(s.key).onsuccess=()=>{a.push(s.value)}),"function"==typeof s.continue&&s.continue()):a.length>0&&e(a)}}))}clearData(){if(!this.isSupported())return!1;const t=[];for(const i in this.database.ss){const e=i;this.database.ss.hasOwnProperty(i)&&this.da
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 20 22 2b 74 3b 6e 75 6c 6c 21 3d 73 2e 76 64 3f 73 2e 76 64 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 73 2e 7a 67 29 7b 63 6f 6e 73 74 20 65 3d 22 42 72 61 7a 65 20 53 44 4b 20 57 61 72 6e 69 6e 67 3a 20 22 2b 74 2b 22 20 28 76 35 2e 33 2e 30 29 22 3b 6e 75 6c 6c 21 3d 73 2e 76 64 3f 73 2e 76 64 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 7d 7d 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 73 2e 7a 67 29 7b 63 6f 6e 73 74 20 65 3d 22 42 72 61 7a 65 20 53 44 4b 20 45 72 72 6f 72 3a 20 22 2b 74 2b 22 20 28 76 35 2e 33 2e 30 29 22 3b 6e 75 6c 6c 21 3d 73 2e 76 64 3f 73 2e 76 64 28 65 29 3a 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 7d 7d Data Ascii: "+t;null!=s.vd?s.vd(e):console.log(e)}},warn:function(t){if(s.zg){const e="Braze SDK Warning: "+t+" (v5.3.0)";null!=s.vd?s.vd(e):console.warn(e)}},error:function(t){if(s.zg){const e="Braze SDK Error: "+t+" (v5.3.0)";null!=s.vd?s.vd(e):console.error(e)}}}
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 74 75 72 6e 3b 63 6f 6e 73 74 20 69 3d 73 2e 5a 50 2e 63 72 28 29 3b 69 26 26 69 2e 63 68 61 6e 67 65 55 73 65 72 28 74 2e 74 6f 53 74 72 69 6e 67 28 29 2c 73 2e 5a 50 2e 67 72 28 29 2c 65 29 7d 7d 2c 31 39 35 30 38 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 6f 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 32 33 32 35 35 36 29 2c 6e 3d 69 28 31 32 36 38 39 32 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6e 2e 5a 2e 69 6e 66 6f 28 22 44 65 73 74 72 6f 79 69 6e 67 20 42 72 61 7a 65 20 69 6e 73 74 61 6e 63 65 22 29 2c 73 2e 5a 50 2e 64 65 73 74 72 6f 79 28 21 30 29 7d 7d 2c 36 34 33 36 33 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 42 52 4f 57 53 45 52 3a 22 62 72 6f 77 Data Ascii: turn;const i=s.ZP.cr();i&&i.changeUser(t.toString(),s.ZP.gr(),e)}},195088:(t,e,i)=>{i.d(e,{o:()=>r});var s=i(232556),n=i(126892);function r(){n.Z.info("Destroying Braze instance"),s.ZP.destroy(!0)}},643638:(t,e,i)=>{i.d(e,{Z:()=>s});const s={BROWSER:"brow
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 29 2e 63 6c 65 61 72 44 61 74 61 28 29 7d 69 66 28 73 2e 5a 50 2e 58 28 29 29 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 73 2e 5a 50 2e 67 72 28 29 29 69 2e 63 6c 65 61 72 44 61 74 61 28 21 30 29 7d 7d 2c 38 34 32 34 31 37 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 64 28 65 2c 7b 43 3a 28 29 3d 3e 72 2c 4e 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 73 3d 69 28 31 32 36 38 39 32 29 2c 6e 3d 69 28 34 37 31 30 33 31 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 69 66 28 74 5b 6e 2e 5a 2e 52 74 2e 68 74 5d 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 2e 5a 2e 52 74 2e 6c 65 5d 29 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 5a 28 74 5b 6e 2e 5a 2e 52 74 2e 68 74 5d 2c 74 5b 6e 2e 5a 2e 52 74 2e 6c 65 5d 2c 74 5b 6e 2e 5a 2e 52 74 2e 70 65 5d 2c Data Ascii: ).clearData()}if(s.ZP.X())for(const i of s.ZP.gr())i.clearData(!0)}},842417:(t,e,i)=>{i.d(e,{C:()=>r,N:()=>o});var s=i(126892),n=i(471031);function r(t){if(t[n.Z.Rt.ht]&&"boolean"==typeof t[n.Z.Rt.le])return new n.Z(t[n.Z.Rt.ht],t[n.Z.Rt.le],t[n.Z.Rt.pe],
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6f 74 20 6f 66 20 74 79 70 65 20 24 7b 74 7d 2e 60 29 7d 79 65 28 74 29 7b 73 2e 5a 2e 69 6e 66 6f 28 60 24 7b 74 7d 20 6e 6f 74 20 66 6f 75 6e 64 20 69 6e 20 66 65 61 74 75 72 65 20 66 6c 61 67 20 70 72 6f 70 65 72 74 69 65 73 2e 60 29 7d 62 65 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 2e 74 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 76 61 6c 75 65 7d 49 65 28 74 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 76 61 6c 75 65 7d 64 65 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 3d 74 2e 74 79 70 65 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 76 61 6c 75 65 7d 54 65 28 74 29 Data Ascii: ot of type ${t}.`)}ye(t){s.Z.info(`${t} not found in feature flag properties.`)}be(t){return"string"===t.type&&"string"==typeof t.value}Ie(t){return"number"===t.type&&"number"==typeof t.value}de(t){return"boolean"===t.type&&"boolean"==typeof t.value}Te(t)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49780	35.190.80.1	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	539	OUT	OPTIONS /report/v4?s=eCa8ZHcYTqorObP3zVtSofgKOG1oTckWvvHZxnHHbhY1RPdAcBSZQSemQO4P7e%2FCcFzVjS7PuB8U9VgH1cx%2FYfGS7wwIAah5kex3L9hzBBh8vKXAriG%2BkR9%2FSHeUAZN4tWs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://static.canva.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:39 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 31 Oct 2024 00:09:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49778	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 00:09:39 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=232563 Date: Thu, 31 Oct 2024 00:09:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49781	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	623	OUT	GET /web/6f9b607367582042.strings.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:39 UTC	1191	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript Content-Length: 17949 Connection: close CF-Ray: 8daf6ae59d93461e-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 658040 Cache-Control: public, max-age=31556926 ETag: "e24eba32ca9d242c9afad9f41d1a40d2" Expires: Fri, 31 Oct 2025 05:58:25 GMT Last-Modified: Fri, 20 Sep 2024 01:42:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 21 Sep 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: ZegMZwXb2h9Yosq1EhCvDMVopd+K3CCuad+X5uIEulnY2bWbr9C+Qbifq38OVKoCqjwtiUWUjW4= x-amz-replication-status: COMPLETED x-amz-request-id: K77AG5RS59TQEZB2 x-amz-server-side-encryption: AES256 x-amz-version-id: .nVSCBU02II49NM4YXW9LBvBeht1yw.L X-Content-Type-Options: nosniff
2024-10-31 00:09:39 UTC	354	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4d 65 30 69 71 77 69 71 70 68 45 53 56 6b 4f 25 32 42 4e 64 49 6a 31 76 4e 32 25 32 42 57 51 4a 46 64 73 25 32 46 4a 4d 58 64 38 38 64 4b 67 43 4b 71 5a 6e 41 72 68 66 45 75 54 69 78 52 47 47 25 32 46 65 4f 30 49 25 32 46 4d 61 4c 36 77 34 35 77 4b 79 75 66 30 42 5a 32 41 65 6d 4d 64 6c 74 4b 59 56 52 35 67 76 5a 6f 4d 6e 41 73 58 50 49 63 70 6f 37 59 58 46 6f 49 58 31 58 41 75 36 51 39 38 39 67 39 6a 41 6a 36 78 53 6f 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Me0iqwiqphESVkO%2BNdIj1vN2%2BWQJFds%2FJMXd88dKgCKqZnArhfEuTixRGG%2FeO0I%2FMaL6w45wKyuf0BZ2AemMdltKYVR5gvZoMnAsXPIcpo7YXFoIX1XAu6Q989g9jAj6xSo%3D"}],"group":"cf-nel","max_age":60
2024-10-31 00:09:39 UTC	1193	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 63 6f 6e 73 74 20 6d 65 73 73 61 67 65 73 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 22 7b 5c 22 33 50 62 4a 49 51 5c 22 3a 5c 22 50 61 64 75 61 5c 22 2c 5c 22 57 55 78 31 5a 41 5c 22 3a 5c 22 55 6c 73 61 6e 5c 22 2c 5c 22 50 58 36 76 58 77 5c 22 3a 5c 22 56 65 72 63 65 6c 6c 69 5c 22 2c 5c 22 51 31 4a 4c 55 51 5c 22 3a 5c 22 42 6f 74 73 77 61 6e 61 5c 22 2c 5c 22 56 36 74 63 6f 51 5c 22 3a 5c 22 4b 61 6e 61 67 61 77 61 5c 22 2c 5c 22 52 76 52 69 76 51 5c 22 3a 5c 22 43 68 69 6e 61 5c 22 2c 5c 22 46 76 59 75 37 51 5c 22 3a 5c 22 54 68 69 73 20 70 61 73 73 77 6f 72 64 20 69 73 20 63 6f 6d 6d 6f 6e 20 61 6e 64 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 4f 6f 73 4c 71 51 5c 22 3a 5c 22 50 68 69 6c Data Ascii: (function() { const messages = JSON.parse("{\"3PbJIQ\":\"Padua\",\"WUx1ZA\":\"Ulsan\",\"PX6vXw\":\"Vercelli\",\"Q1JLUQ\":\"Botswana\",\"V6tcoQ\":\"Kanagawa\",\"RvRivQ\":\"China\",\"FvYu7Q\":\"This password is common and easy to guess.\",\"OosLqQ\":\"Phil
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6e 64 20 53 61 62 61 5c 22 2c 5c 22 6d 59 49 43 49 67 5c 22 3a 5c 22 4a 6f 72 64 61 6e 5c 22 2c 5c 22 6d 66 44 73 72 41 5c 22 3a 5c 22 46 75 6b 75 73 68 69 6d 61 5c 22 2c 5c 22 78 4c 42 57 76 67 5c 22 3a 5c 22 49 64 61 68 6f 5c 22 2c 5c 22 30 64 6f 4a 34 51 5c 22 3a 5c 22 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 5c 22 2c 5c 22 39 34 35 4b 6e 67 5c 22 3a 5c 22 52 6f 6d 61 6e 69 61 5c 22 2c 5c 22 55 6d 41 48 43 51 5c 22 3a 5c 22 49 73 6c 65 20 6f 66 20 4d 61 6e 5c 22 2c 5c 22 6d 47 4f 68 76 77 5c 22 3a 5c 22 42 75 73 61 6e 5c 22 2c 5c 22 53 4e 6e 36 49 77 5c 22 3a 5c 22 47 72 6f 73 73 65 74 6f 5c 22 2c 5c 22 43 6c 6b 31 6f 51 5c 22 3a 5c 22 43 61 6d 62 6f 64 69 61 5c 22 2c 5c 22 4f 37 4f 53 78 51 5c 22 3a 5c 22 54 72 65 76 69 73 6f 5c 22 2c 5c 22 51 36 64 Data Ascii: nd Saba\",\"mYICIg\":\"Jordan\",\"mfDsrA\":\"Fukushima\",\"xLBWvg\":\"Idaho\",\"0doJ4Q\":\"Cayman Islands\",\"945Kng\":\"Romania\",\"UmAHCQ\":\"Isle of Man\",\"mGOhvw\":\"Busan\",\"SNn6Iw\":\"Grosseto\",\"Clk1oQ\":\"Cambodia\",\"O7OSxQ\":\"Treviso\",\"Q6d
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 75 5c 22 2c 5c 22 31 42 37 74 5a 67 5c 22 3a 5c 22 47 65 6f 72 67 69 61 5c 22 2c 5c 22 52 47 4a 4d 55 77 5c 22 3a 5c 22 52 65 63 65 6e 74 20 79 65 61 72 73 20 61 72 65 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 51 69 67 65 75 67 5c 22 3a 5c 22 52 75 73 73 69 61 5c 22 2c 5c 22 67 30 45 71 37 41 5c 22 3a 5c 22 47 75 69 6e 65 61 5c 22 2c 5c 22 34 62 73 54 6a 67 5c 22 3a 5c 22 4d 61 79 6f 74 74 65 5c 22 2c 5c 22 71 58 53 6b 46 41 5c 22 3a 5c 22 53 69 6e 61 6c 6f 61 5c 22 2c 5c 22 73 2f 32 57 4b 67 5c 22 3a 5c 22 54 6c 61 78 63 61 6c 61 5c 22 2c 5c 22 4e 42 72 6f 2f 77 5c 22 3a 5c 22 54 75 6e 69 73 69 61 5c 22 2c 5c 22 69 6a 6c 57 79 41 5c 22 3a 5c 22 53 6f 6e 64 72 69 6f 5c 22 2c 5c 22 56 52 2b 38 6f 77 5c 22 3a 5c 22 56 65 6e 65 7a 75 65 6c Data Ascii: u\",\"1B7tZg\":\"Georgia\",\"RGJMUw\":\"Recent years are easy to guess.\",\"Qigeug\":\"Russia\",\"g0Eq7A\":\"Guinea\",\"4bsTjg\":\"Mayotte\",\"qXSkFA\":\"Sinaloa\",\"s/2WKg\":\"Tlaxcala\",\"NBro/w\":\"Tunisia\",\"ijlWyA\":\"Sondrio\",\"VR+8ow\":\"Venezuel
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 7a 65 58 41 5c 22 3a 5c 22 43 6f 6e 66 69 72 6d 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 39 75 70 6f 73 77 5c 22 3a 5c 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 5c 22 2c 5c 22 32 49 38 43 6a 41 5c 22 3a 5c 22 54 c3 bc 72 6b 69 79 65 5c 22 2c 5c 22 50 51 73 47 53 51 5c 22 3a 5c 22 4d 61 72 74 69 6e 69 71 75 65 5c 22 2c 5c 22 37 45 6b 6a 44 77 5c 22 3a 5c 22 46 6c 6f 72 65 6e 63 65 5c 22 2c 5c 22 39 76 50 4e 77 67 5c 22 3a 5c 22 50 61 6e 61 6d 61 5c 22 2c 5c 22 47 6e 34 74 6c 41 5c 22 3a 5c 22 42 61 68 72 61 69 6e 5c 22 2c 5c 22 7a 4c 38 30 68 77 5c 22 3a 5c 22 47 75 61 6d 5c 22 2c 5c 22 53 70 50 78 63 41 5c 22 3a 5c 22 44 61 74 65 73 20 61 72 65 20 6f 66 74 65 6e 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 2e 5c 22 2c 5c 22 63 43 6c 74 47 67 5c 22 3a 5c 22 4d Data Ascii: zeXA\":\"Confirm password\",\"9uposw\":\"North Dakota\",\"2I8CjA\":\"Trkiye\",\"PQsGSQ\":\"Martinique\",\"7EkjDw\":\"Florence\",\"9vPNwg\":\"Panama\",\"Gn4tlA\":\"Bahrain\",\"zL80hw\":\"Guam\",\"SpPxcA\":\"Dates are often easy to guess.\",\"cCltGg\":\"M
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 22 50 61 70 75 61 20 4e 65 77 20 47 75 69 6e 65 61 5c 22 2c 5c 22 51 4e 67 66 33 67 5c 22 3a 5c 22 51 75 65 72 c3 a9 74 61 72 6f 5c 22 2c 5c 22 5a 4b 65 6d 75 41 5c 22 3a 5c 22 43 75 62 61 5c 22 2c 5c 22 57 30 6a 67 46 41 5c 22 3a 5c 22 4d 65 64 69 75 6d 5c 22 2c 5c 22 66 65 33 35 43 41 5c 22 3a 5c 22 50 75 65 62 6c 61 5c 22 2c 5c 22 36 6e 33 6e 4f 67 5c 22 3a 5c 22 43 6f 75 6e 74 72 79 20 63 61 6c 6c 69 6e 67 20 63 6f 64 65 5c 22 2c 5c 22 6e 5a 39 30 55 51 5c 22 3a 5c 22 4d 61 74 65 72 61 5c 22 2c 5c 22 47 31 36 30 66 77 5c 22 3a 5c 22 53 61 6e 74 61 20 43 61 74 61 72 69 6e 61 5c 22 2c 5c 22 6c 4a 4b 46 68 41 5c 22 3a 5c 22 54 61 72 61 6e 61 6b 69 5c 22 2c 5c 22 50 4c 4b 78 48 77 5c 22 3a 5c 22 46 75 6b 75 6f 6b 61 5c 22 2c 5c 22 42 78 74 42 74 67 5c 22 Data Ascii: "Papua New Guinea\",\"QNgf3g\":\"Quertaro\",\"ZKemuA\":\"Cuba\",\"W0jgFA\":\"Medium\",\"fe35CA\":\"Puebla\",\"6n3nOg\":\"Country calling code\",\"nZ90UQ\":\"Matera\",\"G160fw\":\"Santa Catarina\",\"lJKFhA\":\"Taranaki\",\"PLKxHw\":\"Fukuoka\",\"BxtBtg\"
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 2c 5c 22 71 4e 52 69 68 41 5c 22 3a 5c 22 59 61 6d 61 67 61 74 61 5c 22 2c 5c 22 55 32 2b 42 32 41 5c 22 3a 5c 22 41 62 75 20 44 68 61 62 69 5c 22 2c 5c 22 76 46 35 55 5a 51 5c 22 3a 5c 22 4e 65 77 20 43 61 6c 65 64 6f 6e 69 61 5c 22 2c 5c 22 57 66 62 6f 54 67 5c 22 3a 5c 22 41 6c 67 65 72 69 61 5c 22 2c 5c 22 6c 53 37 32 45 77 5c 22 3a 5c 22 52 69 6f 20 47 72 61 6e 64 65 20 64 6f 20 53 75 6c 5c 22 2c 5c 22 49 58 4a 55 33 41 5c 22 3a 5c 22 4e 65 77 20 4a 65 72 73 65 79 5c 22 2c 5c 22 33 2b 6e 71 6d 77 5c 22 3a 5c 22 45 71 75 61 74 6f 72 69 61 6c 20 47 75 69 6e 65 61 5c 22 2c 5c 22 32 4a 49 36 44 51 5c 22 3a 5c 22 4f 69 74 61 5c 22 2c 5c 22 56 61 6c 75 56 41 5c 22 3a 5c 22 42 72 61 7a 69 6c 5c 22 2c 5c 22 71 65 59 35 66 51 5c 22 3a 5c 22 42 65 72 67 61 6d Data Ascii: ,\"qNRihA\":\"Yamagata\",\"U2+B2A\":\"Abu Dhabi\",\"vF5UZQ\":\"New Caledonia\",\"WfboTg\":\"Algeria\",\"lS72Ew\":\"Rio Grande do Sul\",\"IXJU3A\":\"New Jersey\",\"3+nqmw\":\"Equatorial Guinea\",\"2JI6DQ\":\"Oita\",\"ValuVA\":\"Brazil\",\"qeY5fQ\":\"Bergam
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 61 5c 22 2c 5c 22 6e 58 66 47 55 67 5c 22 3a 5c 22 56 65 6e 69 63 65 5c 22 2c 5c 22 72 47 39 78 4b 67 5c 22 3a 5c 22 57 61 73 68 69 6e 67 74 6f 6e 5c 22 2c 5c 22 4c 61 62 63 6c 77 5c 22 3a 5c 22 45 6e 74 65 72 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 35 6d 75 43 6e 51 5c 22 3a 5c 22 52 c3 a9 75 6e 69 6f 6e 5c 22 2c 5c 22 57 6a 6b 52 36 67 5c 22 3a 5c 22 4f 74 61 67 6f 5c 22 2c 5c 22 45 58 37 2b 57 51 5c 22 3a 5c 22 4f 6b 6c 61 68 6f 6d 61 5c 22 2c 5c 22 65 52 48 31 78 67 5c 22 3a 5c 22 53 77 69 74 7a 65 72 6c 61 6e 64 5c 22 2c 5c 22 7a 76 56 7a 49 51 5c 22 3a 5c 22 49 72 61 6e 5c 22 2c 5c 22 57 4f 4e 74 58 51 5c 22 3a 5c 22 47 75 79 61 6e 61 5c 22 2c 5c 22 76 74 48 62 46 51 5c 22 3a 5c 22 49 62 61 72 61 6b 69 5c 22 2c 5c 22 39 73 78 4f 32 67 5c 22 3a 5c Data Ascii: a\",\"nXfGUg\":\"Venice\",\"rG9xKg\":\"Washington\",\"Labclw\":\"Enter password\",\"5muCnQ\":\"Runion\",\"WjkR6g\":\"Otago\",\"EX7+WQ\":\"Oklahoma\",\"eRH1xg\":\"Switzerland\",\"zvVzIQ\":\"Iran\",\"WONtXQ\":\"Guyana\",\"vtHbFQ\":\"Ibaraki\",\"9sxO2g\":\
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 5c 22 4d 61 6c 74 61 5c 22 2c 5c 22 65 68 32 6a 2b 77 5c 22 3a 5c 22 52 77 61 6e 64 61 5c 22 2c 5c 22 4c 35 68 53 36 51 5c 22 3a 5c 22 4f 6e 74 61 72 69 6f 5c 22 2c 5c 22 47 65 63 45 55 41 5c 22 3a 5c 22 42 65 6e 69 6e 5c 22 2c 5c 22 63 54 34 77 2f 41 5c 22 3a 5c 22 44 6a 69 62 6f 75 74 69 5c 22 2c 5c 22 5a 6e 55 41 43 67 5c 22 3a 5c 22 42 61 6a 61 20 43 61 6c 69 66 6f 72 6e 69 61 5c 22 2c 5c 22 58 39 56 30 70 77 5c 22 3a 5c 22 42 65 6c 67 69 75 6d 5c 22 2c 5c 22 38 44 53 5a 79 67 5c 22 3a 5c 22 48 69 64 65 20 70 61 73 73 77 6f 72 64 5c 22 2c 5c 22 35 72 48 50 59 51 5c 22 3a 5c 22 41 66 67 68 61 6e 69 73 74 61 6e 5c 22 2c 5c 22 2b 61 77 4a 73 67 5c 22 3a 5c 22 4e 65 77 20 48 61 6d 70 73 68 69 72 65 5c 22 2c 5c 22 79 38 2b 35 4a 51 5c 22 3a 5c 22 c3 85 6c Data Ascii: \"Malta\",\"eh2j+w\":\"Rwanda\",\"L5hS6Q\":\"Ontario\",\"GecEUA\":\"Benin\",\"cT4w/A\":\"Djibouti\",\"ZnUACg\":\"Baja userfornia\",\"X9V0pw\":\"Belgium\",\"8DSZyg\":\"Hide password\",\"5rHPYQ\":\"Afghanistan\",\"+awJsg\":\"New Hampshire\",\"y8+5JQ\":\"l
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 41 75 73 74 72 61 6c 69 61 6e 20 43 61 70 69 74 61 6c 20 54 65 72 72 69 74 6f 72 79 5c 22 2c 5c 22 5a 4c 43 36 49 41 5c 22 3a 5c 22 52 69 6f 20 64 65 20 4a 61 6e 65 69 72 6f 5c 22 2c 5c 22 4c 69 32 71 31 51 5c 22 3a 5c 22 53 65 72 67 69 70 65 5c 22 2c 5c 22 50 67 31 6f 36 67 5c 22 3a 5c 22 54 75 76 61 6c 75 5c 22 2c 5c 22 78 6c 35 73 42 51 5c 22 3a 5c 22 52 69 6d 69 6e 69 5c 22 2c 5c 22 74 7a 30 31 66 51 5c 22 3a 5c 22 4e 6f 72 74 68 6c 61 6e 64 5c 22 2c 5c 22 75 2f 79 45 56 51 5c 22 3a 5c 22 43 72 6f 61 74 69 61 5c 22 2c 5c 22 72 4d 52 45 41 67 5c 22 3a 5c 22 43 61 6d 65 72 6f 6f 6e 5c 22 2c 5c 22 4b 61 38 77 68 41 5c 22 3a 5c 22 42 72 75 6e 65 69 20 44 61 72 75 73 73 61 6c 61 6d 5c 22 2c 5c 22 6f 4f 63 33 74 77 5c 22 3a 5c 22 50 6c 65 61 73 65 20 63 6f Data Ascii: Australian Capital Territory\",\"ZLC6IA\":\"Rio de Janeiro\",\"Li2q1Q\":\"Sergipe\",\"Pg1o6g\":\"Tuvalu\",\"xl5sBQ\":\"Rimini\",\"tz01fQ\":\"Northland\",\"u/yEVQ\":\"Croatia\",\"rMREAg\":\"Cameroon\",\"Ka8whA\":\"Brunei Darussalam\",\"oOc3tw\":\"Please co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49782	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	615	OUT	GET /web/f4d98df598273a74.js HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:39 UTC	1190	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript Content-Length: 52177 Connection: close CF-Ray: 8daf6ae66ce2478b-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 75250 Cache-Control: public, max-age=31556926 ETag: "8f1c21026a9e88936f7211a1b26242cb" Expires: Fri, 31 Oct 2025 05:58:25 GMT Last-Modified: Wed, 30 Oct 2024 03:11:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding, Origin content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Fri, 31 Oct 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: LVEnT2AcESjmC2wUftTVXficoS/Aa4wWHq6MaLbe9tt4jw93T4m5dtv3BKljmTqZZTSoT4vKC6o= x-amz-replication-status: COMPLETED x-amz-request-id: 473N3RVDY8C92F9C x-amz-server-side-encryption: AES256 x-amz-version-id: Ie7VFlV0_ycEUmSCNNkbcq4ST31DsEtk X-Content-Type-Options: nosniff
2024-10-31 00:09:39 UTC	356	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 4a 45 6b 70 69 56 77 25 32 42 42 72 7a 65 42 57 57 77 46 4e 64 57 72 6a 4f 76 64 42 25 32 46 62 38 30 4a 53 25 32 46 49 51 32 79 30 36 53 5a 73 45 51 50 4c 6e 4f 62 79 53 46 6e 39 65 58 52 35 65 78 49 71 61 69 70 64 6c 38 25 32 46 4f 25 32 42 4f 46 6a 7a 56 55 54 59 48 6b 6e 65 47 72 56 78 34 73 49 69 6c 76 78 6d 50 59 73 4a 4d 7a 4b 78 6d 68 59 52 6c 74 49 73 46 6b 78 32 58 44 48 44 69 37 25 32 46 73 53 46 52 39 6b 62 34 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3JEkpiVw%2BBrzeBWWwFNdWrjOvdB%2Fb80JS%2FIQ2y06SZsEQPLnObySFn9eXR5exIqaipdl8%2FO%2BOFjzVUTYHkneGrVx4sIilvxmPYsJMzKxmhYRltIsFkx2XDHDi7%2FsSFR9kb4%3D"}],"group":"cf-nel","max_age":
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 3d 20 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 61 6e 76 61 5f 77 65 62 22 5d 20 7c 7c 20 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 38 38 5d 2c 7b 0a 0a 2f 2a 2a 2a 2f 20 32 37 33 37 35 32 3a 0a 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 5f 5f 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 5f 78 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 3b 63 6f 6e 73 74 20 5f 5f 77 65 62 5f 72 65 71 5f 5f 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 3b 5f 5f 77 65 62 5f 72 65 71 5f 5f 28 38 31 33 31 31 30 29 3b 5f 5f 77 65 62 5f 72 Data Ascii: (self["webpackChunk_canva_web"] = self["webpackChunk_canva_web"] \|\| []).push([[9888],{/***/ 273752:function(_, __, __webpack_require__) {__webpack_require__.n_x = __webpack_require__.n;const __web_req__ = __webpack_require__;__web_req__(813110);__web_r
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 65 6c 3a 68 2e 6c 61 62 65 6c 2c 6f 70 74 69 6f 6e 73 3a 68 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 63 65 28 66 2c 0a 6d 29 2c 58 44 3a 67 2c 73 6c 69 63 65 3a 5b 66 2c 6d 5d 7d 29 3b 65 2b 3d 6c 7d 7d 7d 72 65 74 75 72 6e 20 64 7d 3b 0a 41 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 6c 61 79 6f 75 74 2c 63 3d 61 2e 69 6e 6e 65 72 52 65 66 2c 64 3d 61 2e 6a 43 61 3b 61 3d 61 2e 63 68 69 6c 64 72 65 6e 3b 63 6f 6e 73 74 20 65 3d 5f 5f 63 2e 74 62 28 29 2e 64 69 72 65 63 74 69 6f 6e 2c 66 3d 28 30 2c 5f 5f 63 2e 4e 63 29 28 7b 58 6c 3a 6e 75 6c 6c 2c 59 6c 3a 6e 75 6c 6c 2c 6c 49 3a 64 3f 21 31 3a 22 52 54 4c 22 3d 3d 3d 65 2c 6e 76 3a 28 30 2c 5f 5f 63 2e 51 6b 29 28 7b 6c 61 79 6f 75 74 3a 62 7d 29 7d 29 2c 67 3d 28 30 2c 5f 5f Data Ascii: el:h.label,options:h.options.slice(f,m),XD:g,slice:[f,m]});e+=l}}}return d};AVa=function(a){const b=a.layout,c=a.innerRef,d=a.jCa;a=a.children;const e=__c.tb().direction,f=(0,__c.Nc)({Xl:null,Yl:null,lI:d?!1:"RTL"===e,nv:(0,__c.Qk)({layout:b})}),g=(0,__
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 5f 5f 63 2e 6f 79 61 7d 3d 61 2c 4d 3d 28 30 2c 5f 5f 63 2e 43 63 29 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 51 3d 5b 5d 3b 64 2e 66 6f 72 45 61 63 68 28 28 61 61 2c 66 61 29 3d 3e 7b 61 61 2e 6f 70 74 69 6f 6e 73 2e 66 6f 72 45 61 63 68 28 28 69 61 2c 70 61 29 3d 3e 7b 69 61 3d 48 3b 30 3d 3d 3d 70 61 26 26 30 3c 66 61 26 26 28 69 61 2b 3d 5f 5f 63 2e 70 79 61 29 3b 30 3d 3d 3d 70 61 26 26 6e 75 6c 6c 21 3d 61 61 2e 6c 61 62 65 6c 26 26 28 69 61 2b 3d 5f 5f 63 2e 71 79 61 29 3b 51 2e 70 75 73 68 28 69 61 29 7d 29 7d 29 3b 72 65 74 75 72 6e 20 51 7d 2c 5b 48 2c 64 5d 29 2c 7b 73 63 72 6f 6c 6c 52 65 66 3a 54 2c 4c 41 3a 64 61 7d 3d 5f 5f 63 2e 69 6d 28 7b 61 63 74 69 76 65 49 6e 64 65 78 3a 67 7d 29 3b 28 30 2c 5f 5f 63 2e 50 62 29 28 28 29 3d 3e 7b 69 66 28 Data Ascii: __c.oya}=a,M=(0,__c.Cc)(()=>{const Q=[];d.forEach((aa,fa)=>{aa.options.forEach((ia,pa)=>{ia=H;0===pa&&0<fa&&(ia+=__c.pya);0===pa&&null!=aa.label&&(ia+=__c.qya);Q.push(ia)})});return Q},[H,d]),{scrollRef:T,LA:da}=__c.im({activeIndex:g});(0,__c.Pb)(()=>{if(
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 3a 74 61 3f 6b 61 2e 6c 61 62 65 6c 3a 76 6f 69 64 20 30 2c 6f 70 74 69 6f 6e 73 3a 6b 61 2e 6f 70 74 69 6f 6e 73 2c 79 67 3a 77 2c 49 6e 3a 41 2c 48 70 3a 7a 2c 4e 69 3a 78 7d 29 5d 7d 2c 6b 61 2e 58 44 29 7d 29 2c 49 28 22 64 69 76 22 2c 7b 72 6f 6c 65 3a 22 6e 6f 6e 65 22 2c 73 74 79 6c 65 3a 7b 68 65 69 67 68 74 3a 69 61 7d 7d 29 5d 7d 29 7d 7d 29 7d 29 7d 29 7d 29 7d 3b 43 56 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 4a 28 22 65 67 49 6c 48 77 22 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 4a 28 22 65 4c 72 34 49 67 22 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 4a 28 22 48 38 48 53 45 77 22 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 4a 28 22 44 49 6d Data Ascii: label:ta?ka.label:void 0,options:ka.options,yg:w,In:A,Hp:z,Ni:x})]},ka.XD)}),I("div",{role:"none",style:{height:ia}})]})}})})})})};CVa=function(a){switch(a){case 1:return J("egIlHw");case 2:return J("eLr4Ig");case 3:return J("H8HSEw");case 4:return J("DIm
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 3e 7b 71 2e 63 36 28 75 29 3b 72 65 74 75 72 6e 20 49 56 61 28 71 2c 75 29 7d 2c 5b 5d 29 3b 63 6f 6e 73 74 20 4d 3d 75 2e 70 6c 61 63 65 68 6f 6c 64 65 72 7c 7c 44 56 61 28 63 29 3b 72 65 74 75 72 6e 20 77 53 28 41 2c 7b 77 6c 61 3a 47 2c 6f 6e 43 68 61 6e 67 65 3a 48 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 6d 3f 76 6f 69 64 20 30 3a 4d 2c 68 6e 3a 75 2e 68 6e 7c 7c 43 56 61 28 63 29 2c 2e 2e 2e 44 7d 29 7d 29 2c 44 69 3a 71 2c 50 62 3a 75 7d 7d 3b 4c 56 61 3d 66 75 6e 63 74 69 6f 6e 28 7b 52 73 3a 61 7d 29 7b 72 65 74 75 72 6e 7b 4d 46 3a 79 53 28 62 3d 3e 77 53 28 4b 56 61 2c 7b 52 73 3a 62 2e 57 5f 3f 76 6f 69 64 20 30 3a 61 2c 51 66 3a 62 2e 51 66 2c 69 64 3a 62 2e 69 64 7d 29 29 7d 7d 3b 4d 56 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: >{q.c6(u);return IVa(q,u)},[]);const M=u.placeholder\|\|DVa(c);return wS(A,{wla:G,onChange:H,placeholder:m?void 0:M,hn:u.hn\|\|CVa(c),...D})}),Di:q,Pb:u}};LVa=function({Rs:a}){return{MF:yS(b=>wS(KVa,{Rs:b.W_?void 0:a,Qf:b.Qf,id:b.id}))}};MVa=function(){return
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 20 22 44 61 74 65 73 20 61 72 65 20 6f 66 74 65 6e 20 65 61 73 79 20 74 6f 20 67 75 65 73 73 22 3a 72 65 74 75 72 6e 20 4a 28 22 53 70 50 78 63 41 22 29 3b 63 61 73 65 20 22 41 76 6f 69 64 20 64 61 74 65 73 20 61 6e 64 20 79 65 61 72 73 20 74 68 61 74 20 61 72 65 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 79 6f 75 22 3a 72 65 74 75 72 6e 20 4a 28 22 53 70 50 78 63 41 22 29 3b 63 61 73 65 20 22 54 68 69 73 20 69 73 20 61 20 74 6f 70 2d 31 30 20 63 6f 6d 6d 6f 6e 20 70 61 73 73 77 6f 72 64 22 3a 72 65 74 75 72 6e 20 4a 28 22 46 76 59 75 37 51 22 29 3b 63 61 73 65 20 22 54 68 69 73 20 69 73 20 61 20 74 6f 70 2d 31 30 30 20 63 6f 6d 6d 6f 6e 20 70 61 73 73 77 6f 72 64 22 3a 72 65 74 75 72 6e 20 4a 28 22 46 76 59 75 37 51 22 29 3b 63 61 73 65 20 22 54 Data Ascii: "Dates are often easy to guess":return J("SpPxcA");case "Avoid dates and years that are associated with you":return J("SpPxcA");case "This is a top-10 common password":return J("FvYu7Q");case "This is a top-100 common password":return J("FvYu7Q");case "T
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 74 2d 70 61 73 73 77 6f 72 64 22 3b 63 61 73 65 20 30 3a 63 61 73 65 20 32 3a 72 65 74 75 72 6e 22 6e 65 77 2d 70 61 73 73 77 6f 72 64 22 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 6e 28 61 29 3b 7d 7d 3b 0a 5f 5f 63 2e 4a 53 3d 66 75 6e 63 74 69 6f 6e 28 7b 6d 6f 64 65 3a 61 2c 4c 77 61 3a 62 3d 5b 5d 2c 45 46 3a 63 3d 21 31 2c 24 74 3a 64 2c 68 49 3a 65 3d 21 31 2c 6c 48 3a 66 3d 21 31 2c 55 6d 3a 67 2c 48 3a 68 2c 42 6f 3a 6c 2c 61 75 74 6f 46 6f 63 75 73 3a 6d 7d 29 7b 62 3d 55 56 61 28 61 2c 62 29 3b 61 3d 47 53 28 61 29 3b 68 3d 67 26 26 68 26 26 6c 3f 6e 65 77 20 48 53 28 68 2c 6c 29 3a 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 7b 43 6f 6d 70 6f 6e 65 6e 74 3a 71 2c 73 74 6f 72 65 3a 75 7d 3d 49 53 28 7b 62 64 3a 62 2c 5a 34 3a 28 29 3d Data Ascii: t-password";case 0:case 2:return"new-password";default:throw new n(a);}};__c.JS=function({mode:a,Lwa:b=[],EF:c=!1,$t:d,hI:e=!1,lH:f=!1,Um:g,H:h,Bo:l,autoFocus:m}){b=UVa(a,b);a=GS(a);h=g&&h&&l?new HS(h,l):void 0;const {Component:q,store:u}=IS({bd:b,Z4:()=
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 7a 2c 7b 51 66 3a 74 61 2c 57 5f 3a 4e 2c 69 64 3a 53 61 7d 29 2c 5b 4e 2c 74 61 5d 29 3b 72 65 74 75 72 6e 20 77 53 28 42 2c 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 47 2c 64 69 73 61 62 6c 65 64 3a 64 61 2c 6e 61 6d 65 3a 54 2c 61 75 74 6f 43 6f 6d 70 6c 65 74 65 3a 48 2c 61 75 74 6f 46 6f 63 75 73 3a 4d 2c 76 61 6c 75 65 3a 75 2e 76 61 6c 75 65 2c 65 72 72 6f 72 3a 74 61 2c 6f 6e 43 68 61 6e 67 65 3a 49 61 2c 6f 6e 42 6c 75 72 3a 77 2c 4d 46 3a 47 61 2c 69 79 3a 61 61 2c 68 6e 3a 66 61 2c 69 4a 3a 69 61 2c 55 6d 3a 6c 2c 73 53 3a 63 61 7d 29 7d 29 2c 73 74 6f 72 65 3a 75 7d 7d 3b 4d 53 3d 28 29 3d 3e 28 7b 75 65 3a 5f 5f 63 2e 55 28 32 29 2c 73 62 3a 5f 5f 63 2e 72 28 31 34 2c 5f 5f 63 2e 75 68 29 2c 71 66 3a 5f 5f 63 2e 55 28 31 36 29 7d 29 3b 59 56 61 Data Ascii: z,{Qf:ta,W_:N,id:Sa}),[N,ta]);return wS(B,{placeholder:G,disabled:da,name:T,autoComplete:H,autoFocus:M,value:u.value,error:ta,onChange:Ia,onBlur:w,MF:Ga,iy:aa,hn:fa,iJ:ia,Um:l,sS:ca})}),store:u}};MS=()=>({ue:__c.U(2),sb:__c.r(14,__c.uh),qf:__c.U(16)});YVa
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 6f 64 79 29 2c 7b 75 63 3a 22 6e 6f 72 6d 61 6c 69 7a 65 70 68 6f 6e 65 6e 75 6d 62 65 72 61 70 69 22 7d 29 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 65 28 31 34 33 34 33 33 29 2e 74 68 65 6e 28 28 29 3d 3e 28 7b 6e 38 3a 5f 5f 63 2e 47 47 7d 29 29 5d 29 3b 72 65 74 75 72 6e 20 64 2e 52 28 63 29 7d 29 3b 0a 5f 5f 63 2e 4e 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 52 6e 3d 6a 61 28 33 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 7b 73 74 61 74 65 3a 61 2c 72 61 3a 62 2c 66 6c 6f 77 3a 63 2c 73 62 3a 64 2c 4a 3a 65 7d 29 7b 73 77 69 74 63 68 28 62 2e 6b 69 6e 64 29 7b 63 61 73 65 20 30 3a 61 3d 6e 65 77 20 5f 5f 63 2e 4e 53 28 7b 73 62 3a 64 2c 65 6d 61 69 6c 3a 62 2e 65 6d 61 69 6c 2c 73 74 61 74 65 3a 61 2c 71 4f 3a 22 4c 4f 47 49 4e Data Ascii: ody),{uc:"normalizephonenumberapi"}),__webpack_require__.me(143433).then(()=>({n8:__c.GG}))]);return d.R(c)});__c.Nk.prototype.Rn=ja(3,async function({state:a,ra:b,flow:c,sb:d,J:e}){switch(b.kind){case 0:a=new __c.NS({sb:d,email:b.email,state:a,qO:"LOGIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49784	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	1238	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/8daf6abd5a378c58 HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:39 UTC	607	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twHJJwEkskl3YtVSIpzXoJ%2F6dwryQ%2Fa6HeWmcPhfQi9UyGfEd8Bk%2B8YG%2BxtAs2ukz%2BzuCA2LWiQyvlOyECc3lI2Dz0AuholbH8tc7kLyByDtnbYqp64OHTCuIcbdK5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8daf6ae81efa3066-DFW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49785	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	1199	OUT	GET /_ajax/csrf3/ae HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6
2024-10-31 00:09:39 UTC	1064	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6ae81b1d3584-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: deny x-request-id: 8daf6ae81b1d3584 x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pzw8f2Zgg22K2In%2Bk5hR87nsw4bhIfjo%2BejN9BcbiaetG9ifsCSVQZVGqYpJCx5QeFVPKcMb9n74bYFW%2BTH9fSq5TYauFLGZUyoyrcQgXr5jcp3yC6FjNTPQo6HcLAs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:39 UTC	143	IN	Data Raw: 38 39 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 41 22 3a 22 51 75 79 63 68 69 44 50 51 2d 58 2d 31 71 4c 2d 33 75 34 65 78 5a 79 65 70 44 4c 63 55 79 56 41 50 62 75 53 61 5f 48 4e 74 64 79 77 71 6a 33 42 72 67 45 65 56 7a 44 52 4c 31 7a 54 68 31 74 48 75 46 78 4e 6d 71 76 52 2d 6a 7a 55 4f 4e 74 31 75 39 73 38 67 6e 76 6d 43 5a 38 22 2c 22 42 22 3a 31 37 33 30 33 34 30 35 37 39 38 39 39 7d 0d 0a Data Ascii: 89'"])}while(1);</x>//{"A":"QuychiDPQ-X-1qL-3u4exZyepDLcUyVAPbuSa_HNtdywqj3BrgEeVzDRL1zTh1tHuFxNmqvR-jzUONt1u9s8gnvmCZ8","B":1730340579899}
2024-10-31 00:09:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49786	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	2485	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 6945 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: login sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 391016d X-Csrf-Token: i8sC6L6_WwRAWLwTOnQ8WfF2JkctoI6zq_o4DoamEWPlI7KyDna4rD36Ey3VSoPrWlQol2XqYqZt403xDf5VF4acHPI X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20241028-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcH [TRUNCATED]
2024-10-31 00:09:39 UTC	6945	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 30 38 37 39 63 39 61 64 2d 37 38 35 38 2d 34 34 33 61 2d 39 33 35 33 2d 36 37 64 32 30 62 33 32 39 61 31 30 22 2c 22 45 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 35 2e 37 34 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 37 2e 37 31 30 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 53 41 4d 4f 32 22 3a 22 41 22 2c 22 57 4b 44 55 49 22 3a 22 41 22 2c 22 56 53 57 4c 4f 22 3a 22 42 22 2c 22 54 4f 4d 4c 4f 22 3a 22 41 22 2c 22 53 4d 43 4f 4c 22 3a 22 42 22 2c 22 53 45 4f 50 53 22 3a 22 41 22 2c 22 52 56 54 50 4f 22 3a 22 42 22 2c 22 52 52 53 43 32 Data Ascii: {"A":[{"A?":"D","A":{"A":"0879c9ad-7858-443a-9353-67d20b329a10","E":"2024-10-31T00:09:35.744Z","F":"2024-10-31T00:09:37.710Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"SAMO2":"A","WKDUI":"A","VSWLO":"B","TOMLO":"A","SMCOL":"B","SEOPS":"A","RVTPO":"B","RRSC2
2024-10-31 00:09:40 UTC	1071	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6ae81fa0359a-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin x-request-id: 8daf6ae81fa0359a x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ge4MIh%2F6jt9sEIJnFsIV%2B2E5mYb2vCq2N7MDe3odQMoe%2FIBe3SN%2BXg9SGdfUeCg7D%2FzHPXqKreWyU4yy1XdncDcGyz%2BSKMsCGlwxgO8vEkMPy3AKk%2F2poDz0apmSO8A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:40 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-10-31 00:09:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49787	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	639	OUT	GET /web/images/42153edee14c6bb2affb2bdb5c065004.jpg HTTP/1.1 Host: static.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000
2024-10-31 00:09:39 UTC	1243	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:39 GMT Content-Type: image/jpeg Content-Length: 436648 Connection: close CF-Ray: 8daf6ae818334780-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 649515 Cache-Control: public, max-age=31556926 ETag: "42153edee14c6bb2affb2bdb5c065004" Expires: Fri, 31 Oct 2025 05:58:25 GMT Last-Modified: Fri, 15 Mar 2024 02:49:10 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept, Origin Cf-Bgj: imgq:85,h2pri Cf-Polished: degrade=85, origSize=453219 content-security-policy: script-src 'none'; frame-src 'none'; object-src 'none'; default-src 'none'; style-src 'unsafe-inline'; img-src 'self'; media-src 'self'; form-action 'none'; base-uri 'none'; report-uri https://csp.canva.com/_cspreport?app=s3_static timing-allow-origin: https://www.canva.com x-amz-expiration: expiry-date="Sun, 16 Mar 2025 00:00:00 GMT", rule-id="Cleanup objects in web/ older than 1 year" x-amz-id-2: mz6jyN7AbDCeIvwK9NXIOUfpJPhsStYg63OQb1BUXGHKBnzatBYvHaKNUinF5+TboenPARH/D8U= x-amz-replication-status: COMPLETED x-amz-request-id: AVRY1G4XR7NS3K69 x-amz-server-side-encryption: AES256 x-amz-version-id: bgZMNXUVYzlzdEm4QXBxT4m22A8.fcS9 X-Content-Type-Options: nosniff
2024-10-31 00:09:39 UTC	352	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 70 77 6a 4f 39 4c 56 64 38 44 57 37 75 71 35 4e 59 6d 65 25 32 46 4d 58 76 73 63 49 48 30 49 64 5a 48 54 4b 41 56 44 73 50 25 32 42 38 57 25 32 46 7a 32 36 30 4b 4b 79 39 39 47 54 50 71 4c 6d 6d 59 42 63 7a 59 6a 63 51 49 46 73 30 4d 39 70 78 53 79 64 46 73 34 4e 68 44 70 34 4b 41 6c 4f 75 52 57 6b 78 76 76 39 45 61 30 25 32 42 44 51 45 63 4e 63 6b 4a 54 47 6a 6d 50 50 51 75 31 76 6b 6b 56 6c 30 6a 4d 65 4b 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4pwjO9LVd8DW7uq5NYme%2FMXvscIH0IdZHTKAVDsP%2B8W%2Fz260KKy99GTPqLmmYBczYjcQIFs0M9pxSydFs4NhDp4KAlOuRWkxvv9Ea0%2BDQEcNckJTGjmPPQu1vkkVl0jMeKc%3D"}],"group":"cf-nel","max_age":6048
2024-10-31 00:09:39 UTC	1143	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 04 03 01 00 00 00 00 00 00 00 00 00 00 00 00 04 05 06 07 01 02 03 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b7 40 e7 d4 84 Data Ascii: JFIFC!"$"$C8"@
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 79 4a a4 0f 13 48 a7 b5 f3 29 f1 b1 d5 c3 87 0e 72 8e 4e f4 78 4c 8f 9f ba 5d de 3f 21 e0 f6 a3 2f 5d b8 67 d2 a4 5c 97 93 d6 96 d4 b6 e5 47 eb fc 23 27 a8 7c bd ea 4b f1 73 db 6c d2 75 37 c1 ae d9 da 50 d4 d3 cc 95 14 f5 ff 00 33 08 d9 64 d9 4d 6c b6 7d 92 b9 cd 89 84 56 56 69 93 21 a4 37 30 1c 4c 6b 33 4f d5 36 ad 55 7a fa df cd 7e 8f a3 2f 9e b7 b5 67 dd 18 af de 73 2b 3a aa b4 2b e8 99 fc 12 75 0f 39 48 1c ab a2 de 7c 8f d5 51 37 b6 79 75 ab 00 00 09 00 00 0e 80 63 b3 7f 07 7e 36 86 7e 72 2e 48 67 1e 33 26 a6 c9 3e e4 6e 4b ae d1 31 ce ef 1d 06 a6 69 56 d6 86 64 32 62 25 bd 8e 53 b1 8e c6 68 c0 09 f2 74 ca 1b 33 db 3f 40 81 12 00 00 00 01 cb a8 44 fb c9 48 e8 8d 39 b9 65 4c 01 38 80 24 00 00 00 03 cc 9e 9b f3 24 c4 55 c1 0b ce 9c c9 d7 f0 5b 6c 7d 41 Data Ascii: yJH)rNxL]?!/]g\G#'\|Kslu7P3dMl}VVi!70Lk3O6Uz~/gs+:+u9H\|Q7yuc~6~r.Hg3&>nK1iVd2b%Sht3?@DH9eL8$$U[l}A
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 7c bd a6 d0 bb 87 d3 e7 89 b7 2a 51 85 e3 0d d6 9a 6b c5 6c 4f 9c 34 ad 62 4d f3 78 83 cc a6 f1 2e 2e 89 3e c9 a4 1f 37 ed b4 61 6a ea 59 90 7e 40 20 cb c2 21 20 f2 21 97 19 c4 6d af 9c fd 19 e7 3b 71 db d7 65 27 76 5b 90 00 03 08 08 59 29 a0 9e 39 09 59 c2 32 4b b0 cb d0 76 4d 12 92 c9 57 68 7b c8 f3 aa 18 a1 3b 30 43 20 24 e1 df 81 e3 ab 82 9f b8 06 a8 6d c6 c3 4f 6e 2f 21 53 a7 37 a4 d4 bd b9 b3 5f 3e 53 86 fd f2 eb 5c c4 9d bb b3 c6 91 3c 57 f2 fc ee a9 3c 82 09 cf df b8 d0 e9 e9 f9 d1 a3 38 ed f1 31 8c e9 9d b3 b6 33 11 d7 89 ac 6b 6e c0 e7 30 6e 5b b2 7a 8b cb 9e a3 c2 e6 9b 6d 49 d4 dc 96 b9 ce 60 19 26 30 67 5a b3 de 31 d6 91 21 23 8d b9 cc d7 34 a4 8a 94 b2 75 a7 25 3a f6 4c 04 99 eb e7 eb cb 9f 59 8e 7a ef a4 aa 7a d2 cc ac e2 3d 75 db 8f 68 a8 Data Ascii: \|*QklO4bMx..>7ajY~@ ! !m;qe'v[Y)9Y2KvMWh{;0C $mOn/!S7_>S\<W<813kn0n[zmI`&0gZ1!#4u%:LYzz=uh
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 63 0e 9a 69 e7 77 56 dc ed 6e 1b e0 0c bd dc 80 90 00 00 0e 7c a0 a4 4c a6 60 01 20 00 01 8a d6 ca ae ad 85 58 a5 76 fb 78 d1 a8 cc b6 23 8f ad ea 47 e6 17 ec 7a c0 12 00 00 00 00 00 00 00 00 00 00 00 00 19 ab ed 0a be 62 8c 92 c6 a4 be f7 22 85 9c 17 fb fc 7c 33 d7 6c ae 97 1d b2 8e 02 8e 33 02 25 68 f6 ae 4c 1a c6 6d aa da d2 f9 bf 60 03 e7 bd 73 3a f1 ce 54 61 37 48 75 03 50 01 af 9c fd 19 e7 3b 71 5b d7 65 27 76 5b 90 86 cc a9 d9 ac 87 bc 39 b2 2b 2a da 2f 28 f1 7b 23 f0 99 34 43 ae f8 4c 9f b7 4f 3d 86 fb 18 9a f8 5d ab 6b a5 d0 7f a3 f3 fb 68 b7 85 2e 89 4a 45 64 92 79 47 58 db e3 31 98 c2 67 16 ab 97 1e dc 71 d7 c7 57 05 3f 70 12 28 fb a3 6f 8b f6 7a 2d d7 6a 76 45 a6 4d 76 07 ad f3 1c 57 bf 9b f9 11 ae 32 b2 d5 88 6b 31 15 89 a8 92 15 d2 1f ac c8 Data Ascii: ciwVn\|L` Xvx#Gzb"\|3l3%hLm`s:Ta7HuP;q[e'v[9+*/({#4CLO=]kh.JEdyGX1gqW?p(oz-jvEMvW2k1
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: fd 1b 9a 84 88 f9 3a 2c 5a 8e d6 aa bb 7e 5a 2a e6 9e df e6 ca aa b1 22 56 35 35 9d 21 d5 97 c0 dc 88 b9 43 7a ba f3 67 55 f3 ae 8c e4 14 f5 d5 57 f7 f0 b2 cc 22 1c e2 f3 96 46 57 8e 6c 9a df a1 32 e7 44 33 67 c7 7e 9a 22 67 70 8c d9 df 82 c9 1b 28 95 84 c3 3b f3 d0 78 24 f6 05 e9 67 ea 44 0e b8 eb a7 25 c9 77 38 a6 8b bf 8c dc 62 ef 43 f9 50 59 30 90 70 cf 69 49 e3 ef 50 18 3e c9 5a a0 25 b6 ae 28 fd 27 0d 53 a8 10 47 a4 71 b1 89 03 82 01 e4 e9 a7 cd 7d 76 b8 e9 de d5 4b d1 cd c7 af 81 0b 97 75 7e 87 90 67 39 9a ea de e4 8d 0c f1 69 9c 5a 39 12 24 58 53 9f 19 33 0c 22 5a 82 ee bc 7b 71 d2 57 9c bb 64 a4 e6 30 f9 cf 4f 77 a1 4c 44 26 66 18 85 c9 47 03 19 21 08 14 d3 f8 6b 7d 66 b1 b5 e3 48 26 96 5a 0e 6d a3 cb 4e d8 c3 54 4e 26 8b 5b ce 22 16 d9 7c fa 4e Data Ascii: :,Z~Z*"V55!CzgUW"FWl2D3g~"gp(;x$gD%w8bCPY0piIP>Z%('SGq}vKu~g9iZ9$XS3"Z{qWd0OwLD&fG!k}fH&ZmNTN&["\|N
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 5a 53 2b c6 66 69 59 cc 1a 73 d1 dd e8 48 e4 8d ae 65 99 73 86 a3 8e 40 82 c7 27 cc fc 3d 90 e8 fc da 39 cd d5 c9 6c b3 4e 98 ae 9f a5 ac f8 74 c9 db 32 d0 cf 64 58 51 cf bc e1 46 91 7f 47 cf 68 e9 39 7e cf b6 b3 b2 60 4f fa 65 24 f3 0f a7 bc c3 d9 e3 45 5d 1a d5 69 8b 9a 96 a5 96 e7 f5 56 71 9c 7b 40 13 a3 53 bf 24 35 ec ea 0d 1b 3a 60 6a 1d 41 0f 17 5c 1c 55 e9 b1 90 13 8a aa d5 aa 26 95 1a b4 6e 9a f0 35 b4 bb b4 65 d9 ea 47 f6 07 ec b7 00 48 c6 f9 c8 83 21 b0 94 cc 56 1a d8 fd 46 78 6d 93 a1 5d 62 c6 c8 9e 33 34 4a 40 09 ab 31 1d 6b b8 78 1b 2b d7 68 9c 00 15 85 9f 58 4c 51 be 97 f3 3f a7 ac 70 65 90 c6 77 a2 b4 3c dd 75 86 b7 1d b5 ac 75 46 9a 46 b2 e0 38 b5 c5 45 6f 30 77 64 83 7a de 7f 3d ea 0c 9c 1d 78 c8 4d 41 be 3b d7 84 be 2c c4 e7 d9 c9 15 d2 Data Ascii: ZS+fiYsHes@'=9lNt2dXQFGh9~`Oe$E]iVq{@S$5:`jA\U&n5eGH!VFxm]b34J@1kx+hXLQ?pew<uuFF8Eo0wdz=xMA;,
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 23 ec 80 72 ec 00 00 4b 9d 05 7e d0 5d 7c 56 f5 d9 49 dd 9d 7c 87 9f bd 03 42 e1 30 5c e7 78 94 d6 7d 6a aa f9 db c9 70 8b a7 37 d4 89 13 a7 58 a2 e6 28 84 ea d5 e7 5c b8 e3 25 e9 dd 5a 5e d6 8e 9d 39 f1 36 b9 a9 cb 93 1d a4 5c 3b f0 c3 a7 c7 57 05 3f 70 1c 87 36 ce 0f a9 ef cb b6 bc de d3 55 95 54 da fe b7 c6 4d 32 16 f3 d0 71 75 06 23 92 78 39 e9 cd 18 ef b6 1c 64 91 5e 32 66 a8 b5 aa 9d 73 a8 39 f7 e5 ea f3 68 6d 8b 4d b1 03 9e c0 bc 9e 96 2b f7 cf 3e 81 f3 ba 1b d0 ba 36 fc c7 ac c2 9e 50 eb e8 e2 cb 5b dc 75 af 7f 04 4b 3b 76 ec 68 af 0b 62 a8 38 aa 49 1a 3c cf a2 33 6f 20 df 2c 4a e3 77 74 ae 3c bb 68 97 93 de 9c 17 8f 77 8a bf ec 5b 0c 98 24 de d4 cb 23 eb 0f 66 5e 8a aa 2c 1a c7 5c ad f9 07 9e f2 5f 2e fe 6f 59 0b 96 8a ee 82 56 c4 27 b4 40 49 a6 Data Ascii: #rK~]\|VI\|B0\x}jp7X(\%Z^96\;W?p6UTM2qu#x9d^2fs9hmM+>6P[uK;vhb8I<3o ,Jwt<hw[$#f^,\_.oYV'@I
2024-10-31 00:09:39 UTC	1369	IN	Data Raw: 35 73 63 da 3d 08 00 00 00 08 19 9d 58 fc 0e ca f1 95 72 0f a1 e0 e7 6f d5 16 87 9f d3 86 27 86 4e 5d f9 c9 2a 09 e5 ea 99 13 e4 33 8f b6 ca 78 68 9e fb de 65 56 f2 fa dd c5 ec c4 ed 2e 0e 3b f0 67 cc 3e 9e f3 0f 4f 03 37 ad 7c 93 ea d8 af 7d 38 0c ba 63 8e 2d 4e c7 12 6b be 38 6b 39 2c 39 f6 ae dd 36 e1 ad 37 54 23 52 74 c6 98 46 f9 e6 2b d3 3c 76 8b 75 ce 9b 46 99 c1 98 b5 5d 43 5f 34 36 91 ea 37 fa 3a 75 54 dc 84 0b 4e 08 38 89 b9 08 22 66 e4 20 94 dc 84 10 9b 90 80 9b 90 80 9b 90 80 9b 90 80 9b 90 80 9b 90 82 53 7a c5 da a5 9a c3 e5 51 52 56 c9 53 05 b0 54 e1 6c 15 38 5b 1c 6a d2 4f 9c 1a 8e ec 9d 46 a2 61 f2 45 01 38 f7 9f 10 13 9f 59 f1 01 11 3e 20 21 2f 65 6a 3b f0 75 1a 8d b3 5a 88 39 35 b7 ee ca 4e ec ca 71 45 5e cc 14 8a 8b ad a8 73 c5 5f 19 bb Data Ascii: 5sc=Xro'N]*3xheV.;g>O7\|}8c-Nk8k9,967T#RtF+<vuF]C_467:uTN8"f SzQRVSTl8[jOFaE8Y> !/ej;uZ95NqE^s_
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 6e 6d ab eb af 50 2d 90 00 b9 42 75 1d 1c f4 9d 49 6d d4 6b 7a 03 a7 3e 9e 47 d4 00 53 53 19 25 d9 5a 4d af c8 2a 6d c5 f2 74 d9 19 6f 35 68 83 18 dd 57 0d f8 69 be f8 4d d2 bd bd 4e 5d e2 c9 f5 db 14 dc 02 2d 4c 81 f7 ff 00 9f 00 20 02 40 00 00 6f a4 db 8b b9 5b 88 7c 8f db 00 67 a8 00 00 01 83 38 09 ad 35 39 83 4e 7d 8f 8d f4 25 71 63 d6 3c de 8c ad ee b1 33 e9 de c4 ab 2c da a2 d0 b9 95 55 d7 e3 6d b3 73 ed e9 75 2c d3 a6 99 35 50 9e 88 f3 d5 6e 89 df 4b 66 85 1d da 7b fc 6f b9 29 72 69 76 fa cf 23 20 74 e6 00 1e 61 f4 f7 98 46 6f 55 f9 4f d6 0c f8 6b d7 9d b9 8c 9b cd 39 9d 30 71 e6 a3 59 a2 56 c7 6e 36 c5 b5 7e 12 da 9c ba 6c a7 2c 3a 98 cd 63 6e 9c b6 59 4e fc 3b 57 b3 6c eb b4 6d 9d f4 d9 ad 69 44 5e f4 44 f4 da f3 a8 2c eb 3c 1e df d8 1f af ae 40 Data Ascii: nmP-BuImkz>GSS%ZM*mto5hWiMN]-L @o[\|g859N}%qc<3,Umsu,5PnKf{o)riv# taFoUOk90qYVn6~l,:cnYN;WlmiD^D,<@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49783	216.58.206.68	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:39 UTC	390	OUT	GET /.well-known/web-identity HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: application/json Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: webidentity User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	663	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 218 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 23:12:20 GMT Expires: Thu, 31 Oct 2024 23:12:20 GMT Cache-Control: public, max-age=86400 Age: 3440 Last-Modified: Thu, 06 Jun 2024 18:30:00 GMT Content-Type: application/json Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:40 UTC	218	IN	Data Raw: 7b 0a 20 20 22 70 72 6f 76 69 64 65 72 5f 75 72 6c 73 22 3a 20 5b 0a 20 20 20 20 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 73 69 2f 66 65 64 63 6d 2e 6a 73 6f 6e 22 0a 20 20 5d 2c 0a 20 20 22 61 63 63 6f 75 6e 74 73 5f 65 6e 64 70 6f 69 6e 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 73 69 2f 66 65 64 63 6d 2f 6c 69 73 74 61 63 63 6f 75 6e 74 73 22 2c 0a 20 20 22 6c 6f 67 69 6e 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 73 69 2f 66 65 64 63 6d 2f 73 69 67 6e 69 6e 22 0a 7d 0a Data Ascii: { "provider_urls": [ "https://accounts.google.com/gsi/fedcm.json" ], "accounts_endpoint": "https://accounts.google.com/gsi/fedcm/listaccounts", "login_url": "https://accounts.google.com/gsi/fedcm/signin"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49788	35.190.80.1	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	480	OUT	POST /report/v4?s=eCa8ZHcYTqorObP3zVtSofgKOG1oTckWvvHZxnHHbhY1RPdAcBSZQSemQO4P7e%2FCcFzVjS7PuB8U9VgH1cx%2FYfGS7wwIAah5kex3L9hzBBh8vKXAriG%2BkR9%2FSHeUAZN4tWs%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 403 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	403	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 36 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 30 32 2e 31 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 61 6e 76 61 2e 63 6f 6d 2f 77 65 62 2f 37 Data Ascii: [{"age":0,"body":{"elapsed_time":767,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.01,"server_ip":"104.16.102.112","status_code":200,"type":"ok"},"type":"network-error","url":"https://static.canva.com/web/7
2024-10-31 00:09:40 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 31 Oct 2024 00:09:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49792	104.17.24.14	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	587	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.canva.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 543870 Expires: Tue, 21 Oct 2025 00:09:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFVTvrUq5tW9dv1NTw%2F0nPLh2cuPzascA6D%2FvBktsabw0RLRKcKwnZZWnQhrKGeP4R8sxPFH9A%2Fd3ApLr3PP%2BD53l2qdob6vvdvDwxVFLQg3e5wi5FXCnbfD6aAB1i2zp93zBjZ6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8daf6aebd8e42e64-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 00:09:40 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeo
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 Data Ascii: =0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:func
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 Data Ascii: (t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProc
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 Data Ascii: ===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 Data Ascii: (e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 Data Ascii: -o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=429496
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 Data Ascii: A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38])
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c Data Ascii: one.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<
2024-10-31 00:09:40 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 Data Ascii: function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49794	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	529	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12126 Last-Modified: Tue, 15 Oct 2024 19:34:59 GMT ETag: "5e9ac3a42b557bf8ca38cf2e8baba70b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:40 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 96 7f 05 ab 6e b8 92 69 cb 80 b1 93 08 6b 5c 04 e4 98 89 8d bd 3c 9c 4c b9 18 4a 96 1a 50 22 24 46 12 71 bc 86 fd ed 7b fa 25 b5 04 b6 93 3b 3b 1f 36 95 42 dd 7d 4e 9f 77 9f 3e dd 92 f7 a6 ab c0 49 bc 30 28 45 2a 46 01 4a b4 a7 74 24 54 3d 34 d5 9e bc a9 ba 17 dc 79 63 d6 c2 b4 f5 dd 8e 4a 8e a9 08 54 c5 34 93 c7 25 0e a7 a5 08 ff b5 f2 22 5c 2e f3 46 93 cc 99 96 cb 8e 16 e1 64 15 05 25 07 88 ee 55 35 32 be 12 63 2b 3e 46 a8 da 66 80 1f 4a 56 14 85 91 aa b4 ed 20 08 93 d2 d4 0b dc d2 22 74 57 3e 2e fd 5b a9 78 15 e5 df 8a d6 4c e6 51 f8 50 b2 75 27 74 b1 a9 5c 5d 77 46 97 d6 a4 77 3d 9c 9c 5f 8f 7a 1d 05 d9 1b 42 6f 69 12 d9 cd 27 fc 63 19 46 49 6c 3c 6d 36 4d a2 c3 5d 75 ac 3b b6 ef ab 4b 9d 83 90 d0 46 8d Data Ascii: ;ksnik\<LJP"$Fq{%;;6B}Nw>I0(E*FJt$T=4ycJT4%"\.Fd%U52c+>FfJV "tW>.[xLQPu't\]wFw=_zBoi'cFIl<m6M]u;KF
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 35 f4 02 55 21 55 c8 12 ba 52 28 00 06 cc cb 94 67 fd 4b 16 4d ac c3 63 0b 15 bc 28 63 12 5f d6 b5 4c bb 23 58 a4 94 11 f1 20 a7 02 9b 27 d8 1f ce 82 75 0d 81 8c 74 ed 7a 6f de ed 37 5e f5 af cc e9 b0 4e 72 fd 25 54 64 41 8d bb 96 77 fe 31 ef fa 94 fe df 77 b0 44 87 39 8f 39 4c 9f 46 e1 82 8c b6 61 1b a0 6e cf fc 27 4f 79 d6 85 0c 29 e7 c5 74 88 3b 32 ed 3f e3 cb 02 3e 55 4a 56 65 6d aa a0 41 39 23 e3 70 79 5b 89 ea 69 c2 97 a0 e8 ab be 2c 70 22 ce 1c 25 d3 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f5 bb ed 70 b1 84 4c 04 c1 86 63 c7 5e 62 95 c5 84 b4 9b 66 04 b4 b4 dc 07 5a c5 52 ff ca f6 c1 86 0b a8 e6 47 c3 f3 83 77 25 d7 4e 6c 85 08 59 b0 f9 0a 04 a5 16 e7 92 70 7e 14 4b 5d 05 5c 0a b6 b5 e7 e4 13 13 35 42 f4 c3 6a 3a c5 11 76 3f f8 a1 f3 ad e5 cf c2 Data Ascii: 5U!UR(gKMc(c_L#X 'utzo7^Nr%TdAw1wD99LFan'Oy)t;2?>UJVemA9#py[i,p"%w#dpLc^bfZRGw%NlYp~K]\5Bj:v?
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 3e a6 01 51 71 68 ef 68 4c e3 a2 e2 d2 5e 63 4c c3 a3 82 69 ef 78 4c a3 a4 32 a5 bd 93 31 0d 96 ca 8c f6 de 8e 69 cc 54 e6 eb 2a 0d d7 f3 ad 7a 88 65 bb 9f 3a d5 04 64 09 0e c3 c4 f6 cd 77 fb c5 63 15 83 5e e2 69 02 c0 5c 81 2d 6a 81 94 e6 5d 8a 0a 46 3d 86 93 7d ad fe 8e 9e df d3 f1 37 47 f5 4c 84 bb 5a a3 a2 a6 a0 ca 49 03 66 bd 3f 3d 6d 68 63 96 19 a7 7e 08 8b 2c 13 ee 30 4b 5e 9a 4c e5 f8 39 2a d9 d4 fc c9 c0 6c ec 67 27 09 7e 6b b1 ab cc 64 ab fa c5 43 00 cf 3b af 1c 03 68 d2 91 f2 44 fe 18 00 55 56 bb 90 c7 72 a5 a6 ca 60 a4 2c 23 f5 e0 6e cc b4 50 14 d8 bc 60 43 69 9d c0 c6 ff 3f 96 09 c7 3f 51 26 28 ab 18 97 c8 c5 02 68 46 f7 0a cf 45 ed eb de 60 d8 ea 0d 07 66 4e 76 fa 12 2c 89 15 72 e1 49 2c 26 43 d9 08 80 c8 1b 64 18 c6 71 42 77 8b 2f 57 97 17 Data Ascii: >QqhhL^cLixL21iTze:dwc^i\-j]F=}7GLZIf?=mhc~,0K^L9lg'~kdC;hDUVr`,#nP`Ci??Q&(hFE`fNv,rI,&CdqBw/W
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 86 7f dc 58 06 db 6c 21 57 92 87 82 a8 6c f0 03 8c 05 da c0 ba b4 da c3 eb 1c fe a4 3d 18 f0 39 a4 a9 f0 6d 6b 68 7d 19 8a 61 d2 a6 f4 08 df 61 ab db 1b 50 c2 69 8f c1 ac 2f b0 b0 19 80 36 81 6f 1a f1 40 00 b2 54 c6 19 b6 2c 0b 16 2a 7d 90 8d 85 89 05 69 9f b7 e4 b9 45 a1 89 b8 29 90 4a cc 64 4d c7 a8 b8 1b f2 8f 7e b8 fc f6 3f 39 25 bc 7a 44 80 ea eb bf 56 38 7a 84 34 0a eb 3f c9 9f 16 fe 22 10 f1 19 9a be 85 8a 58 6d 1c cb 53 f8 10 50 26 1b fc f7 86 0c a3 5b be 86 6c 58 b8 de 02 2a 42 28 59 60 35 d3 d4 9d 95 8c 04 29 fd c0 8b 1c 4d 3a e4 ed 05 61 4e 26 a9 5a 45 d1 95 0a 41 da 34 b9 da fa 4e 82 bb 06 85 a1 c8 3d 1a b9 9f 1b 01 99 73 f2 09 01 85 de d6 33 29 1c 36 42 b2 18 ff 56 73 e9 7b 89 29 0d d3 57 74 50 3e eb 4a 7a 1a a6 23 fc c0 7d 5a 3f 93 90 0d 0a Data Ascii: Xl!Wl=9mkh}aaPi/6o@T,}iE)JdM~?9%zDV8z4?"XmSP&[lXB(Y`5)M:aN&ZEA4N=s3)6BVs{)WtP>Jz#}Z?
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: b6 ae e6 1f 24 43 dd 92 73 ec 75 6f 3c 3c 93 bf 72 1b 3d bb 28 c6 75 d6 9f 74 4c 64 b6 7d 3a a1 01 67 2b 68 f4 e5 16 b8 54 98 68 58 f6 4a 39 8f cb 5c 27 36 e8 bd 55 41 1a 3b 4e d8 20 c8 93 44 96 3a 9a dd 8c e4 36 a1 5f 96 49 77 15 7d 8a b0 99 dc 3d d7 7d b8 12 71 5c 14 85 22 4c 22 23 b4 d5 e7 4e 90 2d c7 a1 81 94 0b b6 6c 70 38 2f cb 2d 36 bb de 5f 14 bd 41 43 99 36 9a 32 b2 7d 96 4a 10 96 49 d8 33 77 1f 74 19 50 3c e5 7a 60 2b 7d 94 8d d4 22 2b 8e e1 f8 be 35 5a d8 07 54 e9 0c 4a ac d7 36 c6 87 c9 e0 86 37 06 e2 16 b6 1a 68 17 66 a0 f5 16 a6 d8 e0 d7 61 6f 77 50 fe d2 31 3a 86 cd e6 f3 f8 8e c7 c8 4e ea 30 e0 14 e6 e8 29 1c 16 cf a6 73 d9 69 4b cd 30 7d d4 b9 9f 60 36 0f 70 32 b0 6f 3e 49 4f 2f 67 af 16 90 59 ab ad 3b 3c 42 f2 16 fa 66 10 b8 9d b6 68 bb Data Ascii: $Csuo<<r=(utLd}:g+hThXJ9\'6UA;N D:6_Iw}=}q\"L"#N-lp8/-6_AC62}JI3wtP<z`+}"+5ZTJ67hfaowP1:N0)siK0}`6p2o>IO/gY;<Bfh
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: eb 04 a4 26 b6 c5 64 62 66 52 c6 ee 78 a0 a6 b6 4a d8 b0 ad c3 ca 5b 30 96 b8 e1 f0 06 b5 7a ab 8f 8d 99 8a 40 2f e0 97 75 40 27 a8 9b 13 ed 46 b0 ae 9f 19 48 51 06 df 08 70 d0 10 11 4c aa 36 f5 cd 2e 1e d7 40 84 b5 00 49 08 11 6c 56 4a b8 34 a9 79 04 4e ca 0c 48 b7 4d 8b 54 0f 82 85 24 da 62 52 44 da 42 96 32 a8 12 bc 11 50 73 ed 77 90 8a dd 03 47 b4 db c2 a2 4b 91 84 03 5d 2a d6 67 4e 49 af 6e a0 4d 57 a9 28 d3 b8 0c 5d c6 d8 68 bd b9 24 d6 10 1b dd f7 e3 8a 7c 59 ff 53 78 a2 23 37 7c 2b 67 bc e7 f2 13 67 94 06 f1 d7 ee 7c 8c e1 a8 e4 a0 9a e7 3a ec ed 1c 98 35 1c 13 00 07 55 52 86 d9 7f 89 6f 64 ba 5f 4b b1 b6 81 4d 6f 57 d2 ac b9 b2 4f 76 eb ff 00 47 57 23 6a d5 e8 31 a3 c5 1f 4d 4b be ff c2 34 49 7f 4c 9c 89 ee b8 d8 22 1c db 6f 31 e6 7d ff cd d3 6d Data Ascii: &dbfRxJ[0z@/u@'FHQpL6.@IlVJ4yNHMT$bRDB2PswGK]*gNInMW(]h$\|YSx#7\|+gg\|:5URod_KMoWOvGW#j1MK4IL"o1}m
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 00 e1 72 d9 a2 2f 24 2b f9 5c 52 52 4f c8 e5 3f 55 df de 80 6f a2 0c 78 b2 e9 f0 3d 94 0e 4f 32 dd 5b 4b 08 4c c9 c2 7f 8e 37 7a 70 4e ab 0d 5b 4a 73 62 8b 13 38 0e 42 d6 33 78 a8 5b 81 63 3a 4a 28 78 b0 7b b0 9f 23 d2 46 98 11 35 03 50 d0 b1 2c e1 6b 03 41 0d da f0 13 23 aa 36 84 0b 93 79 a8 85 b8 d8 1d 18 c8 19 3b eb 72 95 4a 92 b9 8e 92 b1 a2 d6 40 2a 6d 0f 9d 03 70 c6 9c 02 87 b9 03 5a f3 d4 54 44 2c 45 c2 d6 ad 73 0a d0 23 09 1c c3 a6 72 5d ab 47 1b 97 ef 36 56 86 9d 88 54 4f 1a ea 40 03 eb 77 4d dd 7e 64 8c a0 aa be 69 04 31 2e 44 a0 32 ad b2 a2 f4 c7 6f d6 dc 11 c1 a8 cd 9a 8f 44 64 3a 28 75 e2 83 fd 9d 8c 5c 09 f6 86 da 52 5d 45 af 8f da c2 d7 6a dc a6 9d 44 ad ef 99 1f 00 e0 e9 38 77 49 29 15 74 0f 0e 7b 6e 79 35 6a 47 de c1 48 41 ee 91 38 00 67 Data Ascii: r/$+\RRO?Uox=O2[KL7zpN[Jsb8B3x[c:J(x{#F5P,kA#6y;rJ@*mpZTD,Es#r]G6VTO@wM~di1.D2oDd:(u\R]EjD8wI)t{ny5jGHA8g
2024-10-31 00:09:40 UTC	1378	IN	Data Raw: 3f 38 72 95 0e b2 88 01 59 ae 94 15 dd 80 68 b5 1a 7b 31 c7 00 4e 15 98 79 aa be 42 41 2e ad b8 4b 18 e0 29 5e 1c 72 32 0d 02 c6 54 3c d7 0e 82 14 2d 24 02 89 53 07 11 20 c9 35 ff a3 31 9b fc ab dd 0f c9 b5 0e db be 73 09 17 60 61 00 0a c0 b2 41 62 2e 72 d9 aa 9d 89 d6 95 d4 ff 50 a6 53 b4 1c 2e f1 42 1d 20 cb 40 e5 e6 89 a4 0d 29 31 4b 12 e6 85 89 0f 64 f2 d5 fd dd 12 4a b8 90 2a 74 10 f4 a6 d9 d6 7d 98 4c 66 7a af 48 ea 33 96 92 3d 11 11 7d 9a da de 67 7f 11 76 43 9f fd 20 a2 bb e4 ec 99 a8 d8 99 66 cd 6d d7 c5 59 d8 0d 3c 5c 96 56 b1 41 cd 9a 58 6d 64 07 9f 35 7f a8 88 63 14 ec b2 b3 9d 47 62 a5 c6 21 db 79 ec 03 f0 9d 7c b6 03 5a c1 9d ff b6 d0 0f a0 77 fc e0 6c f2 95 c2 23 a2 db 70 37 e8 fe f5 44 ca 36 48 ee 54 d8 6b 63 56 e6 51 2d 58 8b e3 62 8a 1d Data Ascii: ?8rYh{1NyBA.K)^r2T<-$S 51s`aAb.rPS.B @)1KdJ*t}LfzH3=}gvC fmY<\VAXmd5cGb!y\|Zwl#p7D6HTkcVQ-Xb
2024-10-31 00:09:40 UTC	1102	IN	Data Raw: 5b df 22 35 f0 65 76 da d6 21 b8 5e 4c 2e 2f 7b 98 24 bf 09 4f e9 af 2e b5 26 46 c0 65 c4 9a 69 01 88 e4 57 00 92 c8 1d e2 ad 7c c8 74 45 19 9e da b3 0a fa fd b4 8d 19 49 82 44 64 78 56 cf 00 a6 08 30 05 80 a5 b9 88 c8 08 cc 8e 15 bb f2 7e 53 6e 35 9a ab 49 ba de a2 75 ca db 29 21 5d 9e 68 d8 2e f8 59 10 ef 72 84 62 eb ce 15 77 e3 22 29 45 8e 39 e4 e4 07 a3 49 6f a6 8a a5 22 19 23 be a0 84 ba ba 89 c0 80 b9 1c c0 41 b6 72 92 49 81 10 5f 91 59 56 12 51 c2 a6 84 f5 4a 54 6f 84 2e d1 a0 3b 32 a1 b2 45 82 f5 60 2f 45 8b 24 27 64 c7 b3 86 20 5d 50 a4 50 d3 39 5a 57 e5 84 8f 36 47 50 18 70 12 58 55 23 86 d6 41 ba 19 54 0c 0d f2 7b 33 c3 d7 e0 d3 0f 74 a1 b4 d7 8f 15 b5 19 38 95 bc 58 98 d1 e4 df af 12 60 0c 86 4a 3c 80 42 78 da 01 2a a5 07 c7 4c 40 cb d0 8b 1e Data Ascii: ["5ev!^L./{$O.&FeiW\|tEIDdxV0~Sn5Iu)!]h.Yrbw")E9Io"#ArI_YVQJTo.;2E`/E$'d ]PP9ZW6GPpXU#AT{3t8X`J<Bx*L@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49789	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 00:09:40 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=232619 Date: Thu, 31 Oct 2024 00:09:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 00:09:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49796	35.186.225.155	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	644	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	1034	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:40 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1730333380691;Expires=Mon, 30 Dec 2024 00:09:40 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=a358bd6e-7f17-4d74-a7e5-b2e3df4e4039;Expires=Mon, 30 Dec 2024 00:09:40 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:40 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49793	157.240.0.6	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	534	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-bnqayoii' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:41 UTC	1696	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:41 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 00:09:41 UTC	14884	IN	Data Raw: 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: ");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iter
2024-10-31 00:09:41 UTC	1491	IN	Data Raw: 29 3b 69 66 28 68 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 2c 69 64 3a 62 7d 3b 69 66 28 66 3d 3d 3d 22 47 54 4d 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 Data Ascii: );if(h!=null)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CONSTANT_VALUE",id:b}}if(f==="GLOBAL_VARIABLE")return{domain_uri:c,event_type:d,extractor_type:"GLOBAL_VARIABLE",id:b};if(f==="GTM")return{domain_uri:c,event_type:d,extractor
2024-10-31 00:09:41 UTC	1500	IN	Data Raw: 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 66 69 6c 74 65 72 2c 64 3d 62 2e 6d 61 70 2c 65 3d 62 2e 72 65 64 75 63 65 3b 66 75 6e 63 74 69 6f Data Ascii: t";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.filter,d=b.map,e=b.reduce;functio
2024-10-31 00:09:41 UTC	13393	IN	Data Raw: 72 3a 6a 2c 63 6f 65 72 63 65 4f 62 6a 65 63 74 3a 6e 2c 63 6f 65 72 63 65 4f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 3a 75 2c 63 6f 65 72 63 65 53 74 72 69 6e 67 3a 6b 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6d 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 65 72 63 65 53 74 61 6e 64 61 72 64 50 61 72 61 6d 65 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: r:j,coerceObject:n,coerceObjectWithFields:u,coerceString:k}})();return m.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsCoerceStandardParameter",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var
2024-10-31 00:09:41 UTC	1491	IN	Data Raw: 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 Data Ascii: s("SignalsFBEventsResolveLink");s=f.getFbeventsModules("SignalsPixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT
2024-10-31 00:09:41 UTC	1500	IN	Data Raw: 67 46 6f 72 50 61 72 74 6e 65 72 49 6e 74 65 67 72 61 74 69 6f 6e 73 3a 5b 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 5d 2c 43 6f 6d 6d 6f 6e 49 6e 63 6c 75 64 65 73 3a 5b 22 63 6f 6d 6d 6f 6e 69 6e 63 6c 75 64 65 73 22 5d 2c 44 65 66 61 75 6c 74 43 75 73 74 6f 6d 44 61 74 61 3a 5b 22 64 65 66 61 75 6c 74 63 75 73 74 6f 6d 64 61 74 61 22 5d 2c 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3a 5b 22 63 6f 6f 6b 69 65 22 5d 2c 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 3a 5b 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 2c 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3a 5b 22 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 5d 2c 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 3a 5b 22 Data Ascii: gForPartnerIntegrations:["automaticmatchingforpartnerintegrations"],CommonIncludes:["commonincludes"],DefaultCustomData:["defaultcustomdata"],FirstPartyCookies:["cookie"],IWLBootstrapper:["iwlbootstrapper"],IWLParameters:["iwlparameters"],ESTRuleEngine:["
2024-10-31 00:09:41 UTC	13393	IN	Data Raw: 22 26 26 67 2e 61 70 70 65 6e 64 28 22 66 62 63 22 2c 66 29 3b 42 2e 61 64 64 45 6e 63 6f 64 69 6e 67 73 28 67 29 3b 72 65 74 75 72 6e 20 6f 2e 43 4f 4e 46 49 47 2e 43 44 4e 5f 42 41 53 45 5f 55 52 4c 2b 22 73 69 67 6e 61 6c 73 2f 63 6f 6e 66 69 67 2f 22 2b 61 2b 22 3f 22 2b 67 2e 74 6f 51 75 65 72 79 53 74 72 69 6e 67 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 6f 2e 6c 6f 61 64 4a 53 46 69 6c 65 28 50 28 61 2c 62 2c 63 2c 65 2c 64 2c 66 29 29 7d 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 62 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6e 28 74 68 69 73 2c 64 29 3b 74 68 69 73 2e 56 41 4c 49 44 5f 46 45 41 54 55 52 45 53 3d 4b 3b 74 68 69 73 2e 6f 70 74 49 6e 73 3d 6e 65 77 20 70 28 4d Data Ascii: "&&g.append("fbc",f);B.addEncodings(g);return o.CONFIG.CDN_BASE_URL+"signals/config/"+a+"?"+g.toQueryString()};function Q(a,b,c,d,e,f){o.loadJSFile(P(a,b,c,e,d,f))}q=function(){function d(a,b){var e=this;n(this,d);this.VALID_FEATURES=K;this.optIns=new p(M
2024-10-31 00:09:41 UTC	1491	IN	Data Raw: 70 65 6f 66 20 67 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 67 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 68 3d 67 2e 75 6e 73 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 Data Ascii: peof g==="undefined"?"undefined":i(g))!=="object")return null;var h=g.unsafePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModule

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49795	18.66.102.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	528	OUT	GET /site-insights.js HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	788	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6785 Connection: close Last-Modified: Wed, 19 Jun 2024 15:02:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GL5Tx2BZR8maW_iFgMB1W5mptWqV16dc Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 06:37:06 GMT ETag: "9c747cf07b2623fe6f77e47f5a134103" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 11e35514d631a9a9566fd489de935c06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 8O-Xmf_Q_2ibOESq-eveHdGLd6PjEjApTs6ysygLFhBggWiVwlrGyw== Age: 63155 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 00:09:40 UTC	6785	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 72 69 6e 67 7d 20 4b 65 79 20 66 6f 72 20 74 68 65 20 76 69 73 69 74 6f 72 20 49 44 20 63 6f 6f 6b 69 65 2e 0a 20 20 20 2a 2f 0a 20 20 63 6f 6e 73 74 20 76 69 73 69 74 6f 72 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 76 69 73 69 74 6f 72 5f 69 64 22 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 72 69 6e 67 7d 20 4b 65 79 20 66 6f 72 20 74 68 65 20 73 65 73 73 69 6f 6e 20 49 44 20 63 6f 6f 6b 69 65 2e 0a 20 20 20 2a 2f 0a 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 Data Ascii: (function () { /** * @type {string} Key for the visitor ID cookie. / const visitorIdKey = "Metadata_visitor_id"; /* * @type {string} Key for the session ID cookie. / const sessionIdKey = "Metadata_session_id"; /* * @type {st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49797	3.137.102.166	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	666	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:40 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 31 Oct 2024 00:09:40 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 277310b6-a5ea-4793-8232-1f365bfde904 Server: nginx Content-Length: 42 Connection: Close
2024-10-31 00:09:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49798	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:40 UTC	1797	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content% [TRUNCATED]
2024-10-31 00:09:40 UTC	1067	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 00:09:40 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6aedd8992e6c-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: deny x-request-id: 8daf6aedd8992e6c x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c564ddTFUnyRWb45dSmVAK4s7D5eUbgGA14GOoNyGO84QJQGLpMzzc4gelHXviRFJEdpLUN6LllEoTCn%2BBlmE1mGpVxryx3DzoMjBCUYh5mP7WZUEl5etnYVHTUI9TQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:40 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-10-31 00:09:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49800	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	604	OUT	GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:41 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-10-31 00:09:41 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 34 39 32 36 37 62 63 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 34 39 32 36 37 62 63 65 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"49267bce","url":"https://www.redditstatic.com/ads/49267bce/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49803	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	356	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12126 Last-Modified: Tue, 15 Oct 2024 19:34:59 GMT ETag: "5e9ac3a42b557bf8ca38cf2e8baba70b" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:41 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 96 7f 05 ab 6e b8 92 69 cb 80 b1 93 08 6b 5c 04 e4 98 89 8d bd 3c 9c 4c b9 18 4a 96 1a 50 22 24 46 12 71 bc 86 fd ed 7b fa 25 b5 04 b6 93 3b 3b 1f 36 95 42 dd 7d 4e 9f 77 9f 3e dd 92 f7 a6 ab c0 49 bc 30 28 45 2a 46 01 4a b4 a7 74 24 54 3d 34 d5 9e bc a9 ba 17 dc 79 63 d6 c2 b4 f5 dd 8e 4a 8e a9 08 54 c5 34 93 c7 25 0e a7 a5 08 ff b5 f2 22 5c 2e f3 46 93 cc 99 96 cb 8e 16 e1 64 15 05 25 07 88 ee 55 35 32 be 12 63 2b 3e 46 a8 da 66 80 1f 4a 56 14 85 91 aa b4 ed 20 08 93 d2 d4 0b dc d2 22 74 57 3e 2e fd 5b a9 78 15 e5 df 8a d6 4c e6 51 f8 50 b2 75 27 74 b1 a9 5c 5d 77 46 97 d6 a4 77 3d 9c 9c 5f 8f 7a 1d 05 d9 1b 42 6f 69 12 d9 cd 27 fc 63 19 46 49 6c 3c 6d 36 4d a2 c3 5d 75 ac 3b b6 ef ab 4b 9d 83 90 d0 46 8d Data Ascii: ;ksnik\<LJP"$Fq{%;;6B}Nw>I0(E*FJt$T=4ycJT4%"\.Fd%U52c+>FfJV "tW>.[xLQPu't\]wFw=_zBoi'cFIl<m6M]u;KF
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 35 f4 02 55 21 55 c8 12 ba 52 28 00 06 cc cb 94 67 fd 4b 16 4d ac c3 63 0b 15 bc 28 63 12 5f d6 b5 4c bb 23 58 a4 94 11 f1 20 a7 02 9b 27 d8 1f ce 82 75 0d 81 8c 74 ed 7a 6f de ed 37 5e f5 af cc e9 b0 4e 72 fd 25 54 64 41 8d bb 96 77 fe 31 ef fa 94 fe df 77 b0 44 87 39 8f 39 4c 9f 46 e1 82 8c b6 61 1b a0 6e cf fc 27 4f 79 d6 85 0c 29 e7 c5 74 88 3b 32 ed 3f e3 cb 02 3e 55 4a 56 65 6d aa a0 41 39 23 e3 70 79 5b 89 ea 69 c2 97 a0 e8 ab be 2c 70 22 ce 1c 25 d3 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f5 bb ed 70 b1 84 4c 04 c1 86 63 c7 5e 62 95 c5 84 b4 9b 66 04 b4 b4 dc 07 5a c5 52 ff ca f6 c1 86 0b a8 e6 47 c3 f3 83 77 25 d7 4e 6c 85 08 59 b0 f9 0a 04 a5 16 e7 92 70 7e 14 4b 5d 05 5c 0a b6 b5 e7 e4 13 13 35 42 f4 c3 6a 3a c5 11 76 3f f8 a1 f3 ad e5 cf c2 Data Ascii: 5U!UR(gKMc(c_L#X 'utzo7^Nr%TdAw1wD99LFan'Oy)t;2?>UJVemA9#py[i,p"%w#dpLc^bfZRGw%NlYp~K]\5Bj:v?
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 3e a6 01 51 71 68 ef 68 4c e3 a2 e2 d2 5e 63 4c c3 a3 82 69 ef 78 4c a3 a4 32 a5 bd 93 31 0d 96 ca 8c f6 de 8e 69 cc 54 e6 eb 2a 0d d7 f3 ad 7a 88 65 bb 9f 3a d5 04 64 09 0e c3 c4 f6 cd 77 fb c5 63 15 83 5e e2 69 02 c0 5c 81 2d 6a 81 94 e6 5d 8a 0a 46 3d 86 93 7d ad fe 8e 9e df d3 f1 37 47 f5 4c 84 bb 5a a3 a2 a6 a0 ca 49 03 66 bd 3f 3d 6d 68 63 96 19 a7 7e 08 8b 2c 13 ee 30 4b 5e 9a 4c e5 f8 39 2a d9 d4 fc c9 c0 6c ec 67 27 09 7e 6b b1 ab cc 64 ab fa c5 43 00 cf 3b af 1c 03 68 d2 91 f2 44 fe 18 00 55 56 bb 90 c7 72 a5 a6 ca 60 a4 2c 23 f5 e0 6e cc b4 50 14 d8 bc 60 43 69 9d c0 c6 ff 3f 96 09 c7 3f 51 26 28 ab 18 97 c8 c5 02 68 46 f7 0a cf 45 ed eb de 60 d8 ea 0d 07 66 4e 76 fa 12 2c 89 15 72 e1 49 2c 26 43 d9 08 80 c8 1b 64 18 c6 71 42 77 8b 2f 57 97 17 Data Ascii: >QqhhL^cLixL21iTze:dwc^i\-j]F=}7GLZIf?=mhc~,0K^L9lg'~kdC;hDUVr`,#nP`Ci??Q&(hFE`fNv,rI,&CdqBw/W
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 86 7f dc 58 06 db 6c 21 57 92 87 82 a8 6c f0 03 8c 05 da c0 ba b4 da c3 eb 1c fe a4 3d 18 f0 39 a4 a9 f0 6d 6b 68 7d 19 8a 61 d2 a6 f4 08 df 61 ab db 1b 50 c2 69 8f c1 ac 2f b0 b0 19 80 36 81 6f 1a f1 40 00 b2 54 c6 19 b6 2c 0b 16 2a 7d 90 8d 85 89 05 69 9f b7 e4 b9 45 a1 89 b8 29 90 4a cc 64 4d c7 a8 b8 1b f2 8f 7e b8 fc f6 3f 39 25 bc 7a 44 80 ea eb bf 56 38 7a 84 34 0a eb 3f c9 9f 16 fe 22 10 f1 19 9a be 85 8a 58 6d 1c cb 53 f8 10 50 26 1b fc f7 86 0c a3 5b be 86 6c 58 b8 de 02 2a 42 28 59 60 35 d3 d4 9d 95 8c 04 29 fd c0 8b 1c 4d 3a e4 ed 05 61 4e 26 a9 5a 45 d1 95 0a 41 da 34 b9 da fa 4e 82 bb 06 85 a1 c8 3d 1a b9 9f 1b 01 99 73 f2 09 01 85 de d6 33 29 1c 36 42 b2 18 ff 56 73 e9 7b 89 29 0d d3 57 74 50 3e eb 4a 7a 1a a6 23 fc c0 7d 5a 3f 93 90 0d 0a Data Ascii: Xl!Wl=9mkh}aaPi/6o@T,}iE)JdM~?9%zDV8z4?"XmSP&[lXB(Y`5)M:aN&ZEA4N=s3)6BVs{)WtP>Jz#}Z?
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: b6 ae e6 1f 24 43 dd 92 73 ec 75 6f 3c 3c 93 bf 72 1b 3d bb 28 c6 75 d6 9f 74 4c 64 b6 7d 3a a1 01 67 2b 68 f4 e5 16 b8 54 98 68 58 f6 4a 39 8f cb 5c 27 36 e8 bd 55 41 1a 3b 4e d8 20 c8 93 44 96 3a 9a dd 8c e4 36 a1 5f 96 49 77 15 7d 8a b0 99 dc 3d d7 7d b8 12 71 5c 14 85 22 4c 22 23 b4 d5 e7 4e 90 2d c7 a1 81 94 0b b6 6c 70 38 2f cb 2d 36 bb de 5f 14 bd 41 43 99 36 9a 32 b2 7d 96 4a 10 96 49 d8 33 77 1f 74 19 50 3c e5 7a 60 2b 7d 94 8d d4 22 2b 8e e1 f8 be 35 5a d8 07 54 e9 0c 4a ac d7 36 c6 87 c9 e0 86 37 06 e2 16 b6 1a 68 17 66 a0 f5 16 a6 d8 e0 d7 61 6f 77 50 fe d2 31 3a 86 cd e6 f3 f8 8e c7 c8 4e ea 30 e0 14 e6 e8 29 1c 16 cf a6 73 d9 69 4b cd 30 7d d4 b9 9f 60 36 0f 70 32 b0 6f 3e 49 4f 2f 67 af 16 90 59 ab ad 3b 3c 42 f2 16 fa 66 10 b8 9d b6 68 bb Data Ascii: $Csuo<<r=(utLd}:g+hThXJ9\'6UA;N D:6_Iw}=}q\"L"#N-lp8/-6_AC62}JI3wtP<z`+}"+5ZTJ67hfaowP1:N0)siK0}`6p2o>IO/gY;<Bfh
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: eb 04 a4 26 b6 c5 64 62 66 52 c6 ee 78 a0 a6 b6 4a d8 b0 ad c3 ca 5b 30 96 b8 e1 f0 06 b5 7a ab 8f 8d 99 8a 40 2f e0 97 75 40 27 a8 9b 13 ed 46 b0 ae 9f 19 48 51 06 df 08 70 d0 10 11 4c aa 36 f5 cd 2e 1e d7 40 84 b5 00 49 08 11 6c 56 4a b8 34 a9 79 04 4e ca 0c 48 b7 4d 8b 54 0f 82 85 24 da 62 52 44 da 42 96 32 a8 12 bc 11 50 73 ed 77 90 8a dd 03 47 b4 db c2 a2 4b 91 84 03 5d 2a d6 67 4e 49 af 6e a0 4d 57 a9 28 d3 b8 0c 5d c6 d8 68 bd b9 24 d6 10 1b dd f7 e3 8a 7c 59 ff 53 78 a2 23 37 7c 2b 67 bc e7 f2 13 67 94 06 f1 d7 ee 7c 8c e1 a8 e4 a0 9a e7 3a ec ed 1c 98 35 1c 13 00 07 55 52 86 d9 7f 89 6f 64 ba 5f 4b b1 b6 81 4d 6f 57 d2 ac b9 b2 4f 76 eb ff 00 47 57 23 6a d5 e8 31 a3 c5 1f 4d 4b be ff c2 34 49 7f 4c 9c 89 ee b8 d8 22 1c db 6f 31 e6 7d ff cd d3 6d Data Ascii: &dbfRxJ[0z@/u@'FHQpL6.@IlVJ4yNHMT$bRDB2PswGK]*gNInMW(]h$\|YSx#7\|+gg\|:5URod_KMoWOvGW#j1MK4IL"o1}m
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 00 e1 72 d9 a2 2f 24 2b f9 5c 52 52 4f c8 e5 3f 55 df de 80 6f a2 0c 78 b2 e9 f0 3d 94 0e 4f 32 dd 5b 4b 08 4c c9 c2 7f 8e 37 7a 70 4e ab 0d 5b 4a 73 62 8b 13 38 0e 42 d6 33 78 a8 5b 81 63 3a 4a 28 78 b0 7b b0 9f 23 d2 46 98 11 35 03 50 d0 b1 2c e1 6b 03 41 0d da f0 13 23 aa 36 84 0b 93 79 a8 85 b8 d8 1d 18 c8 19 3b eb 72 95 4a 92 b9 8e 92 b1 a2 d6 40 2a 6d 0f 9d 03 70 c6 9c 02 87 b9 03 5a f3 d4 54 44 2c 45 c2 d6 ad 73 0a d0 23 09 1c c3 a6 72 5d ab 47 1b 97 ef 36 56 86 9d 88 54 4f 1a ea 40 03 eb 77 4d dd 7e 64 8c a0 aa be 69 04 31 2e 44 a0 32 ad b2 a2 f4 c7 6f d6 dc 11 c1 a8 cd 9a 8f 44 64 3a 28 75 e2 83 fd 9d 8c 5c 09 f6 86 da 52 5d 45 af 8f da c2 d7 6a dc a6 9d 44 ad ef 99 1f 00 e0 e9 38 77 49 29 15 74 0f 0e 7b 6e 79 35 6a 47 de c1 48 41 ee 91 38 00 67 Data Ascii: r/$+\RRO?Uox=O2[KL7zpN[Jsb8B3x[c:J(x{#F5P,kA#6y;rJ@*mpZTD,Es#r]G6VTO@wM~di1.D2oDd:(u\R]EjD8wI)t{ny5jGHA8g
2024-10-31 00:09:41 UTC	1378	IN	Data Raw: 3f 38 72 95 0e b2 88 01 59 ae 94 15 dd 80 68 b5 1a 7b 31 c7 00 4e 15 98 79 aa be 42 41 2e ad b8 4b 18 e0 29 5e 1c 72 32 0d 02 c6 54 3c d7 0e 82 14 2d 24 02 89 53 07 11 20 c9 35 ff a3 31 9b fc ab dd 0f c9 b5 0e db be 73 09 17 60 61 00 0a c0 b2 41 62 2e 72 d9 aa 9d 89 d6 95 d4 ff 50 a6 53 b4 1c 2e f1 42 1d 20 cb 40 e5 e6 89 a4 0d 29 31 4b 12 e6 85 89 0f 64 f2 d5 fd dd 12 4a b8 90 2a 74 10 f4 a6 d9 d6 7d 98 4c 66 7a af 48 ea 33 96 92 3d 11 11 7d 9a da de 67 7f 11 76 43 9f fd 20 a2 bb e4 ec 99 a8 d8 99 66 cd 6d d7 c5 59 d8 0d 3c 5c 96 56 b1 41 cd 9a 58 6d 64 07 9f 35 7f a8 88 63 14 ec b2 b3 9d 47 62 a5 c6 21 db 79 ec 03 f0 9d 7c b6 03 5a c1 9d ff b6 d0 0f a0 77 fc e0 6c f2 95 c2 23 a2 db 70 37 e8 fe f5 44 ca 36 48 ee 54 d8 6b 63 56 e6 51 2d 58 8b e3 62 8a 1d Data Ascii: ?8rYh{1NyBA.K)^r2T<-$S 51s`aAb.rPS.B @)1KdJ*t}LfzH3=}gvC fmY<\VAXmd5cGb!y\|Zwl#p7D6HTkcVQ-Xb
2024-10-31 00:09:41 UTC	1102	IN	Data Raw: 5b df 22 35 f0 65 76 da d6 21 b8 5e 4c 2e 2f 7b 98 24 bf 09 4f e9 af 2e b5 26 46 c0 65 c4 9a 69 01 88 e4 57 00 92 c8 1d e2 ad 7c c8 74 45 19 9e da b3 0a fa fd b4 8d 19 49 82 44 64 78 56 cf 00 a6 08 30 05 80 a5 b9 88 c8 08 cc 8e 15 bb f2 7e 53 6e 35 9a ab 49 ba de a2 75 ca db 29 21 5d 9e 68 d8 2e f8 59 10 ef 72 84 62 eb ce 15 77 e3 22 29 45 8e 39 e4 e4 07 a3 49 6f a6 8a a5 22 19 23 be a0 84 ba ba 89 c0 80 b9 1c c0 41 b6 72 92 49 81 10 5f 91 59 56 12 51 c2 a6 84 f5 4a 54 6f 84 2e d1 a0 3b 32 a1 b2 45 82 f5 60 2f 45 8b 24 27 64 c7 b3 86 20 5d 50 a4 50 d3 39 5a 57 e5 84 8f 36 47 50 18 70 12 58 55 23 86 d6 41 ba 19 54 0c 0d f2 7b 33 c3 d7 e0 d3 0f 74 a1 b4 d7 8f 15 b5 19 38 95 bc 58 98 d1 e4 df af 12 60 0c 86 4a 3c 80 42 78 da 01 2a a5 07 c7 4c 40 cb d0 8b 1e Data Ascii: ["5ev!^L./{$O.&FeiW\|tEIDdxV0~Sn5Iu)!]h.Yrbw")E9Io"#ArI_YVQJTo.;2E`/E$'d ]PP9ZW6GPpXU#AT{3t8X`J<Bx*L@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49802	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	889	OUT	GET /rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:41 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-10-31 00:09:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49801	151.101.1.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	572	OUT	GET /pixels/t2_9z5lu86h/config HTTP/1.1 Host: pixel-config.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	253	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27 Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Content-Encoding: gzip Content-Type: application/json Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:41 GMT Via: 1.1 varnish
2024-10-31 00:09:41 UTC	27	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff aa ae e5 02 04 00 00 ff ff 06 b0 a1 dd 03 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49804	104.17.24.14	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:41 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 543871 Expires: Tue, 21 Oct 2025 00:09:41 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nxwKhXE4z39%2Bw3BsqChdZgcxaXiCdnCLpGLppx2RKuZZAyNoSbpW9Kx3QsZ44a7QTXFxXI5LsHfo503784ZoA2%2Bsv1TGSUj8Y1w0bTrziwNgpVaU8N%2FKN2bRXcyQCsnAjvdR9t8u"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8daf6af2cb87286f-DFW alt-svc: h3=":443"; ma=86400
2024-10-31 00:09:41 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 Data Ascii: ;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:functi
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 65 73 Data Ascii: )),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProces
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 3f 31 Data Ascii: =i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0?1
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b Data Ascii: [4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0)+
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 37 32 Data Ascii: %42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42949672
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 2c 6d Data Ascii: S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38]),m
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f Data Ascii: e.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<<o
2024-10-31 00:09:41 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 29 29 Data Ascii: nction(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49805	35.186.225.155	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	491	OUT	GET /accounts/39/tags/dNOhr8t/events?data.Pagename=homepage&response_type=pixel HTTP/1.1 Host: tag.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1730333380691; TapAd_DID=a358bd6e-7f17-4d74-a7e5-b2e3df4e4039
2024-10-31 00:09:41 UTC	1034	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:41 GMT Strict-Transport-Security: max-age=31536000 Cache-Control: no-store Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1730333380691;Expires=Mon, 30 Dec 2024 00:09:41 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=a358bd6e-7f17-4d74-a7e5-b2e3df4e4039;Expires=Mon, 30 Dec 2024 00:09:41 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Access-Control-Max-Age: 300 Access-Control-Allow-Origin: * Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:41 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49808	172.67.74.152	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	549	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:41 GMT Content-Type: application/json Content-Length: 23 Connection: close Access-Control-Allow-Origin: * Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8daf6af31b582c8f-DFW
2024-10-31 00:09:41 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 22 7d Data Ascii: {"ip":"173.254.250.78"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49806	3.136.10.62	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	433	OUT	GET /tv2track.php?idsite=TV-7272814572-1&rec=1&rand=1730333379172&gtmcb=1201690018 HTTP/1.1 Host: collector-22324.us.tvsquared.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:41 UTC	229	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 31 Oct 2024 00:09:41 GMT P3p: CP='OTI DSP COR NID STP UNI OTPa OUR' Request-Id: 7048f001-d688-4e88-bb21-7cf1e06c6a90 Server: nginx Content-Length: 42 Connection: Close
2024-10-31 00:09:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 28 00 3b Data Ascii: GIF89a!,(;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49807	18.66.102.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	561	OUT	GET /pixel/config/1721.json HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 354 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Mon, 22 Jul 2024 02:40:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: M9mCnq1eLFymQr3gKnRqRiqpIYrp9XbS Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 05:06:54 GMT ETag: "b4f9f0dd587c5abe6708f44a6e11a53f" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3f3b012fad703fdac0f14efdb7b78b6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: wogOyeH6FpBQGYrxOyt5fUtXGQ5tWs3df2hHQ4zXrMmNxsa5M2fFnQ== Age: 68568 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-10-31 00:09:42 UTC	354	IN	Data Raw: 7b 22 70 69 78 65 6c 4a 77 74 22 3a 20 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 7a 64 57 49 69 4f 69 4a 77 61 58 68 6c 62 43 42 6a 62 32 35 6d 61 57 63 69 4c 43 4a 75 59 57 31 6c 49 6a 6f 69 51 32 46 75 64 6d 45 67 53 57 35 6a 4c 69 49 73 49 6d 6c 7a 63 79 49 36 49 6d 31 6c 64 47 46 6b 59 58 52 68 49 47 6c 75 59 79 34 69 4c 43 4a 68 64 57 51 69 4f 69 49 78 4e 7a 49 78 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 59 33 4d 54 45 35 4e 44 41 77 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 6a 45 78 4d 7a 63 78 4d 44 59 73 49 6d 35 69 5a 69 49 36 4d 54 63 78 4f 54 63 33 4d 6a 49 77 4d 43 77 69 59 32 39 73 62 47 56 6a 64 45 6c 75 63 32 6c 6e 61 48 52 7a 49 6a 6f 77 4c 43 4a 77 59 57 4e 72 Data Ascii: {"pixelJwt": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwaXhlbCBjb25maWciLCJuYW1lIjoiQ2FudmEgSW5jLiIsImlzcyI6Im1ldGFkYXRhIGluYy4iLCJhdWQiOiIxNzIxIiwiZXhwIjoxNzY3MTE5NDAwLCJpYXQiOjE3MjExMzcxMDYsIm5iZiI6MTcxOTc3MjIwMCwiY29sbGVjdEluc2lnaHRzIjowLCJwYWNr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49809	18.66.102.64	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	355	OUT	GET /site-insights.js HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	788	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 6785 Connection: close Last-Modified: Wed, 19 Jun 2024 15:02:09 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GL5Tx2BZR8maW_iFgMB1W5mptWqV16dc Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 06:37:06 GMT ETag: "9c747cf07b2623fe6f77e47f5a134103" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 21c2c1b3872c539a34b64bcf45f4054c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: MfqhI8Ry2uK5EbarcU0WeLtygWZHxQp8d9WkoGDPTujnsAocjtssXQ== Age: 63156 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-10-31 00:09:42 UTC	6785	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 72 69 6e 67 7d 20 4b 65 79 20 66 6f 72 20 74 68 65 20 76 69 73 69 74 6f 72 20 49 44 20 63 6f 6f 6b 69 65 2e 0a 20 20 20 2a 2f 0a 20 20 63 6f 6e 73 74 20 76 69 73 69 74 6f 72 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 76 69 73 69 74 6f 72 5f 69 64 22 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 72 69 6e 67 7d 20 4b 65 79 20 66 6f 72 20 74 68 65 20 73 65 73 73 69 6f 6e 20 49 44 20 63 6f 6f 6b 69 65 2e 0a 20 20 20 2a 2f 0a 20 20 63 6f 6e 73 74 20 73 65 73 73 69 6f 6e 49 64 4b 65 79 20 3d 20 22 4d 65 74 61 64 61 74 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3b 0a 0a 20 20 2f 2a 2a 0a 20 20 20 2a 20 40 74 79 70 65 20 7b 73 74 Data Ascii: (function () { /** * @type {string} Key for the visitor ID cookie. / const visitorIdKey = "Metadata_visitor_id"; /* * @type {string} Key for the session ID cookie. / const sessionIdKey = "Metadata_session_id"; /* * @type {st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49811	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	404	OUT	GET /ads/conversions-config/v1/pixel/config/t2_9z5lu86h_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:41 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-10-31 00:09:42 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 34 39 32 36 37 62 63 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 34 39 32 36 37 62 63 65 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"49267bce","url":"https://www.redditstatic.com/ads/49267bce/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49812	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	372	OUT	GET /pixels/t2_9z5lu86h/config HTTP/1.1 Host: pixel-config.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	253	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27 Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Content-Encoding: gzip Content-Type: application/json Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:42 GMT Via: 1.1 varnish
2024-10-31 00:09:42 UTC	27	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff aa ae e5 02 04 00 00 ff ff 06 b0 a1 dd 03 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49813	151.101.193.140	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:41 UTC	656	OUT	GET /rp.gif?ts=1730333379935&id=t2_9z5lu86h&event=ViewContent&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=da3f4213-0e50-40f2-81d4-818150f9265f&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_49267bce&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Thu, 31 Oct 2024 00:09:42 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-10-31 00:09:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49810	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Nzp6PX5vgrgHHuF&MD=4kCgrPSy HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-31 00:09:42 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ed6a6926-1592-4450-a1a4-c18a2adc5eef MS-RequestId: d27404f7-07c8-4dbe-a822-3c1b943699c0 MS-CV: 0I4Vr8CDREu09NMn.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 31 Oct 2024 00:09:41 GMT Connection: close Content-Length: 24490
2024-10-31 00:09:42 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-31 00:09:42 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49815	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	2809	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=homepage_visit&_fv=1&_nsi=1&_ss=1&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765753&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&e [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; _ga=GA1.1.726425897.1730333381
2024-10-31 00:09:42 UTC	673	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-31 00:09:42 UTC	735	IN	Data Raw: 35 38 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 35 33 39 30 31 38 35 30 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 32 32 33 37 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 Data Ascii: 588event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=153901850&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z98483
2024-10-31 00:09:42 UTC	688	IN	Data Raw: 79 65 73 25 33 42 63 75 73 74 6f 6d 5f 63 6f 6e 73 65 6e 74 5f 67 74 6d 5f 66 70 63 5f 72 74 69 64 25 33 44 79 65 73 25 33 42 63 75 73 74 6f 6d 5f 64 61 74 61 5f 6e 65 77 53 65 73 73 69 6f 6e 32 25 33 44 25 33 42 63 75 73 74 6f 6d 5f 64 65 76 69 63 65 5f 63 61 74 65 67 6f 72 79 25 33 44 64 65 73 6b 74 6f 70 25 33 42 63 75 73 74 6f 6d 5f 65 76 65 6e 74 5f 6e 61 6d 65 25 33 44 68 6f 6d 65 70 61 67 65 25 33 42 63 75 73 74 6f 6d 5f 71 75 61 6e 74 69 74 79 25 33 44 30 25 33 42 63 75 73 74 6f 6d 5f 73 74 65 70 25 33 44 6e 6f 74 25 32 30 73 65 74 25 33 42 63 75 73 74 6f 6d 5f 75 73 65 72 5f 74 79 70 65 5f 62 79 5f 75 73 65 72 5f 69 64 25 33 44 67 75 65 73 74 25 33 42 65 76 65 6e 74 5f 61 63 74 69 6f 6e 25 33 44 76 69 73 69 74 25 33 42 63 75 73 74 6f 6d 5f 70 72 Data Ascii: yes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_pr
2024-10-31 00:09:42 UTC	1046	IN	Data Raw: 34 30 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 33 39 37 33 36 36 30 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 Data Ascii: 40fevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%
2024-10-31 00:09:42 UTC	996	IN	Data Raw: 33 64 64 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 32 33 39 37 33 36 36 30 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 25 Data Ascii: 3ddevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%
2024-10-31 00:09:42 UTC	1049	IN	Data Raw: 34 31 32 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 38 31 36 37 33 35 32 30 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f Data Ascii: 412event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.co
2024-10-31 00:09:42 UTC	999	IN	Data Raw: 33 65 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 31 38 31 36 37 33 35 32 30 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 Data Ascii: 3e0event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirec
2024-10-31 00:09:42 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49817	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	2751	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765772&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSes [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
2024-10-31 00:09:42 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=qXljjG7U88CZ3M08DdkUpxpbJdJ%2FATnJHBbwWNBNx5mgPu1GaEjZx4no2PWSPDwDPgLCed4THe0CZ6d%2B9ZJz7tCYsnLsEhKR0ogP8CdwNtZaGaNGfQP7sG%2B5GOmr8A%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-31 00:09:42 UTC	737	IN	Data Raw: 34 31 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 32 39 37 38 38 38 39 36 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: 410event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com
2024-10-31 00:09:42 UTC	310	IN	Data Raw: 73 3d 31 3b 70 63 6f 72 3d 35 34 32 39 36 38 30 35 36 3b 73 33 70 3d 31 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 25 33 44 25 32 35 32 46 64 65 73 69 67 6e 25 32 35 32 46 44 41 47 52 48 55 37 4f 68 4f 73 25 32 35 32 46 4d 4b 54 39 39 51 44 72 39 45 4d 4c 4a 62 38 44 49 53 6b 52 63 77 25 32 35 32 46 76 69 65 77 25 32 35 33 46 75 74 6d 5f 63 6f 6e 74 65 6e 74 25 32 35 33 44 44 41 47 52 48 55 37 4f 68 4f 73 25 32 35 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 32 35 33 44 64 65 73 69 67 6e 73 68 61 72 65 25 32 35 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 32 35 33 44 6c 69 6e 6b 25 32 35 32 36 75 74 6d 5f 73 6f 75 72 63 65 25 32 35 33 44 Data Ascii: s=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253D
2024-10-31 00:09:42 UTC	997	IN	Data Raw: 33 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 32 39 37 38 38 38 39 36 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 Data Ascii: 3deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect
2024-10-31 00:09:42 UTC	71	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}
2024-10-31 00:09:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49816	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	2848	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765789&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_d [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
2024-10-31 00:09:42 UTC	669	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=nf4bB5DVf58RMUzoC7usMNRdp7zSgp6L9R%2Bvjwnuh9EqRdEL8gUkfO5n%2BOvM0M2XRoLLanyUw0Vp1aunOwUyZbNdGpfkluHYMMsGazTm2p3iAB2j5zaqL52n9Vtrlg%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-31 00:09:42 UTC	739	IN	Data Raw: 33 31 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 31 32 38 32 32 35 35 33 36 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d Data Ascii: 310event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=
2024-10-31 00:09:42 UTC	52	IN	Data Raw: 74 6f 72 3f 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: tor?"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:42 UTC	741	IN	Data Raw: 32 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 31 32 38 32 32 35 35 33 36 32 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c Data Ascii: 2deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Googl
2024-10-31 00:09:42 UTC	791	IN	Data Raw: 33 31 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 37 32 33 37 30 35 36 31 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d Data Ascii: 310event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=
2024-10-31 00:09:42 UTC	741	IN	Data Raw: 32 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 37 32 33 37 30 35 36 31 31 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c Data Ascii: 2deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Googl
2024-10-31 00:09:42 UTC	1408	IN	Data Raw: 35 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 38 33 36 32 32 33 35 35 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 32 32 35 33 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 Data Ascii: 5d6event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=83622355&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z984834
2024-10-31 00:09:42 UTC	93	IN	Data Raw: 31 30 31 38 32 33 38 34 38 7e 31 30 31 38 37 38 38 39 39 7e 31 30 31 38 37 38 39 34 34 7e 31 30 31 39 32 35 36 32 39 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 101823848~101878899~101878944~101925629&s3p=1"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:42 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49818	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	2833	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_1730333867657108&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_new [TRUNCATED] Host: ct.canva.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcHqUvnRIPd_tXeW2dFpJaBeMIYa1puvT9a_zOfdSiEpCfngMuVgzn_3oSIeag446ZO3PfDf4lpyWwWyXO5qwezczWjacFfMyWcXqs5PgA8G51EkMt88eo1qy5Qn4R3xLMKYu20vmRnXKVrKDdskV4ly7SwX9zDqW6OLlYWZlFW2ErlHrr6Zbn29Cn0oeZeD1_WoaliZEYIzrky_iPwATn2HN1k96rJw0aH1e8HwAY1yzNFTvm.9uW_Hvph0TPPwFSr4iQdysw.t9aFN8p2K3Nnt.PP54ql; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092
2024-10-31 00:09:42 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=39vTGXSqjvv%2BQLToUzTVicDKkZAxwDqCDWtVgVqM8uDCshTeLpSGb90n38d56ZdQidQnqpzhxOny6S0tsqiDBXSzza7HB3v7J3SsJTyT5%2Fh47Vj2R1Rs%2BGgxiYyPLQ%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.canva.com access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-31 00:09:42 UTC	737	IN	Data Raw: 33 31 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 31 31 37 34 30 36 34 38 37 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 68 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 36 3d 55 53 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c Data Ascii: 319event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l
2024-10-31 00:09:42 UTC	63	IN	Data Raw: 72 63 65 25 32 35 33 44 65 64 69 74 6f 72 3f 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: rce%253Deditor?"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:42 UTC	750	IN	Data Raw: 32 65 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 31 31 37 34 30 36 34 38 37 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 68 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 36 3d 55 53 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 Data Ascii: 2e7event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;u
2024-10-31 00:09:42 UTC	1408	IN	Data Raw: 35 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 32 31 30 30 30 34 36 36 33 32 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 32 34 31 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 59 61 78 4b 43 4b 54 4a 6c 59 77 59 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 68 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 Data Ascii: 5d6event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=2100046632&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z98
2024-10-31 00:09:42 UTC	93	IN	Data Raw: 31 30 31 38 32 33 38 34 38 7e 31 30 31 38 37 38 38 39 39 7e 31 30 31 38 37 38 39 34 34 7e 31 30 31 39 32 35 36 32 39 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 101823848~101878899~101878944~101925629&s3p=1"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:42 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49822	172.67.74.152	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	217	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: application/json Content-Length: 23 Connection: close Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 8daf6af81de40bac-DFW
2024-10-31 00:09:42 UTC	23	IN	Data Raw: 7b 22 69 70 22 3a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 22 7d Data Ascii: {"ip":"173.254.250.78"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49819	157.240.253.1	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-YO90bfUF' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:42 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:42 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-31 00:09:42 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-31 00:09:42 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-10-31 00:09:42 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-10-31 00:09:42 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-10-31 00:09:42 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-10-31 00:09:42 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-10-31 00:09:42 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-10-31 00:09:42 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49820	157.240.0.6	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	1371	OUT	GET /signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:42 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-7d2mDGT9' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:42 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:42 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 00:09:42 UTC	14884	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-10-31 00:09:42 UTC	1500	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 Data Ascii: =typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototyp
2024-10-31 00:09:42 UTC	14884	IN	Data Raw: 65 74 3b 61 3d 61 2e 70 69 78 65 6c 3b 72 65 74 75 72 6e 20 69 28 7b 65 78 74 72 61 63 74 6f 72 73 42 79 50 69 78 65 6c 73 3a 67 2c 66 62 71 49 6e 73 74 61 6e 63 65 3a 65 2c 70 69 78 65 6c 3a 61 2c 74 61 72 67 65 74 3a 62 7d 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 2c 65 Data Ascii: et;a=a.pixel;return i({extractorsByPixels:g,fbqInstance:e,pixel:a,target:b})})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iwlparameters");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iwlparameters",e
2024-10-31 00:09:42 UTC	1500	IN	Data Raw: 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 6e 67 74 68 3e 30 3b 69 66 28 6b 7c 7c 66 29 7b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 43 55 53 54 4f 4d 5f 44 41 54 41 22 7d 29 3b 70 3d 7b 7d 3b 6b 26 26 28 70 2e 75 70 3d 6d 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 66 26 26 28 70 2e 72 70 3d 6e 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 70 7d 7d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e Data Ascii: ength>0;f=n.length>0;if(k\|\|f){a.performanceMark("fbevents:end:unwantedDataProcessing",b.id);g.logUserError({type:"UNWANTED_CUSTOM_DATA"});p={};k&&(p.up=m.join(","));f&&(p.rp=n.join(","));return p}}a.performanceMark("fbevents:end:unwantedDataProcessing",b.
2024-10-31 00:09:42 UTC	14884	IN	Data Raw: 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d Data Ascii: xports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.unwanteddata");f.registerPlugin&&f.registerPlugin("fbevents.plugins.unwanteddata",e.exports);f.ensureModuleRegistered("fbevents.plugins.unwanteddata",function(){return e.exports}
2024-10-31 00:09:42 UTC	1500	IN	Data Raw: 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 47 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 67 3d 48 5b 62 2e 69 64 5d 3b 64 2e 63 73 5f 65 73 74 3d 21 30 3b 69 66 28 67 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 74 2e 69 73 4d 61 74 63 68 45 53 54 52 75 6c 65 28 67 2e 63 6f 6e 64 69 74 69 6f 6e 2c 63 29 29 7b 69 66 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 21 3d 3d 70 2e 44 45 52 49 56 45 5f 45 56 45 4e 54 29 72 65 74 75 72 6e 3b 63 3d 61 28 7b 7d 2c 64 29 3b 76 61 72 20 68 3d 7b 65 76 65 6e 74 49 44 3a 66 7d 3b 67 2e 72 75 6c 65 5f 69 Data Ascii: n e}function G(b,c,d,f){var g=H[b.id];d.cs_est=!0;if(g==null)return;n(g,function(g){try{if(t.isMatchESTRule(g.condition,c)){if(g.transformations==null)return;n(g.transformations,function(c){if(c!==p.DERIVE_EVENT)return;c=a({},d);var h={eventID:f};g.rule_i
2024-10-31 00:09:43 UTC	14884	IN	Data Raw: 3a 65 6e 64 3a 65 73 74 50 61 67 65 56 69 65 77 50 72 6f 63 65 73 73 69 6e 67 22 29 3b 72 65 74 75 72 6e 7b 63 73 5f 65 73 74 3a 21 30 2c 65 73 74 5f 73 6f 75 72 63 65 3a 69 7d 7d 72 65 74 75 72 6e 7b 7d 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 2c 65 2e 65 78 70 6f 72 74 73 Data Ascii: :end:estPageViewProcessing");return{cs_est:!0,est_source:i}}return{}})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.estruleengine");f.registerPlugin&&f.registerPlugin("fbevents.plugins.estruleengine",e.exports
2024-10-31 00:09:43 UTC	1734	IN	Data Raw: 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 Data Ascii: tsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49824	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	3316	OUT	POST /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive Content-Length: 1439 X-Canva-Brand: BAAAAAAAAAA X-Canva-App: login sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Canva-Build-Sha: 391016d X-Csrf-Token: i8sC6L6_WwRAWLwTOnQ8WfF2JkctoI6zq_o4DoamEWPlI7KyDna4rD36Ey3VSoPrWlQol2XqYqZt403xDf5VF4acHPI X-Canva-User: UAAAAAAAAAA X-Canva-Analytics: AAMAA1dFQgA= sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 X-Canva-Request: recordanalyticseventbatch sec-ch-ua-platform-version: "10.0.0" X-Canva-Locale: en X-Canva-Build-Name: 20241028-21 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.canva.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content%3DDAGRHU7OhOs%26utm_campaign%3Ddesignshare%26utm_medium%3Dlink%26utm_source%3Deditor Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; cf_clearance=kSK_6PJ0ZxIPh7ho9zd29VK1XsWxUOxs0F5ppvE2xGQ-1730333379-1.2.1.1-GjCHZEO1OcC.X7gMh3Z5l26tulpJ.oZR6n1EY_XFt2SiB4KOZlQnXmDvEl9FP2n2lUMed1.W.jLR71zkSxaKsxcocufDPHjIxTcH [TRUNCATED]
2024-10-31 00:09:42 UTC	1439	OUT	Data Raw: 7b 22 41 22 3a 5b 7b 22 41 3f 22 3a 22 44 22 2c 22 41 22 3a 7b 22 41 22 3a 22 39 31 33 39 38 38 64 66 2d 62 39 64 30 2d 34 36 66 36 2d 39 34 64 37 2d 61 64 63 39 39 37 65 34 34 37 35 32 22 2c 22 45 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 33 35 2e 37 34 34 5a 22 2c 22 46 22 3a 22 32 30 32 34 2d 31 30 2d 33 31 54 30 30 3a 30 39 3a 34 31 2e 34 30 32 5a 22 2c 22 48 22 3a 22 65 6e 22 2c 22 49 22 3a 7b 22 41 22 3a 22 55 53 22 7d 2c 22 4a 22 3a 22 57 45 42 22 2c 22 4b 22 3a 7b 22 53 41 4d 4f 32 22 3a 22 41 22 2c 22 57 4b 44 55 49 22 3a 22 41 22 2c 22 56 53 57 4c 4f 22 3a 22 42 22 2c 22 54 4f 4d 4c 4f 22 3a 22 41 22 2c 22 53 4d 43 4f 4c 22 3a 22 42 22 2c 22 53 45 4f 50 53 22 3a 22 41 22 2c 22 52 56 54 50 4f 22 3a 22 42 22 2c 22 52 52 53 43 32 Data Ascii: {"A":[{"A?":"D","A":{"A":"913988df-b9d0-46f6-94d7-adc997e44752","E":"2024-10-31T00:09:35.744Z","F":"2024-10-31T00:09:41.402Z","H":"en","I":{"A":"US"},"J":"WEB","K":{"SAMO2":"A","WKDUI":"A","VSWLO":"B","TOMLO":"A","SMCOL":"B","SEOPS":"A","RVTPO":"B","RRSC2
2024-10-31 00:09:42 UTC	1067	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:42 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6af9dd664772-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors 'self' https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: sameorigin x-request-id: 8daf6af9dd664772 x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6EKLwT2fFLGtpvSzgNdGcVhyqxdOoCmR%2FCRjBTGaMxAVu8%2FuBVxpuZR2WZFI%2F5uwPzIy%2FMfKx%2FSPHd2qEYTlXdlbNCZMa2QEeCiygAKNVrlpIxHTGTAEWCwF6jW8RBk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:42 UTC	28	IN	Data Raw: 31 36 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 7d 0d 0a Data Ascii: 16'"])}while(1);</x>//{}
2024-10-31 00:09:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49823	18.66.102.64	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	361	OUT	GET /pixel/config/1721.json HTTP/1.1 Host: cdn.metadata.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 354 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Mon, 22 Jul 2024 02:40:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: M9mCnq1eLFymQr3gKnRqRiqpIYrp9XbS Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 05:06:54 GMT ETag: "b4f9f0dd587c5abe6708f44a6e11a53f" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0baa339c02d06988c65d8623d1b3c6ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: JXiQeggb7T7nPUQxjx0oqNTM2cIVe0J7ZEC2PCHXuwoNEJaAK45SlA== Age: 68569 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000
2024-10-31 00:09:43 UTC	354	IN	Data Raw: 7b 22 70 69 78 65 6c 4a 77 74 22 3a 20 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 7a 64 57 49 69 4f 69 4a 77 61 58 68 6c 62 43 42 6a 62 32 35 6d 61 57 63 69 4c 43 4a 75 59 57 31 6c 49 6a 6f 69 51 32 46 75 64 6d 45 67 53 57 35 6a 4c 69 49 73 49 6d 6c 7a 63 79 49 36 49 6d 31 6c 64 47 46 6b 59 58 52 68 49 47 6c 75 59 79 34 69 4c 43 4a 68 64 57 51 69 4f 69 49 78 4e 7a 49 78 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 59 33 4d 54 45 35 4e 44 41 77 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 6a 45 78 4d 7a 63 78 4d 44 59 73 49 6d 35 69 5a 69 49 36 4d 54 63 78 4f 54 63 33 4d 6a 49 77 4d 43 77 69 59 32 39 73 62 47 56 6a 64 45 6c 75 63 32 6c 6e 61 48 52 7a 49 6a 6f 77 4c 43 4a 77 59 57 4e 72 Data Ascii: {"pixelJwt": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJwaXhlbCBjb25maWciLCJuYW1lIjoiQ2FudmEgSW5jLiIsImlzcyI6Im1ldGFkYXRhIGluYy4iLCJhdWQiOiIxNzIxIiwiZXhwIjoxNzY3MTE5NDAwLCJpYXQiOjE3MjExMzcxMDYsIm5iZiI6MTcxOTc3MjIwMCwiY29sbGVjdEluc2lnaHRzIjowLCJwYWNr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49835	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:42 UTC	2347	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=custom.user.engagement&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765789&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_d [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
2024-10-31 00:09:43 UTC	583	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:43 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=I3jaVCryG4uFYDjZm9VENxdwLMU3vqjEYqQB5bDArojaPQCsAFgXY77%2B5Fhu1Wj%2B8sNN8DTrdwnaLPZS%2FL5%2FnZeL%2FSkuCSvIBaDqwE4OcUrxH0jHHHOsXyxlyoFcCg%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-31 00:09:43 UTC	789	IN	Data Raw: 33 30 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 32 35 38 33 30 36 37 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 Data Ascii: 30eevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x8
2024-10-31 00:09:43 UTC	739	IN	Data Raw: 32 64 63 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 3b 6f 72 64 3d 32 35 38 33 30 36 37 37 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 Data Ascii: 2dcevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva0;ord=25830677;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%
2024-10-31 00:09:43 UTC	791	IN	Data Raw: 33 31 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 37 38 37 35 38 37 34 39 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d Data Ascii: 310event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=787587494;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=
2024-10-31 00:09:43 UTC	741	IN	Data Raw: 32 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 70 61 69 64 6d 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 3b 6f 72 64 3d 37 38 37 35 38 37 34 39 34 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c Data Ascii: 2deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=paidm0;cat=canva00;ord=787587494;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Googl
2024-10-31 00:09:43 UTC	1408	IN	Data Raw: 35 64 37 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 38 34 33 34 37 31 35 32 36 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 33 30 39 36 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 Data Ascii: 5d7event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=843471526&fst=1730333383096&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z98483
2024-10-31 00:09:43 UTC	94	IN	Data Raw: 7e 31 30 31 38 32 33 38 34 38 7e 31 30 31 38 37 38 38 39 39 7e 31 30 31 38 37 38 39 34 34 7e 31 30 31 39 32 35 36 32 39 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: ~101823848~101878899~101878944~101925629&s3p=1"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:43 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49834	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	2268	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=Loaded%20a%20Page&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765772&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_newSes [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
2024-10-31 00:09:43 UTC	587	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:43 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=2s0dfCoEr%2FgrTW50sm6k01bY9sIJB9dMCUjdxgxAR8a7OD%2BRiIr7%2BvGGXIz%2FoZwQeWuLMajxmmS%2FPzFEER%2F4HWyiqQo9QIQGGflmN207JPR9F2XTGcz5yUrXKy%2FZCA%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-31 00:09:43 UTC	821	IN	Data Raw: 34 31 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 36 36 39 38 36 35 32 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: 411event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1666986526;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com
2024-10-31 00:09:43 UTC	227	IN	Data Raw: 25 32 35 32 46 64 65 73 69 67 6e 25 32 35 32 46 44 41 47 52 48 55 37 4f 68 4f 73 25 32 35 32 46 4d 4b 54 39 39 51 44 72 39 45 4d 4c 4a 62 38 44 49 53 6b 52 63 77 25 32 35 32 46 76 69 65 77 25 32 35 33 46 75 74 6d 5f 63 6f 6e 74 65 6e 74 25 32 35 33 44 44 41 47 52 48 55 37 4f 68 4f 73 25 32 35 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 32 35 33 44 64 65 73 69 67 6e 73 68 61 72 65 25 32 35 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 32 35 33 44 6c 69 6e 6b 25 32 35 32 36 75 74 6d 5f 73 6f 75 72 63 65 25 32 35 33 44 65 64 69 74 6f 72 3f 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: %252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor?"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:43 UTC	998	IN	Data Raw: 33 64 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 36 36 36 39 38 36 35 32 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 Data Ascii: 3dfevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1666986526;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect
2024-10-31 00:09:43 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49836	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	2308	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=homepage_visit&_fv=1&_nsi=1&_ss=1&_c=1&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_173033386765753&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&e [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=xtT%2FxyoCEDqCAnfmoBy%2Bh0l0pwzXZD5AoMTqTfv9SzCfnVmyZld4z2AXdLdgSzFazcG4R%2BTyHuFi%2FpaVgg9mkCOw5NPd9m3Inu73kIuRrKwfo7WauvQqLaTEL1Npag%3D%3D
2024-10-31 00:09:43 UTC	583	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:43 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=r5hUs%2F%2B8KAHdVKfXS3AakfiJvcQTaqmH%2FYvSRWSBTtP5Macui1hH5IpbDh3xoYr5I1elIwUoFOPzWzkByVBMmXQxmQF0%2F8O%2FKLYa7iz4sVrciPU3wSkFxLhodWYmjg%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-31 00:09:43 UTC	825	IN	Data Raw: 35 38 39 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 32 32 33 34 39 38 34 33 35 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 33 32 31 38 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 35 56 71 4c 43 4b 57 36 74 61 6f 42 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 Data Ascii: 589event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1223498435&fst=1730333383218&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848
2024-10-31 00:09:43 UTC	599	IN	Data Raw: 67 6f 72 79 25 33 44 64 65 73 6b 74 6f 70 25 33 42 63 75 73 74 6f 6d 5f 65 76 65 6e 74 5f 6e 61 6d 65 25 33 44 68 6f 6d 65 70 61 67 65 25 33 42 63 75 73 74 6f 6d 5f 71 75 61 6e 74 69 74 79 25 33 44 30 25 33 42 63 75 73 74 6f 6d 5f 73 74 65 70 25 33 44 6e 6f 74 25 32 30 73 65 74 25 33 42 63 75 73 74 6f 6d 5f 75 73 65 72 5f 74 79 70 65 5f 62 79 5f 75 73 65 72 5f 69 64 25 33 44 67 75 65 73 74 25 33 42 65 76 65 6e 74 5f 61 63 74 69 6f 6e 25 33 44 76 69 73 69 74 25 33 42 63 75 73 74 6f 6d 5f 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 25 33 44 77 65 62 2d 32 25 33 42 63 75 73 74 6f 6d 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 25 33 44 55 53 25 33 42 63 75 73 74 6f 6d 5f 61 70 70 5f 6e 61 6d 65 25 33 44 77 65 62 26 72 64 70 3d 31 26 62 74 74 79 70 65 3d 70 75 72 Data Ascii: gory%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&bttype=pur
2024-10-31 00:09:43 UTC	1047	IN	Data Raw: 34 31 30 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 39 35 36 30 34 33 32 34 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: 410event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1956043246;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com
2024-10-31 00:09:43 UTC	997	IN	Data Raw: 33 64 65 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 3b 6f 72 64 3d 31 39 35 36 30 34 33 32 34 36 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 Data Ascii: 3deevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood0;ord=1956043246;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect
2024-10-31 00:09:43 UTC	1048	IN	Data Raw: 34 31 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 39 30 30 37 33 37 37 37 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d Data Ascii: 411event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=900737779;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com
2024-10-31 00:09:43 UTC	998	IN	Data Raw: 33 64 66 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 77 65 62 73 69 30 30 30 3b 63 61 74 3d 66 6c 6f 6f 64 30 30 3b 6f 72 64 3d 39 30 30 37 33 37 37 37 39 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 74 31 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 35 39 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 61 6e 76 61 2e 63 6f 6d 25 32 46 6c 6f 67 69 6e 25 32 46 25 33 46 72 65 64 69 72 65 63 74 Data Ascii: 3dfevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=websi000;cat=flood00;ord=900737779;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect
2024-10-31 00:09:43 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49826	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1415	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	3111	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8379039266985367651"}],"aggregatable_trigger_data":[{"filters":[{"14":["10904904"]}],"key_piece":"0xd9d86537f662631d","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xa680df5d601acc8f","not_filters":{"14":["10904904"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49832	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1671	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	3116	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13347070141725274676"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0x1274fa3b21b6eaaf","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xac9afa8c8e27df4f","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467" [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49828	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1576	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	1694	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49827	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1320	OUT	GET /activity;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	1438	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49831	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1420	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	3111	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3003754078734995517"}],"aggregatable_trigger_data":[{"filters":[{"14":["10904907"]}],"key_piece":"0x4c546039ce3980ea","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0x7c4107fa098cbece","not_filters":{"14":["10904907"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49830	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1320	OUT	GET /activity;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:43 UTC	1438	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 31-Oct-2024 00:24:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49838	216.239.32.21	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	2335	OUT	GET /g/collect?v=2&tid=G-EPWEMH6717&gtm=45je4as0v872399471z8812729902za200zb812729902&_p=1730333377374&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101823848~101878899~101878944~101925629&cid=726425897.1730333381&ecid=1811482092&ul=en-us&sr=1280x1024&_fplc=0&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&sst.tft=1730333377374&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&dr=&dt=Login%20to%20your%20Canva%20account&sid=1730333380&sct=1&seg=0&en=new.user.engagement&ep.gtm_web_details=GTM-TZPTKRR%20%7C%20285&ep.event_id=1730333718024_1730333867657108&ep.custom_dicbo=not%20set&ep.custom_consent_gtm_outbrain=yes&ep.custom_consent_gtm_fpc_rtid=yes&epn.custom_data_new [TRUNCATED] Host: ct.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; _rdt_uuid=1730333379932.da3f4213-0e50-40f2-81d4-818150f9265f; _ga=GA1.1.726425897.1730333381; _ga_EPWEMH6717=GS1.1.1730333380.1.0.1730333380.0.0.1811482092; FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; FPLC=39vTGXSqjvv%2BQLToUzTVicDKkZAxwDqCDWtVgVqM8uDCshTeLpSGb90n38d56ZdQidQnqpzhxOny6S0tsqiDBXSzza7HB3v7J3SsJTyT5%2Fh47Vj2R1Rs%2BGgxiYyPLQ%3D%3D
2024-10-31 00:09:43 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 00:09:43 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.GXransMMjm8FyBhNWvAMMhXTS5kMDXM3yH04sJuDyV4%3D.1730333381; Max-Age=63072000; Domain=canva.com; Path=/; Secure; HttpOnly set-cookie: FPLC=1BMa1baIhCsvMjpvcFluU4NODTn8e%2FPCv4BbTwPLERcrcCt8GbXQDC10xoOhHNMV3r0Y%2BMhQAFC0lcz8g9OA0h%2BnioXxWQQguAom4v1rjhMjHWKHWzDVQLMWkc7FjA%3D%3D; Max-Age=72000; Domain=canva.com; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-31 00:09:43 UTC	801	IN	Data Raw: 33 31 61 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 72 65 67 69 73 74 65 72 5f 63 6f 6e 76 65 72 73 69 6f 6e 3d 31 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 32 30 35 34 31 33 35 38 33 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 75 30 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 36 3d 55 53 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c Data Ascii: 31aevent: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4au0h2v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l
2024-10-31 00:09:43 UTC	751	IN	Data Raw: 32 65 38 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 73 72 63 3d 39 38 31 32 33 34 33 3b 74 79 70 65 3d 63 6f 6e 76 65 30 3b 63 61 74 3d 63 61 6e 76 61 30 30 38 3b 6f 72 64 3d 32 30 35 34 31 33 35 38 33 35 3b 67 74 6d 3d 34 35 6a 39 31 65 34 61 75 30 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 34 38 33 34 31 31 39 38 7a 61 32 30 30 7a 62 38 31 32 37 32 39 39 30 32 3b 64 63 5f 70 72 65 3d 31 3b 75 36 3d 55 53 3b 64 6d 61 3d 30 3b 6e 70 61 3d 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 6c 31 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 Data Ascii: 2e8event: messagedata: {"send_pixel":["https://ad.doubleclick.net/activity;src=9812343;type=conve0;cat=canva008;ord=2054135835;gtm=45j91e4au0h2v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;u
2024-10-31 00:09:43 UTC	1408	IN	Data Raw: 35 64 36 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 73 65 6e 64 5f 70 69 78 65 6c 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 63 6f 6e 76 65 72 73 69 6f 6e 2f 38 30 34 37 35 37 30 37 39 2f 3f 72 61 6e 64 6f 6d 3d 31 39 38 37 33 37 39 35 36 34 26 66 73 74 3d 31 37 33 30 33 33 33 33 38 33 35 35 32 26 63 76 3d 31 30 26 66 6d 74 3d 33 26 6c 61 62 65 6c 3d 59 61 78 4b 43 4b 54 4a 6c 59 77 59 45 4e 65 38 33 76 38 43 26 62 67 3d 66 66 66 66 66 66 26 67 75 69 64 3d 4f 4e 26 75 5f 77 3d 31 32 38 30 26 75 5f 68 3d 31 30 32 34 26 67 74 6d 3d 34 35 6a 39 31 65 34 61 75 30 68 32 76 38 37 32 33 39 39 34 37 31 7a 38 38 31 32 37 32 39 39 30 32 7a 39 38 Data Ascii: 5d6event: messagedata: {"send_pixel":["https://www.googleadservices.com/pagead/conversion/804757079/?random=1987379564&fst=1730333383552&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4au0h2v872399471z8812729902z98
2024-10-31 00:09:43 UTC	93	IN	Data Raw: 31 30 31 38 32 33 38 34 38 7e 31 30 31 38 37 38 38 39 39 7e 31 30 31 38 37 38 39 34 34 7e 31 30 31 39 32 35 36 32 39 26 73 33 70 3d 31 22 5d 2c 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 72 65 70 6f 72 74 69 6e 67 22 3a 74 72 75 65 7d 7d 0a 0a 0d 0a Data Ascii: 101823848~101878899~101878944~101925629&s3p=1"],"options":{"attribution_reporting":true}}
2024-10-31 00:09:43 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49839	104.16.102.112	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	2253	OUT	GET /_ajax/ae/createBatch HTTP/1.1 Host: www.canva.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDI=394c9291-8fcf-467d-afa4-d6e1b3764599; CPA=cnvanblCrGf3f_54LMGuoJU9G9Wa39Hgs5m7-_nsjHnWsOVNxRzFXFRL_g06L6OblOr7vqoMPmUf3aJ4A2cCSeQuRc-tsHhar00_W8LxxOOclUsl_Ww8kSnDi6CH8HWci0wOkpbmijuBKVxRoNY7kScTlsNtYS3mUwkmwURtQjxTQHJTLX-MkQvf23GxxRpDqHU9Zv9hQt18zix2zZx-YDnLZznTJvEwUyepWWF9RZKIAyytB92a_15xmq2nyiWke3jhSgG1_VOz-X8YWGZlrRFGRJKBQtVL1w4qo-OkcyNKhS6yenmfKhiTetPGD8pVX_JtlRLuR4P6hMwHlHx0VV5ttb1oUVl4X9FjlEqDs0WaLJOJMZ2ZJ5dWFEAe0qw-m521Z0I4HtNm_pB4UYnB1HvvKhSzevB3UTV6-syw3og_EcuZ-aiDdBNSbv58GOngMYT-4LD0nWSNkaoHzg7BnhNGHLgmA1OE90d83216; CCK=0dQUufPHyZ_CAT_G8b-v0g; __cf_bm=8Jta1QRwpKwNT53vmIuatEP._sKkC3StzldqOfzpX2U-1730333372-1.0.1.1-Ye8y7.9ZzhPd.67c6unKwM28OQihpaJrRTjgtJq92EH88dPqFMgp81LUODmCJmh5FuvV5jgdNYKlKrV01WygJQ; _cfuvid=MjAMTiAiBkxQp9wD6IBM.UUH77.VUUvWw35wqHWMwCc-1730333372254-0.0.1.1-604800000; ASI=01JBFYFZ785QFE66TJPF8QZ3A6; gtm_custom_user_engagement={"lock":"yes","page":1,"landingPageURL":"https://www.canva.com/login/?redirect=%2Fdesign%2FDAGRHU7OhOs%2FMKT99QDr9EMLJb8DISkRcw%2Fview%3Futm_content% [TRUNCATED]
2024-10-31 00:09:43 UTC	1079	IN	HTTP/1.1 404 Not Found Date: Thu, 31 Oct 2024 00:09:43 GMT Content-Type: text/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8daf6aff08e283a1-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Pragma: No-cache accept-ch: Sec-CH-UA-Platform-Version content-security-policy: frame-ancestors https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com; referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: deny x-request-id: 8daf6aff08e283a1 x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QnWC3dGz8%2B%2BHuEUTGdlqYrKNLYdpI%2Bisb%2BtQLOBslR9snFDSLnDBwPhYRyL4iRNp87wcLsa5aLwuGuVsHf%2B2MD5i5Jgw6uZC9Qg62nRBAXnP%2BCQFqxUMIasbl%2Fwdwmg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-31 00:09:43 UTC	64	IN	Data Raw: 33 61 0d 0a 27 22 5d 29 7d 77 68 69 6c 65 28 31 29 3b 3c 2f 78 3e 2f 2f 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 6e 6f 74 20 66 6f 75 6e 64 22 7d 0d 0a Data Ascii: 3a'"])}while(1);</x>//{"statusCode":404,"error":"not found"}
2024-10-31 00:09:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49842	157.240.0.6	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	555	OUT	GET /signals/plugins/microdata.js?v=2.9.174 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:44 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-5H7Anu0B' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:44 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:44 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 00:09:44 UTC	1491	IN	Data Raw: 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 76 61 6c 75 65 4f 66 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: )&&!d(e=c.call(a)))return e;if("function"==typeof (c=a.valueOf)&&!d(e=c.call(a)))return e;if(!b&&"function"==typeof (c=a.toString)&&!d(e=c.call(a)))return e;throw TypeError("Can't convert object to primitive value")}},function(a,b){a.exports=!0},function(
2024-10-31 00:09:44 UTC	14893	IN	Data Raw: 28 31 32 29 2c 67 3d 63 28 31 33 29 2c 68 3d 63 28 33 33 29 3b 63 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 3b 76 61 72 20 69 3d 21 31 3b 5b 5d 2e 6b 65 79 73 26 26 28 22 6e 65 78 74 22 69 6e 28 65 3d 5b 5d 2e 6b 65 79 73 28 29 29 3f 28 62 3d 62 28 62 28 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 64 3d 62 29 3a 69 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 64 26 26 28 64 3d 7b 7d 29 2c 68 7c 7c 67 28 64 2c 63 29 7c 7c 66 28 64 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 61 2e 65 78 70 6f 72 74 73 3d 7b 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 3a 64 2c 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 3a 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 Data Ascii: (12),g=c(13),h=c(33);c=c(4)("iterator");var i=!1;[].keys&&("next"in(e=[].keys())?(b=b(b(e)))!==Object.prototype&&(d=b):i=!0),null==d&&(d={}),h\|\|g(d,c)\|\|f(d,c,function(){return this}),a.exports={IteratorPrototype:d,BUGGY_SAFARI_ITERATORS:i}},function(a,b,c
2024-10-31 00:09:44 UTC	1500	IN	Data Raw: 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 61 29 3b 62 26 26 28 64 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 61 2c 62 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d Data Ascii: t.getOwnPropertySymbols){var d=Object.getOwnPropertySymbols(a);b&&(d=d.filter(function(b){return Object.getOwnPropertyDescriptor(a,b).enumerable})),c.push.apply(c,d)}return c}function x(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?argum
2024-10-31 00:09:44 UTC	1482	IN	Data Raw: 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 61 73 68 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 6e 61 6d 65 7d 7d 2c 7b 6b 65 79 3a 22 70 61 74 68 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5c 2f 3f 29 2f 2c 22 2f 22 29 7d 7d 2c 7b 6b 65 79 3a 22 70 Data Ascii: this._anchorElement.hash}},{key:"host",get:function(){return this._anchorElement.host}},{key:"hostname",get:function(){return this._anchorElement.hostname}},{key:"pathname",get:function(){return this._anchorElement.pathname.replace(/(^\/?)/,"/")}},{key:"p
2024-10-31 00:09:44 UTC	13402	IN	Data Raw: 64 2e 6e 28 44 29 3b 6b 3d 64 28 31 35 29 3b 76 61 72 20 46 3d 64 2e 6e 28 6b 29 3b 44 3d 28 64 28 33 39 29 2c 64 28 31 39 29 29 3b 76 61 72 20 47 3d 64 2e 6e 28 44 29 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 63 61 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 7c 7c 6e 75 6c 6c 21 3d 61 5b 22 40 40 69 74 65 72 61 74 6f Data Ascii: d.n(D);k=d(15);var F=d.n(k);D=(d(39),d(19));var G=d.n(D);function H(a){return function(a){if(Array.isArray(a))return ca(a)}(a)\|\|function(a){if("undefined"!=typeof Symbol&&null!=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]\|\|null!=a["@@iterato
2024-10-31 00:09:44 UTC	1500	IN	Data Raw: 3d 64 5b 31 5d 3f 64 5b 31 5d 3a 76 6f 69 64 20 30 7d 5d 29 7d 72 65 74 75 72 6e 20 71 28 29 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 63 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 61 7d 7d 29 3b 63 61 73 65 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 3a 67 3d 63 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3b 64 3d 67 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 65 3d 67 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 63 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 46 61 28 45 61 2c 64 2c 65 29 7d 3b 63 61 73 65 22 55 52 49 22 3a 67 3d 63 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 Data Ascii: =d[1]?d[1]:void 0}])}return q()(e,function(a){return{extractorID:c.id,jsonLD:a}});case"CONSTANT_VALUE":g=c.extractorConfig;d=g.parameterType;e=g.value;return{extractorID:c.id,jsonLD:Fa(Ea,d,e)};case"URI":g=c.extractorConfig.parameterType;d=function(a,b,c)
2024-10-31 00:09:44 UTC	1482	IN	Data Raw: 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 6d 28 29 28 61 2e 69 64 29 2c 72 75 6c 65 49 64 3a 6e 75 6c 6c 21 3d 28 62 3d 61 2e 65 76 65 6e 74 5f 72 75 6c 65 29 3f 62 2e 69 64 3a 62 7d 3b 63 61 73 65 22 55 52 49 22 3a 69 66 28 6e 75 6c 6c 3d 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 62 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 62 2e 70 61 72 61 6d 65 74 65 72 5f 73 65 6c 65 63 74 6f 72 73 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 20 6d 75 73 74 20 62 65 20 73 65 74 22 29 3b 72 65 74 75 72 6e Data Ascii: :"CONSTANT_VALUE",id:m()(a.id),ruleId:null!=(b=a.event_rule)?b.id:b};case"URI":if(null==a.extractor_config)throw new Error("extractor_config must be set");b=a.extractor_config;if(b.parameter_selectors)throw new Error("extractor_config must be set");return
2024-10-31 00:09:44 UTC	13402	IN	Data Raw: 5b 68 72 65 66 5e 3d 27 73 6d 73 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 73 6b 79 70 65 3a 27 5d 22 2c 22 5b 68 72 65 66 5e 3d 27 77 68 61 74 73 61 70 70 3a 27 5d 22 5d 2e 6a 6f 69 6e 28 4f 29 2c 4f 61 3d 50 2c 50 61 3d 5b 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 5d 22 2c 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 73 75 62 6d 69 74 27 5d 22 2c 22 62 75 74 74 6f 6e 22 2c 22 61 22 5d 2e 6a 6f 69 6e 28 4f 29 3b 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 76 61 72 20 62 3d 22 22 3b 69 66 28 22 49 4d 47 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 7c 7c 22 22 3b 69 66 28 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 29 7b 76 61 72 20 63 3d 66 2e 67 65 74 Data Ascii: [href^='sms:']","[href^='skype:']","[href^='whatsapp:']"].join(O),Oa=P,Pa=["input[type='button']","input[type='submit']","button","a"].join(O);function Qa(a){var b="";if("IMG"===a.tagName)return a.getAttribute("src")\|\|"";if(f.getComputedStyle){var c=f.get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49841	157.240.253.1	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:43 UTC	1198	OUT	GET /signals/config/844585682227065?v=2.9.174&r=stable&domain=www.canva.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:44 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-wXIS3XCM' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:44 UTC	1695	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:44 UTC	1491	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 00:09:44 UTC	14893	IN	Data Raw: 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: urn!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbo
2024-10-31 00:09:44 UTC	1500	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 Data Ascii: =typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototyp
2024-10-31 00:09:44 UTC	1482	IN	Data Raw: 65 74 3b 61 3d 61 2e 70 69 78 65 6c 3b 72 65 74 75 72 6e 20 69 28 7b 65 78 74 72 61 63 74 6f 72 73 42 79 50 69 78 65 6c 73 3a 67 2c 66 62 71 49 6e 73 74 61 6e 63 65 3a 65 2c 70 69 78 65 6c 3a 61 2c 74 61 72 67 65 74 3a 62 7d 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 2c 65 Data Ascii: et;a=a.pixel;return i({extractorsByPixels:g,fbqInstance:e,pixel:a,target:b})})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iwlparameters");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iwlparameters",e
2024-10-31 00:09:44 UTC	13402	IN	Data Raw: 65 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: ength);b<a.length;b++)c[b]=a[b];return c}else return Array.from(a)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsMod
2024-10-31 00:09:44 UTC	1491	IN	Data Raw: 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 6e 67 74 68 3e 30 3b 69 66 28 6b 7c 7c 66 29 7b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 43 55 53 54 4f 4d 5f 44 41 54 41 22 7d 29 3b 70 3d 7b 7d 3b 6b 26 26 28 70 2e 75 70 3d 6d 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 66 26 26 28 70 2e 72 70 3d 6e 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 70 7d 7d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e Data Ascii: ength>0;f=n.length>0;if(k\|\|f){a.performanceMark("fbevents:end:unwantedDataProcessing",b.id);g.logUserError({type:"UNWANTED_CUSTOM_DATA"});p={};k&&(p.up=m.join(","));f&&(p.rp=n.join(","));return p}}a.performanceMark("fbevents:end:unwantedDataProcessing",b.
2024-10-31 00:09:44 UTC	1491	IN	Data Raw: 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 Data Ascii: eturn e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.unwanteddata");f.registerPlugin&&f.registerPlugin("fbevents.plugins.unwanteddata",e.exports);f.ensureModuleRegistered("fbevents.plugins.unwanteddata",function(){return e
2024-10-31 00:09:44 UTC	13402	IN	Data Raw: 4c 69 73 74 22 29 3b 76 61 72 20 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 49 6f 73 49 6e 41 70 70 42 72 6f 77 73 65 72 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 41 6e 64 72 6f 69 64 49 41 57 22 29 2c 6b 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 6c 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 68 61 32 35 36 5f 77 69 74 68 5f 64 65 70 65 6e 64 65 6e 63 69 65 73 5f 6e 65 77 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 Data Ascii: List");var i=f.getFbeventsModules("signalsFBEventsGetIsIosInAppBrowser"),j=f.getFbeventsModules("signalsFBEventsGetIsAndroidIAW"),k=f.getFbeventsModules("SignalsFBEventsConfigStore"),l=f.getFbeventsModules("sha256_with_dependencies_new");function m(a){ret
2024-10-31 00:09:44 UTC	1491	IN	Data Raw: 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 47 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 67 3d 48 5b 62 2e 69 64 5d 3b 64 2e 63 73 5f 65 73 74 3d 21 30 3b 69 66 28 67 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 74 2e 69 73 4d 61 74 63 68 45 53 54 52 75 6c 65 28 67 2e 63 6f 6e 64 69 74 69 6f 6e 2c 63 29 29 7b 69 66 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 21 3d 3d 70 2e 44 45 52 49 56 45 5f 45 56 45 4e 54 29 72 65 74 75 72 6e 3b 63 3d 61 28 7b 7d 2c 64 29 3b 76 61 72 20 68 3d 7b 65 76 65 6e 74 49 44 3a 66 7d 3b 67 2e 72 75 6c 65 5f 69 Data Ascii: n e}function G(b,c,d,f){var g=H[b.id];d.cs_est=!0;if(g==null)return;n(g,function(g){try{if(t.isMatchESTRule(g.condition,c)){if(g.transformations==null)return;n(g.transformations,function(c){if(c!==p.DERIVE_EVENT)return;c=a({},d);var h={eventID:f};g.rule_i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49845	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1161	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	3280	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"8379039266985367651"}],"aggregatable_trigger_data":[{"filters":[{"14":["10904904"]}],"key_piece":"0xd9d86537f662631d","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xa680df5d601acc8f","not_filters":{"14":["10904904"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmkGkdu4WiQsREath2Oq9C-txv7R9ZXIpeIkVME7qJgSX-fhQxELehosbtf; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	49844	142.250.186.102	443	7032	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1727	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	3280	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6541786172727246392"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0x1274fa3b21b6eaaf","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xac9afa8c8e27df4f","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlWJWsCEuETXWic_ztveyhtA96OPMn6VNrzkeUvRS1gwfxey5sxrwYXJTKk; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	49846	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1417	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	3285	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13347070141725274676"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0x1274fa3b21b6eaaf","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xac9afa8c8e27df4f","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467" [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUn3io6oqRRGlSI4Dcwbg9I19UIOtDGxNEOWgRnj5UTDW6YlsxD9DdZvzkun; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49843	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1627	OUT	GET /activity;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	1865	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmMkymBij63668uJvHEDzvVQ2ovTAgFbPPsyMG1fglrITu6trfAYKCfSKZoFXs; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	49849	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1578	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49847	216.58.206.66	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	2483	OUT	GET /pagead/viewthroughconversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	2685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&r [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUk6wpPZgA_AsZrXPaGi83-JQ-6zae0ZiBE6f2agt6AZT0dsRk4ipcxTnylQ; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	49850	216.58.206.66	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	2563	OUT	GET /pagead/viewthroughconversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant% [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	2765	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcus [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkQ3u4DM3EnOAgEdxVNDcQCvI8Y620wJy5eodpSZG2QGbg2zke3wcgOqRFS; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	49848	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1322	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	49851	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1322	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:44 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	49852	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1707	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	3281	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4838349771570346474"}],"aggregatable_trigger_data":[{"filters":[{"14":["16304094"]}],"key_piece":"0x92f30591586f5a8e","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xfae2dfe8fccf93ad","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnUZTB5gSlovNaywDoK2OIBBGUPvjnrQEYt_5n8Pts1w9TOyCSdFvq3dxmL; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	49853	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	1161	OUT	GET /activity;register_conversion=1;src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	3280	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"3003754078734995517"}],"aggregatable_trigger_data":[{"filters":[{"14":["10904907"]}],"key_piece":"0x4c546039ce3980ea","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0x7c4107fa098cbece","not_filters":{"14":["10904907"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnq-q1t419pXC18RvjFnJbnY8re6jm-55tQkkzobKXOyYOW3-lfhFdWZZDU; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	49854	216.58.206.66	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:44 UTC	2504	OUT	GET /pagead/viewthroughconversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3D [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; test_cookie=CheckForPermission
2024-10-31 00:09:44 UTC	2729	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcusto [TRUNCATED] Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnb1nFCvkD3b8nTaFMRphjLK5yUhIPChq1EAIJIC0d5syqkGeSXh-7dBYqO; expires=Sat, 31-Oct-2026 00:09:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.16	49856	157.240.0.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1231	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=123, rtx=0, c=10, mss=1380, tbw=3403, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 00:09:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.16	49855	157.240.253.1	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	382	OUT	GET /signals/plugins/microdata.js?v=2.9.174 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-U7iXBrYY' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-31 00:09:45 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-31 00:09:45 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-31 00:09:45 UTC	14884	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-10-31 00:09:45 UTC	1500	IN	Data Raw: 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 76 61 6c 75 65 4f 66 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 21 62 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 28 63 3d 61 2e 74 6f 53 74 72 69 6e 67 29 26 26 21 64 28 65 3d 63 2e 63 61 6c 6c 28 61 29 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 6f 72 74 73 3d 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: )&&!d(e=c.call(a)))return e;if("function"==typeof (c=a.valueOf)&&!d(e=c.call(a)))return e;if(!b&&"function"==typeof (c=a.toString)&&!d(e=c.call(a)))return e;throw TypeError("Can't convert object to primitive value")}},function(a,b){a.exports=!0},function(
2024-10-31 00:09:45 UTC	1500	IN	Data Raw: 31 33 29 2c 68 3d 63 28 33 33 29 3b 63 3d 63 28 34 29 28 22 69 74 65 72 61 74 6f 72 22 29 3b 76 61 72 20 69 3d 21 31 3b 5b 5d 2e 6b 65 79 73 26 26 28 22 6e 65 78 74 22 69 6e 28 65 3d 5b 5d 2e 6b 65 79 73 28 29 29 3f 28 62 3d 62 28 62 28 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 64 3d 62 29 3a 69 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 64 26 26 28 64 3d 7b 7d 29 2c 68 7c 7c 67 28 64 2c 63 29 7c 7c 66 28 64 2c 63 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 61 2e 65 78 70 6f 72 74 73 3d 7b 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 3a 64 2c 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 3a 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 Data Ascii: 13),h=c(33);c=c(4)("iterator");var i=!1;[].keys&&("next"in(e=[].keys())?(b=b(b(e)))!==Object.prototype&&(d=b):i=!0),null==d&&(d={}),h\|\|g(d,c)\|\|f(d,c,function(){return this}),a.exports={IteratorPrototype:d,BUGGY_SAFARI_ITERATORS:i}},function(a,b,c){var d=c
2024-10-31 00:09:45 UTC	13384	IN	Data Raw: 61 2c 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 28 61 3f 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 3a 62 29 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 66 3b 72 65 74 75 72 6e 21 28 21 61 7c 7c 21 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 4e 6f 64 65 3f 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 2e 4e 6f 64 65 3a 22 6f 62 6a 65 63 74 22 3d 3d 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 67 28 61 29 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 Data Ascii: a,c,d){"use strict";a.exports=function(a){var c=(a?a.ownerDocument\|\|a:b).defaultView\|\|f;return!(!a\|\|!("function"==typeof c.Node?a instanceof c.Node:"object"==(typeof a==="undefined"?"undefined":g(a))&&"number"==typeof a.nodeType&&"string"==typeof a.nodeNa
2024-10-31 00:09:45 UTC	1491	IN	Data Raw: 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 61 29 3b 62 26 26 28 64 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 61 2c 62 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 64 29 7d 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3f 61 72 67 75 6d Data Ascii: t.getOwnPropertySymbols){var d=Object.getOwnPropertySymbols(a);b&&(d=d.filter(function(b){return Object.getOwnPropertyDescriptor(a,b).enumerable})),c.push.apply(c,d)}return c}function x(a){for(var b=1;b<arguments.length;b++){var c=null!=arguments[b]?argum
2024-10-31 00:09:45 UTC	1500	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 61 73 68 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 7d 7d 2c 7b 6b 65 79 3a 22 68 6f 73 74 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 68 6f 73 74 6e 61 6d 65 7d 7d 2c 7b 6b 65 79 3a 22 70 61 74 68 6e 61 6d 65 22 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5c 2f 3f 29 2f 2c 22 2f 22 29 7d Data Ascii: ){return this._anchorElement.hash}},{key:"host",get:function(){return this._anchorElement.host}},{key:"hostname",get:function(){return this._anchorElement.hostname}},{key:"pathname",get:function(){return this._anchorElement.pathname.replace(/(^\/?)/,"/")}
2024-10-31 00:09:45 UTC	13393	IN	Data Raw: 64 28 31 35 29 3b 76 61 72 20 46 3d 64 2e 6e 28 6b 29 3b 44 3d 28 64 28 33 39 29 2c 64 28 31 39 29 29 3b 76 61 72 20 47 3d 64 2e 6e 28 44 29 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 63 61 28 61 29 7d 28 61 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 7c 7c 6e 75 6c 6c 21 3d 61 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 Data Ascii: d(15);var F=d.n(k);D=(d(39),d(19));var G=d.n(D);function H(a){return function(a){if(Array.isArray(a))return ca(a)}(a)\|\|function(a){if("undefined"!=typeof Symbol&&null!=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"]\|\|null!=a["@@iterator"])retur
2024-10-31 00:09:45 UTC	1491	IN	Data Raw: 3d 64 5b 31 5d 3f 64 5b 31 5d 3a 76 6f 69 64 20 30 7d 5d 29 7d 72 65 74 75 72 6e 20 71 28 29 28 65 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 63 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 61 7d 7d 29 3b 63 61 73 65 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 3a 67 3d 63 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 3b 64 3d 67 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 65 3d 67 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 7b 65 78 74 72 61 63 74 6f 72 49 44 3a 63 2e 69 64 2c 6a 73 6f 6e 4c 44 3a 46 61 28 45 61 2c 64 2c 65 29 7d 3b 63 61 73 65 22 55 52 49 22 3a 67 3d 63 2e 65 78 74 72 61 63 74 6f 72 43 6f 6e 66 69 67 2e 70 61 72 61 6d 65 74 65 72 54 79 70 65 3b 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 Data Ascii: =d[1]?d[1]:void 0}])}return q()(e,function(a){return{extractorID:c.id,jsonLD:a}});case"CONSTANT_VALUE":g=c.extractorConfig;d=g.parameterType;e=g.value;return{extractorID:c.id,jsonLD:Fa(Ea,d,e)};case"URI":g=c.extractorConfig.parameterType;d=function(a,b,c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.16	49857	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1668	OUT	GET /activity;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlWJWsCEuETXWic_ztveyhtA96OPMn6VNrzkeUvRS1gwfxey5sxrwYXJTKk
2024-10-31 00:09:45 UTC	1547	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.16	49858	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1454	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlWJWsCEuETXWic_ztveyhtA96OPMn6VNrzkeUvRS1gwfxey5sxrwYXJTKk
2024-10-31 00:09:45 UTC	2972	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"6541786172727246392"}],"aggregatable_trigger_data":[{"filters":[{"14":["16303776"]}],"key_piece":"0x1274fa3b21b6eaaf","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xac9afa8c8e27df4f","not_filters":{"14":["16303776"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.16	49861	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	2502	OUT	GET /pagead/1p-conversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.16	49859	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1577	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.16	49860	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	2582	OUT	GET /pagead/1p-conversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2% [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.16	49862	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1514	OUT	GET /activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkQ3u4DM3EnOAgEdxVNDcQCvI8Y620wJy5eodpSZG2QGbg2zke3wcgOqRFS
2024-10-31 00:09:45 UTC	2972	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7333410714386823596"}],"aggregatable_trigger_data":[{"filters":[{"14":["13079090"]}],"key_piece":"0x8548892ac9cac55c","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xa2be2c8a4e50c4c7","not_filters":{"14":["13079090"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.16	49863	142.250.185.194	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1345	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=1297888969;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=542968056;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.16	49865	142.250.185.194	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1089	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva0;ord=1282255362;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1657016960;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.16	49866	157.240.0.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1341	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	1095	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x857061f209d0d98c","source_keys":["1"]}],"aggregatable_values":{"1":10922},"filters":{"3":["3439073672879904"]},"debug_reporting":true,"debug_key":"1601001720859938777"} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431725301734392550", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431725301734392550"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 00:09:45 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 00:09:45 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-31 00:09:45 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-10-31 00:09:45 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.16	49867	142.250.185.194	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1089	OUT	GET /ddm/fls/z/src=9812343;type=paidm0;cat=canva00;ord=723705611;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1181355295;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.16	49864	142.250.186.102	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1419	OUT	GET /activity;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUkQ3u4DM3EnOAgEdxVNDcQCvI8Y620wJy5eodpSZG2QGbg2zke3wcgOqRFS
2024-10-31 00:09:45 UTC	1298	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://adservice.google.com/ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.16	49868	157.240.0.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1228	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3401, tp=-1, tpl=-1, uplat=2, ullat=2 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 00:09:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.16	49869	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	1457	OUT	GET /activity;register_conversion=1;src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnUZTB5gSlovNaywDoK2OIBBGUPvjnrQEYt_5n8Pts1w9TOyCSdFvq3dxmL
2024-10-31 00:09:45 UTC	2973	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4838349771570346474"}],"aggregatable_trigger_data":[{"filters":[{"14":["16304094"]}],"key_piece":"0x92f30591586f5a8e","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xfae2dfe8fccf93ad","not_filters":{"14":["16304094"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.16	49870	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:45 UTC	2523	OUT	GET /pagead/1p-conversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3B [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.16	49871	157.240.0.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1338	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:46 UTC	1095	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png attribution-reporting-register-trigger: {"event_trigger_data":[{"trigger_data":"0"}],"aggregatable_trigger_data":[{"key_piece":"0x33885891f7e7bd4b","source_keys":["1"]}],"aggregatable_values":{"1":10922},"filters":{"3":["5192282520812947"]},"debug_reporting":true,"debug_key":"1903383508750046683"} reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431725305272002022", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431725305272002022"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 00:09:46 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 00:09:46 UTC	1673	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-31 00:09:46 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-10-31 00:09:46 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.16	49872	157.240.253.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	998	OUT	GET /tr/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:46 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 00:09:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.16	49873	142.250.186.70	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1208	OUT	GET /activity;register_conversion=1;src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUnb1nFCvkD3b8nTaFMRphjLK5yUhIPChq1EAIJIC0d5syqkGeSXh-7dBYqO
2024-10-31 00:09:46 UTC	2972	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7333410714386823596"}],"aggregatable_trigger_data":[{"filters":[{"14":["13079090"]}],"key_piece":"0x8548892ac9cac55c","source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467","640991956","640991957","640991958","640991959"]},{"key_piece":"0xa2be2c8a4e50c4c7","not_filters":{"14":["13079090"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","20461972","20461973","20461974","20461975","24752168","24752169","24752170","24752171","628512992","628512993","628512994","628512995","628717332","628717333","628717334","628717335","628748640","628748641","628748642","628748643","628760464","628760465","628760466","628760467", [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 30-Nov-2024 00:09:46 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.16	49876	157.240.253.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	995	OUT	GET /tr/?id=844585682227065&ev=ViewContent&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382447&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=1&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:46 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 31 Oct 2024 00:09:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.16	49874	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	2191	OUT	GET /pagead/1p-conversion/804757079/?random=77592999&fst=1730333382237&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dhomepage_visit%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765753%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dhomepage%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dvisit%3Bcustom_product_variant%3Dweb-2%3Bcustom_country_code%3DUS%3Bcustom_app_name%3Dweb&rdp=1&dma=0&npa=0&gcd=13l3l3l [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:46 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.16	49878	157.240.253.35	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1035	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=844585682227065&ev=homepage_visit&dl=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&rl=&if=false&ts=1730333382445&sw=1280&sh=1024&ud[product_variant]=612f7a0edd33d5c1a7f59b38db605f5f0f9bf63cb4ce753b9bad0ff3aa941412&ud[country]=79adb2a2fce5c6ba215fe5f27f532d4e7edbac4b6a5e09e1ef3a08084a904621&v=2.9.174&r=stable&ec=0&o=4125&fbp=fb.1.1730333382444.70339655874471045&ler=empty&cdl=API_unavailable&it=1730333380952&coo=false&eid=1730333718024_173033386765753&tm=2&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:46 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7431725304442137127", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7431725304442137127"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-31 00:09:46 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-31 00:09:46 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.16	49877	142.250.185.194	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1344	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood0;ord=239736606;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=270561326;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:47 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.16	49875	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	2271	OUT	GET /pagead/1p-conversion/804757079/?random=236523218&fst=1730333382253&cv=10&fmt=3&label=5VqLCKW6taoBENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dcustom.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_173033386765789%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dcustom.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2% [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.16	49879	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1580	OUT	GET /ddm/fls/z/src=9812343;type=websi000;cat=flood00;ord=1816735204;gtm=45j91e4at1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u59=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor;u67=guest;u66=false;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=1112737148;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:47 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.16	49880	142.250.186.130	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	1331	OUT	GET /ddm/fls/z/src=9812343;type=conve0;cat=canva008;ord=1174064874;gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902;dc_pre=1;u6=US;dma=0;npa=0;gcd=13l3l3l3l1l1;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;tag_exp=101533421~101823848~101878899~101878944~101925629;ps=1;pcor=748834113;s3p=1;~oref=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.canva.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:47 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.16	49881	172.217.18.4	443	6712	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 00:09:46 UTC	2235	OUT	GET /pagead/1p-conversion/804757079/?random=339456935&fst=1730333382412&cv=10&fmt=3&label=YaxKCKTJlYwYENe83v8C&bg=ffffff&guid=ON&u_w=1280&u_h=1024&gtm=45j91e4at1h1v872399471z8812729902z9848341198za200zb812729902&value=0&url=https%3A%2F%2Fwww.canva.com%2Flogin%2F%3Fredirect%3D%252Fdesign%252FDAGRHU7OhOs%252FMKT99QDr9EMLJb8DISkRcw%252Fview%253Futm_content%253DDAGRHU7OhOs%2526utm_campaign%253Ddesignshare%2526utm_medium%253Dlink%2526utm_source%253Deditor&tiba=Login%20to%20your%20Canva%20account&data=event%3Dnew.user.engagement%3Bgtm_web_details%3DGTM-TZPTKRR%20%7C%20285%3Bevent_id%3D1730333718024_1730333867657108%3Bcustom_dicbo%3Dnot%20set%3Bcustom_consent_gtm_outbrain%3Dyes%3Bcustom_consent_gtm_fpc_rtid%3Dyes%3Bcustom_data_newSession2%3D1%3Bcustom_device_category%3Ddesktop%3Bcustom_event_name%3Dnew.user.engagement%3Bcustom_quantity%3D0%3Bcustom_step%3Dnot%20set%3Bcustom_user_type_by_user_id%3Dguest%3Bevent_action%3Dno-value%3Bcustom_data_newSession%3Dyes%3Bcustom_data_page%3D1%3Bcustom_product_variant%3Dweb-2%3B [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 00:09:47 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 31 Oct 2024 00:09:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-31 00:09:47 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Target ID:	0
Start time:	20:09:27
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\ReviewDoc_Commission Dept Ec.pdf"
Imagebase:	0x7ff602ca0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:09:28
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff664f60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:09:29
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2344 --field-trial-handle=1612,i,14224133217588503997,5544407300561384709,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff664f60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	20:09:30
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.canva.com/design/DAGRHU7OhOs/MKT99QDr9EMLJb8DISkRcw/view?utm_content=DAGRHU7OhOs&utm_campaign=designshare&utm_medium=link&utm_source=editor
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	20:09:30
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1964,i,6797166912141607368,17721715161204195292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ReviewDoc_Commission Dept Ec.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\3e11396d-ea59-4a5a-8890-f1fbe49c318c.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\7c98a7a8-6271-4dcd-af23-824a846fd803.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF7099ed.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241031000933Z-164.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Windows Analysis Report
ReviewDoc_Commission Dept Ec.pdf