Edit tour

Windows Analysis Report
https://purolator.com/en/tracker?pin=335008262560

Overview

General Information

Sample URL:	https://purolator.com/en/tracker?pin=335008262560
Analysis ID:	1546706
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body with high number of embedded images detected

HTML body with high number of large embedded background images detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2008,i,2931152776266479355,3246117985939233813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purolator.com/en/tracker?pin=335008262560" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker&scrsrc=www.googletagmanager.com&frm=0&rnd=2035600518.1730465871&auid=884492963.1730465871&npa=0&gtm=45He4au0v72392466za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730465871138&tfd=10323&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.purolator.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.purolator.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_377.3.dr	String found in binary or memory: http://ajaxian.com/archives/100-line-ajax-wrapper
Source: chromecache_377.3.dr	String found in binary or memory: http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-w
Source: chromecache_377.3.dr	String found in binary or memory: http://bugs.jquery.com/ticket/1450
Source: chromecache_377.3.dr	String found in binary or memory: http://bugs.jquery.com/ticket/5280
Source: chromecache_377.3.dr	String found in binary or memory: http://csrc.nist.gov/groups/ST/toolkit/documents/dss/NISTReCur.pdf
Source: chromecache_377.3.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.keys)
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components).
Source: chromecache_377.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-tolength).
Source: chromecache_377.3.dr	String found in binary or memory: http://eev.ee/blog/2015/09/12/dark-corners-of-unicode/).
Source: chromecache_377.3.dr	String found in binary or memory: http://ejohn.org/blog/javascript-micro-templating/)
Source: chromecache_377.3.dr	String found in binary or memory: http://fb.me/prop-types-in-prod
Source: chromecache_377.3.dr	String found in binary or memory: http://feross.org
Source: chromecache_377.3.dr	String found in binary or memory: http://foo.com
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_377.3.dr	String found in binary or memory: http://ghinda.net/jpeg-blob-ajax-android/
Source: chromecache_377.3.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_377.3.dr	String found in binary or memory: http://id.wikisource.org/wiki/Pedoman_Umum_Ejaan_Bahasa_Indonesia_yang_Disempurnakan
Source: chromecache_377.3.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_220.3.dr	String found in binary or memory: http://jquery.malsup.com/form/#file-upload.
Source: chromecache_377.3.dr	String found in binary or memory: http://jsfiddle.net/vWx8V/
Source: chromecache_377.3.dr	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: chromecache_377.3.dr	String found in binary or memory: http://jsperf.lnkit.com/fast-apply/5
Source: chromecache_377.3.dr	String found in binary or memory: http://kit.mit-license.org
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_377.3.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_377.3.dr	String found in binary or memory: http://narwhaljs.org)
Source: chromecache_377.3.dr	String found in binary or memory: http://new.gramota.ru/spravka/buro/search-answer?s=242637
Source: chromecache_377.3.dr	String found in binary or memory: http://new.gramota.ru/spravka/rules/139-prop
Source: chromecache_277.3.dr, chromecache_359.3.dr, chromecache_373.3.dr, chromecache_384.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_377.3.dr	String found in binary or memory: http://peter.michaux.ca/articles/lazy-function-definition-pattern)
Source: chromecache_377.3.dr	String found in binary or memory: http://praleska.pro/
Source: chromecache_377.3.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#mismatch
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/a/16459606/376773
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/a/22747272/680742
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/a/26603875
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/a/398120/376773
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/questions/1641507/detect-browser-support-for-cross-domain-xmlhttprequests
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_377.3.dr	String found in binary or memory: http://stackoverflow.com/questions/5603195/full-list-of-javascript-keycodes
Source: chromecache_377.3.dr	String found in binary or memory: http://stevesouders.com/misc/test-postmessage.php
Source: chromecache_377.3.dr	String found in binary or memory: http://tools.ietf.org/html/rfc3492#section-3.4
Source: chromecache_377.3.dr	String found in binary or memory: http://tweetnacl.cr.yp.to/
Source: chromecache_377.3.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_377.3.dr	String found in binary or memory: http://wiki.commonjs.org/wiki/Unit_Testing/1.0
Source: chromecache_377.3.dr	String found in binary or memory: http://wiki.whatwg.org/wiki/Crypto
Source: chromecache_377.3.dr	String found in binary or memory: http://wonko.com/post/html-escaping)
Source: chromecache_260.3.dr, chromecache_343.3.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_377.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_242.3.dr, chromecache_383.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_377.3.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_377.3.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).
Source: chromecache_377.3.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-regexp.prototype.tostring
Source: chromecache_377.3.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-tointeger).
Source: chromecache_377.3.dr	String found in binary or memory: http://www.google.com)
Source: chromecache_377.3.dr	String found in binary or memory: http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
Source: chromecache_377.3.dr	String found in binary or memory: http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd
Source: chromecache_377.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_377.3.dr	String found in binary or memory: http://www.unicode.org/cldr/charts/28/summary/ru.html#1753
Source: chromecache_377.3.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/tokenization.html#appropriate-end-tag-to
Source: chromecache_377.3.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/tokenization.html#tokenizing-character-r
Source: chromecache_377.3.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/tree-construction.html#adoptionAgency)
Source: chromecache_280.3.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_280.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_377.3.dr	String found in binary or memory: https://allyjs.io/tutorials/focusing-in-svg.html
Source: chromecache_377.3.dr	String found in binary or memory: https://bestiejs.github.io/json3
Source: chromecache_295.3.dr	String found in binary or memory: https://billingcentre.purolator.com/billingcentre/obpp/portal/#/
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=830565
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=2070)
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3175#c4
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3443
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=90
Source: chromecache_377.3.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=156034
Source: chromecache_377.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=695438.
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://careers.purolator.com/?locale=en_US
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://cdn.bc0a.com/autopilot/f00000000094873/autopilot_sdk.js
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/es6-object-assign
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/jquery-validation
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://cloud.connect.purolator.com/shipping-account-benefits/learn-more?campaign=7014U000002BPHQQA4
Source: chromecache_377.3.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=25916
Source: chromecache_377.3.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=286360
Source: chromecache_377.3.dr	String found in binary or memory: https://code.google.com/p/crypto-js/
Source: chromecache_377.3.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=3509
Source: chromecache_377.3.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=687
Source: chromecache_391.3.dr, chromecache_273.3.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_391.3.dr, chromecache_273.3.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_377.3.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_330.3.dr, chromecache_226.3.dr, chromecache_271.3.dr, chromecache_224.3.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.chrome.com/extensions/sandboxingEval).
Source: chromecache_236.3.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/JavaScript/Reference/Global_Objects/String/fromCharCode#Get
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Tools/Web_Console#Styling_messages
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Crypto/getRandomValues
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/window.crypto.getRandomValues
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/endsWith
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/includes
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/startsWith
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Symbol#Browser_comp
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Template_literals#ES2018_revision_
Source: chromecache_377.3.dr	String found in binary or memory: https://developer.mozilla.org/en/XMLHttpRequest
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_390.3.dr, chromecache_219.3.dr, chromecache_401.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_236.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_377.3.dr	String found in binary or memory: https://es5.github.io/#x13.2.2
Source: chromecache_377.3.dr	String found in binary or memory: https://es5.github.io/#x15.1.2.2)
Source: chromecache_377.3.dr	String found in binary or memory: https://esbench.com/bench/5b809c2cf2949800a0f61fb5
Source: chromecache_377.3.dr	String found in binary or memory: https://esbench.com/bench/5bf7371a4cd7e6009ef61d0a
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://eship.purolator.com/site/en/default.aspx
Source: chromecache_295.3.dr	String found in binary or memory: https://eshiponline.purolator.com/ShipOnline/SecurePages/Public/FormsLogin.aspx?ReturnUrl=/ShipOnlin
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://eshiponline.purolator.com/ShipOnline/SecurePages/Public/FormsLogin.aspx?lang=E
Source: chromecache_295.3.dr	String found in binary or memory: https://eshiponline.purolator.com/ShipOnline/SecurePages/Public/Register.aspx?lang=E
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://eshiponline.purolator.com/ShipOnline/estimates/estimate.aspx?lang=E
Source: chromecache_377.3.dr	String found in binary or memory: https://facebook.github.io/react/docs/refs-and-the-dom.html#the-ref-callback-attribute
Source: chromecache_377.3.dr	String found in binary or memory: https://fb.me/react-async-component-lifecycle-hooks
Source: chromecache_377.3.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://forms.office.com/r/GWFj2sVmh0
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://freight.purolator.com/scripts/cgiip.exe/facts.htm?language=english
Source: chromecache_239.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_377.3.dr	String found in binary or memory: https://gist.github.com/joelambert/1002116#file-requesttimeout-js)
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Amine27
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Automattic/engine.io-client/pull/217
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Automattic/has-binary/pull/4
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/B0k0
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/BYK
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/DevelopmentIL
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ElFadiliY
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/IBM/carbon-components-react/issues/1392
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/IrakliJani
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/JanisE
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Kaushik1987
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/MadMG
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Manfre98
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/LICENSE
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/blob/master/feature-detects/history.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Oire
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/PolymerElements/iron-iconset-svg/pull/47
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Quenty31
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ReactTraining/history/pull/289
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ShahramMebashar
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/TalAter
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/Viktorminator
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/WikiDiscoverer
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ZackVision
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/abdelsaid
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/adambrunner
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/alesma
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/aliem
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/amaranthrose
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/andela-batolagbe
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/andrewhood125
Source: chromecache_288.3.dr, chromecache_301.3.dr	String found in binary or memory: https://github.com/angular/angular.js/blob/v1.4.4/src/ng/urlUtils.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/anthonylau
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ariya/phantomjs/issues/11395
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/armendarabyan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/askpt
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/atamyratabdy
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/avaly
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/bangnk
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/baryon
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ben-lin
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/bkyceh
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/bleadof
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/bmarkovic
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/boyaq
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/bustta
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/caio-ribeiro-pereira
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/cepem
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/chienkira
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/chriscartlidge
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/chrisgedrim
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/chrisrodz
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/chyngyz
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/colindean
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/crypto-browserify/crypto-browserify
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/dchest/tweetnacl-util-js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/demidov91
Source: chromecache_304.3.dr, chromecache_279.3.dr	String found in binary or memory: https://github.com/dollarshaveclub/stickybits#readme
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ebraminio
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/eillarra
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/erhangundogan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/estellecomment
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/evoL
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/facebook/react-native/pull/1632
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/facebook/react/blob/15.0-stable/src/renderers/dom/shared/ReactDOMComponent.js#L45
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/facebook/react/blob/master/packages/shared/formatProdErrorMessage.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/facebook/react/commit/977357765b44af8ff0cfea327866861073095c12#commitcomment-2064
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/fadsel
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/feross/buffer/blob/680e9e5e488f22aac27599a57dc844a6315928dd/index.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/feross/buffer/pull/97
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/feross/ieee754
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/flakerimi
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/floodyberry/poly1305-donna
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/floydpink
Source: chromecache_323.3.dr, chromecache_411.3.dr	String found in binary or memory: https://github.com/focus-trap/tabbable/blob/master/LICENSE
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/forabi
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/frontyard
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/gaspard
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/gholadr
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/google/closure-library/blob/8598d87242af59aac233270742c8984e2b2bdbe0/closure/goog
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/google/closure-library/blob/master/LICENSE
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/gurdiga
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/hagmandan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/harpreetkhalsagtbit
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/hehachris
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/hinrik
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ibnesayeed
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/indutny/bn.js/issues/211
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/inikulin/parse5/tree/master/scripts/generate_named_entity_data/README.md
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jalex79
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jarcoal
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jashkenas/underscore/pull/1247
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jatinag22
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/javkhaanj7
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jawish
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jbleduigou
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jfroffice
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jjupiter
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/johnideal
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jonashdown
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jonbca
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jonschlinkert/kind-of
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/jorisroling
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/joshbrooks
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/joyent/oid-docs/blob/master/root.md
Source: chromecache_288.3.dr, chromecache_301.3.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L53
Source: chromecache_288.3.dr, chromecache_301.3.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L58
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/juanghurtado
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/julionc
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/k2s
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kaielvin/jsbn-ec-point-compression
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kalehv
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/karamell
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kaushikgandhi
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kcthota
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/keybase/triplesec
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kikoanis
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kraz
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kruyvanna
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kwisatz
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/kyungw00k
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/lantip
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/le0tan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ljharb/function.prototype.name/blob/adeeeec8bfcc6068b187d7d9fb3d5bb1d3a30899/impl
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/lluchs
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/lukemcgregor
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/madhenry
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mafintosh/end-of-stream
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/marobo
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mathiasbynens/he/blob/master/src/he.js#L94-L119
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/matthewdeeco
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mayanksinghal
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mechuwind
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mehiel
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/middagj
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/miestasmia
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mik01aj
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/milan-j
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/miodragnikac
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mirontoli
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mmozuras
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/moment/moment/issues/3375
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mrbase
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/muminoff
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/mweimerskirch
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/naderio
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/narainsagar
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nicolaidavies
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nodejs/node/blob/master/lib/internal/crypto/random.js#L48
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nodejs/node/blob/v10.8.0/lib/internal/errors.js
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nostalgiaz
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/noureddinem
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nurlan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/nusretparlak
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/oerd
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/olado/doT).
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/orif-jr
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/petrbela
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/pillarjs/path-to-regexp/blob/master/index.js#L202
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ragnar123
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ragulka
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/rajeevnaikte
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/reactjs/react-router/issues/586
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/rexxars
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/robgallen
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/robin0van0der0v
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ryangreaves
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ryanhart2
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sakarisson
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sampathsris
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sdecima/javascript-detect-element-resize
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sedovsek
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sigurdga
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sirn
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/skakri
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/skfd
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/slevithan/XRegExp/blob/master/src/xregexp.js#L469
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/socketpair
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/soniasimoes
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/sschueller
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/stephenramthun
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/suupic
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/suvash
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tc39/Array.prototype.includes
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tc39/proposal-observable
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tc39/proposal-string-pad-start-end
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/techdimension
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/thanyawzinmin
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/thysultan/stylis.js/tree/master/plugins/rule-sheet
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tk120404
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tomer
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/topchiyev
Source: chromecache_239.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_239.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/tyok
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/ulmus
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/uu109
Source: chromecache_242.3.dr, chromecache_383.3.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/vajradog
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/vnathalye
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/websockets/ws/pull/645
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/weldan
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/wernerm
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/whatwg/html/pull/907/files#r73505877
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/xfh
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/xsoh
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/yujiosaka/socke.io-ie8-loading-example
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/zemlanin
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/zenozeng
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/173
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/339
Source: chromecache_377.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_377.3.dr	String found in binary or memory: https://goo.gl/t5IS6M).
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_280.3.dr	String found in binary or memory: https://google.com
Source: chromecache_280.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_288.3.dr, chromecache_301.3.dr	String found in binary or memory: https://grack.com/blog/2009/11/17/absolutizing-url-in-javascript
Source: chromecache_377.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#disabled-elements
Source: chromecache_295.3.dr	String found in binary or memory: https://instagram.com/purolatorinc
Source: chromecache_295.3.dr	String found in binary or memory: https://itunes.apple.com/ca/app/purolator/id438701193?l=en&mt=8
Source: chromecache_304.3.dr, chromecache_279.3.dr	String found in binary or memory: https://jeffry.in)
Source: chromecache_223.3.dr, chromecache_225.3.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_377.3.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_377.3.dr	String found in binary or memory: https://lodash.com/)
Source: chromecache_377.3.dr	String found in binary or memory: https://lodash.com/custom-builds).
Source: chromecache_377.3.dr	String found in binary or memory: https://lodash.com/docs/4.17.4#isEqualWith
Source: chromecache_377.3.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://marvel-b1-cdn.bc0a.com/f00000000094873/dev.purolator.com/sites/default/files/FSR-Certified_0
Source: chromecache_377.3.dr	String found in binary or memory: https://mathiasbynens.be/notes/ambiguous-ampersands)
Source: chromecache_377.3.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-encoding
Source: chromecache_377.3.dr	String found in binary or memory: https://mathiasbynens.be/notes/javascript-unicode).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Array/reverse).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Array/slice)
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Number/isFinite).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Number/isInteger).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Number/isNaN)
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Number/isSafeInteger).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Object/assign).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/String/replace).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/String/split).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/Structured_clone_algorithm)
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/clearTimeout).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/isNaN)
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/iteration_protocols#iterator).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/rest_parameters).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/round#Examples)
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/setTimeout).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/spread_operator).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/toLowerCase).
Source: chromecache_377.3.dr	String found in binary or memory: https://mdn.io/toUpperCase).
Source: chromecache_377.3.dr	String found in binary or memory: https://meiert.com/en/blog/boolean-attributes-of-html/
Source: chromecache_377.3.dr	String found in binary or memory: https://mths.be/he).
Source: chromecache_377.3.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://myportal.purolator.com/
Source: chromecache_377.3.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_377.3.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://ogp.me/ns#
Source: chromecache_377.3.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_280.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_377.3.dr	String found in binary or memory: https://pastebin.com/N21QzeQA)
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_295.3.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.purolator.mobileapp&hl=en_CA
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://prod.virtualchatpurolator.com/#/Purolator-PROD
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://prod.virtualchatpurolator.com/#/Purolator-PROD-FR
Source: chromecache_377.3.dr	String found in binary or memory: https://prod.virtualchatpurolator.com/#/Purolator-PROD?PIN=PT875657361PT
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://prod.virtualchatpurolator.com/broker.js
Source: chromecache_412.3.dr, chromecache_296.3.dr	String found in binary or memory: https://purolator.ts2000.net/Login/QuickTrack/?SearchOn=TrackingNumber&SearchFor=
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://purolatorportal.cpg-gpc.ca/Fiori
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://purolatorportal.cpg-gpc.ca/supplier
Source: chromecache_280.3.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_377.3.dr	String found in binary or memory: https://reactjs.org/docs/react-api.html#reactcreateref
Source: chromecache_377.3.dr	String found in binary or memory: https://reactjs.org/docs/react-api.html#reactforwardref
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/Errors?code=
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/introduction/why-rtk-is-redux-today
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_377.3.dr	String found in binary or memory: https://redux.js.org/usage/deriving-data-selectors#optimizing-selectors-with-memoization
Source: chromecache_295.3.dr	String found in binary or memory: https://resources.purolator.com/
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_271.3.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.be180668.js
Source: chromecache_295.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://ship.purolator.com/index.html?lang=en
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://ship.purolator.com/my/register-stage-one?lang=en
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://ship.purolator.com/vision/en/login
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_377.3.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_295.3.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_372.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://t.virtualchatpurolator.com/#/Purolator-DEV
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://t.virtualchatpurolator.com/#/Purolator-DEV-FR
Source: chromecache_361.3.dr, chromecache_262.3.dr	String found in binary or memory: https://t.virtualchatpurolator.com/broker.js
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-advancestringindex
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-getsubstitution
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexp.prototype-
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexpexec
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.match
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.replace
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.search
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.split
Source: chromecache_377.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toindex
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_377.3.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_295.3.dr	String found in binary or memory: https://web.purolator.com/app/tracker/js/app.tracker-drupal.js?v=1729112303023
Source: chromecache_314.3.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_288.3.dr, chromecache_301.3.dr	String found in binary or memory: https://www.drupal.org/core/deprecation#javascript
Source: chromecache_240.3.dr, chromecache_324.3.dr	String found in binary or memory: https://www.drupal.org/licensing/faq
Source: chromecache_250.3.dr	String found in binary or memory: https://www.drupal.org/node/2815083
Source: chromecache_220.3.dr	String found in binary or memory: https://www.drupal.org/node/2940704
Source: chromecache_220.3.dr	String found in binary or memory: https://www.drupal.org/node/3154948.
Source: chromecache_220.3.dr	String found in binary or memory: https://www.drupal.org/project/drupal/issues/2973400
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_280.3.dr, chromecache_219.3.dr, chromecache_401.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_347.3.dr, chromecache_236.3.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_280.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_280.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_293.3.dr, chromecache_280.3.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_388.3.dr, chromecache_353.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=$
Source: chromecache_263.3.dr, chromecache_247.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_295.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WLL676
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_295.3.dr	String found in binary or memory: https://www.linkedin.com/company/8948?trk=tyah
Source: chromecache_372.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_377.3.dr	String found in binary or memory: https://www.npmjs.com/package/babel-polyfill)
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/billingcentre/obpp/portal/#/
Source: chromecache_235.3.dr	String found in binary or memory: https://www.purolator.com/en
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/en/articles/purolator-awarded-tapa-tsr-certification
Source: chromecache_318.3.dr	String found in binary or memory: https://www.purolator.com/en/business-solutions/technology-solutions/mobile-app-download
Source: chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/en/business-solutions/technology-solutions/track-manage-deliveries-receive
Source: chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/en/node/96
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/en/resources-support/how-ship#quick-start
Source: chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/en/shipping/tracker
Source: chromecache_318.3.dr	String found in binary or memory: https://www.purolator.com/en/support/faqs/receiving
Source: chromecache_318.3.dr	String found in binary or memory: https://www.purolator.com/en/support/faqs/shipping
Source: chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/fr/expedition/faire-le-suivi-dun-envoi
Source: chromecache_235.3.dr	String found in binary or memory: https://www.purolator.com/hostinfo
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/sites/default/files/2022-06/social-media-guidelines.pdf
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/sites/default/files/2024-05/annual-forced-labour-and-child-labour-report.p
Source: chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/sites/default/files/2024-06/photo-pod-sell-sheet.pdf?utm_source=newsletter
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolator.com/themes/custom/purolator_theme/logo-small.png
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolatorfreight.com/scripts/cgiip.exe/facts.htm?language=english
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolatorfreight.com/scripts/cgiip.exe/reftrace2.htm?seskey=&language=english&na
Source: chromecache_412.3.dr, chromecache_296.3.dr	String found in binary or memory: https://www.purolatorfreight.com/scripts/cgiip.exe/reftrace2.htm?seskey=&language=ENGLISH&nav=top
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolatorfreight.com/scripts/cgiip.exe/transittm.htm?seskey=&language=english&na
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.purolatorinternational.com/
Source: chromecache_295.3.dr	String found in binary or memory: https://www.twitter.com/PurolatorInc
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 60575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 60655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 60414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60530
Source: unknown	Network traffic detected: HTTP traffic on port 60219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 60528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60541
Source: unknown	Network traffic detected: HTTP traffic on port 60587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60540
Source: unknown	Network traffic detected: HTTP traffic on port 60541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60544
Source: unknown	Network traffic detected: HTTP traffic on port 60495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 60242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60317
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60558
Source: unknown	Network traffic detected: HTTP traffic on port 60368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 60643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 60310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 60278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60561
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60566
Source: unknown	Network traffic detected: HTTP traffic on port 60346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60508
Source: unknown	Network traffic detected: HTTP traffic on port 60725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60505
Source: unknown	Network traffic detected: HTTP traffic on port 60665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60504
Source: unknown	Network traffic detected: HTTP traffic on port 60256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60503
Source: unknown	Network traffic detected: HTTP traffic on port 60344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60500
Source: unknown	Network traffic detected: HTTP traffic on port 60577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60519
Source: unknown	Network traffic detected: HTTP traffic on port 60378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60510
Source: unknown	Network traffic detected: HTTP traffic on port 60291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60511
Source: unknown	Network traffic detected: HTTP traffic on port 60526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 60687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60520
Source: unknown	Network traffic detected: HTTP traffic on port 60300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60371
Source: unknown	Network traffic detected: HTTP traffic on port 60641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60391
Source: unknown	Network traffic detected: HTTP traffic on port 60675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60390
Source: unknown	Network traffic detected: HTTP traffic on port 60463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60386
Source: unknown	Network traffic detected: HTTP traffic on port 60514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60385
Source: unknown	Network traffic detected: HTTP traffic on port 60590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60383
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60382
Source: unknown	Network traffic detected: HTTP traffic on port 60348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60394
Source: unknown	Network traffic detected: HTTP traffic on port 60567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60577
Source: unknown	Network traffic detected: HTTP traffic on port 60524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60590
Source: unknown	Network traffic detected: HTTP traffic on port 60616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60586
Source: unknown	Network traffic detected: HTTP traffic on port 60453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60580
Source: unknown	Network traffic detected: HTTP traffic on port 60711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60588
Source: unknown	Network traffic detected: HTTP traffic on port 60441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60350
Source: unknown	Network traffic detected: HTTP traffic on port 60557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60591
Source: unknown	Network traffic detected: HTTP traffic on port 60288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60599
Source: unknown	Network traffic detected: HTTP traffic on port 60232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60370
Source: unknown	Network traffic detected: HTTP traffic on port 60209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60365
Source: unknown	Network traffic detected: HTTP traffic on port 60512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60364
Source: unknown	Network traffic detected: HTTP traffic on port 60673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60360
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60368
Source: unknown	Network traffic detected: HTTP traffic on port 60546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60661 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60295
Source: unknown	Network traffic detected: HTTP traffic on port 60536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60294
Source: unknown	Network traffic detected: HTTP traffic on port 60362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60658 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60708
Source: unknown	Network traffic detected: HTTP traffic on port 60411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60705
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60702
Source: unknown	Network traffic detected: HTTP traffic on port 60457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60700
Source: unknown	Network traffic detected: HTTP traffic on port 60445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60719
Source: unknown	Network traffic detected: HTTP traffic on port 60573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60718
Source: unknown	Network traffic detected: HTTP traffic on port 60281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60715
Source: unknown	Network traffic detected: HTTP traffic on port 60624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60728
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60725
Source: unknown	Network traffic detected: HTTP traffic on port 60388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60721
Source: unknown	Network traffic detected: HTTP traffic on port 60309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60656 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60411
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60650
Source: unknown	Network traffic detected: HTTP traffic on port 60517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60659
Source: unknown	Network traffic detected: HTTP traffic on port 60712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60658
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60657
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60656
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60413
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60654
Source: unknown	Network traffic detected: HTTP traffic on port 60484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60664
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60421
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60663
Source: unknown	Network traffic detected: HTTP traffic on port 60369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60662
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60661
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60428
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60667
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60666
Source: unknown	Network traffic detected: HTTP traffic on port 60231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60665
Source: unknown	Network traffic detected: HTTP traffic on port 60609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60430
Source: unknown	Network traffic detected: HTTP traffic on port 60586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60671
Source: unknown	Network traffic detected: HTTP traffic on port 60666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60670
Source: unknown	Network traffic detected: HTTP traffic on port 60691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60679
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60677
Source: unknown	Network traffic detected: HTTP traffic on port 60496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60676
Source: unknown	Network traffic detected: HTTP traffic on port 60610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60681
Source: unknown	Network traffic detected: HTTP traffic on port 60289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60680
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60209
Source: unknown	Network traffic detected: HTTP traffic on port 60459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60449
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60687
Source: unknown	Network traffic detected: HTTP traffic on port 60527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60618
Source: unknown	Network traffic detected: HTTP traffic on port 60688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60614
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60613
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60612
Source: unknown	Network traffic detected: HTTP traffic on port 60607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60611

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:60213 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:60525 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:60697 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@24/315@114/37

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2008,i,2931152776266479355,3246117985939233813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purolator.com/en/tracker?pin=335008262560"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2008,i,2931152776266479355,3246117985939233813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport LogoVmware24 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport VirtualMachine24 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport LogoVmware20 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport VirtualMachine16 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport VirtualMachine32 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport LogoVmware16 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport LogoVmware32 */
Source: chromecache_377.3.dr	Binary or memory string: /* unused harmony reexport VirtualMachine20 */

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/zone/	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/min-max/	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://tags.srv.stackadapt.com/events.js	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ixf3-api.bc0a.com	35.244.153.179	true	false	unknown
jsdelivr.map.fastly.net	151.101.65.229	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
js.zi-scripts.com	172.64.150.44	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
ws.zoominfo.com	104.16.118.43	true	false	unknown
s.amazon-adsystem.com	98.82.154.76	true	false	unknown
nova-collector-1192479543.us-east-1.elb.amazonaws.com	18.210.77.166	true	false	unknown
d2kupluu740cd3.cloudfront.net	13.227.219.96	true	false	unknown
d253r3uy4qzbcc.cloudfront.net	108.138.7.87	true	false	unknown
purolator.com	52.60.138.120	true	false	unknown
d1ykf07e75w7ss.cloudfront.net	108.138.6.136	true	false	unknown
stats.g.doubleclick.net	142.251.173.157	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
analytics-alv.google.com	216.239.34.181	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	unknown
cdn.bc0a.com	35.201.125.192	true	false	unknown
prod.virtualchatpurolator.com	172.67.7.123	true	false	unknown
dualstack.pinterest.map.fastly.net	151.101.0.84	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
td.doubleclick.net	216.58.206.66	true	false	unknown
ara.paa-reporting-advertising.amazon	18.245.46.13	true	false	unknown
tags.srv.stackadapt.com	18.158.246.206	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
ixfd-api.bc0a.com	unknown	unknown	false	unknown
ct.pinterest.com	unknown	unknown	false	unknown
100008210.collect.igodigital.com	unknown	unknown	false	unknown
marvel-b1-cdn.bc0a.com	unknown	unknown	false	unknown
web.purolator.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
c.amazon-adsystem.com	unknown	unknown	false	unknown
www.purolator.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
s.pinimg.com	unknown	unknown	false	unknown
analytics.tiktok.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
nova.collect.igodigital.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false	URL Reputation: safe	unknown
https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2023-08/x3_0.png?itok=eYiAfA7G	false		unknown
https://cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/jquery.validate.min.js	false		unknown
https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/modules/custom/purolator_widgets/img/liveChat-open.png	false		unknown
https://prod.virtualchatpurolator.com/broker.js	false		unknown
https://web.purolator.com/app/tracker/js/bootstrap-datepicker.min.js	false		unknown
https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-googleplay.png?itok=WiZy8Q41	false		unknown
https://www.facebook.com/tr/?id=728993374121108&ev=SubscribedButtonClick&dl=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560%26sdate%3D2024-10-29&rl=&if=false&ts=1730471443584&cd[buttonFeatures]=%7B%22classList%22%3A%22btn%20btn-outline-light%20btn-block%20tracker-search%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Track%20Now%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Track%20Now&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Track%20a%20Package%20or%20Shipment%20%7C%20Purolator%22%7D&cd[parameters]=%5B%5D&sw=1280&sh=1024&v=2.9.175&r=stable&ec=4&o=4126&fbp=fb.1.1730465877514.716407428808076443&cs_est=true&ler=empty&cdl=API_unavailable&it=1730465874864&coo=false&es=automatic&tm=3&rqm=GET	false		unknown
https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-appstore.png?itok=lSjNWKGF	false		unknown
https://cdn.bc0a.com/autopilot/f00000000094873/autopilot_sdk.js	false		unknown
https://tags.srv.stackadapt.com/events.js	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/Errors?code=	chromecache_377.3.dr	false		unknown
https://eshiponline.purolator.com/ShipOnline/SecurePages/Public/FormsLogin.aspx?lang=E	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
http://wonko.com/post/html-escaping)	chromecache_377.3.dr	false		unknown
https://eship.purolator.com/site/en/default.aspx	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/feross/buffer/pull/97	chromecache_377.3.dr	false		unknown
https://github.com/noureddinem	chromecache_377.3.dr	false		unknown
https://github.com/PolymerElements/iron-iconset-svg/pull/47	chromecache_377.3.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_347.3.dr, chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://cdn.jsdelivr.net/npm/es6-object-assign	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/ebraminio	chromecache_377.3.dr	false		unknown
https://github.com/jonashdown	chromecache_377.3.dr	false		unknown
https://github.com/ryanhart2	chromecache_377.3.dr	false		unknown
https://px.ads.linkedin.com/collect?	chromecache_280.3.dr	false	URL Reputation: safe	unknown
http://www.ecma-international.org/ecma-262/7.0/#sec-function.prototype.apply).	chromecache_377.3.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_377.3.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_239.3.dr	false		unknown
https://www.purolator.com/en/articles/purolator-awarded-tapa-tsr-certification	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/Manfre98	chromecache_377.3.dr	false		unknown
https://github.com/vnathalye	chromecache_377.3.dr	false		unknown
https://github.com/le0tan	chromecache_377.3.dr	false		unknown
https://goo.gl/t5IS6M).	chromecache_377.3.dr	false		unknown
https://github.com/narainsagar	chromecache_377.3.dr	false		unknown
https://prod.virtualchatpurolator.com/#/Purolator-PROD-FR	chromecache_361.3.dr, chromecache_262.3.dr	false		unknown
https://support.google.com/maps/answer/3092445	chromecache_347.3.dr, chromecache_236.3.dr	false		unknown
http://blogs.msdn.com/b/ieinternals/archive/2010/05/13/xdomainrequest-restrictions-limitations-and-w	chromecache_377.3.dr	false		unknown
https://github.com/ElFadiliY	chromecache_377.3.dr	false		unknown
https://github.com/IBM/carbon-components-react/issues/1392	chromecache_377.3.dr	false		unknown
https://github.com/jbleduigou	chromecache_377.3.dr	false		unknown
https://mdn.io/clearTimeout).	chromecache_377.3.dr	false		unknown
https://github.com/muminoff	chromecache_377.3.dr	false		unknown
https://openjsf.org/	chromecache_377.3.dr	false	URL Reputation: safe	unknown
http://www.amazon.com/b/?&node=7253015011.	chromecache_260.3.dr, chromecache_343.3.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://github.com/jatinag22	chromecache_377.3.dr	false		unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_347.3.dr, chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_347.3.dr, chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://github.com/indutny/bn.js/issues/211	chromecache_377.3.dr	false		unknown
https://github.com/hehachris	chromecache_377.3.dr	false		unknown
https://meiert.com/en/blog/boolean-attributes-of-html/	chromecache_377.3.dr	false		unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_377.3.dr	false	URL Reputation: safe	unknown
https://github.com/jarcoal	chromecache_377.3.dr	false		unknown
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_377.3.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=90	chromecache_377.3.dr	false		unknown
https://github.com/andela-batolagbe	chromecache_377.3.dr	false		unknown
https://www.purolator.com/sites/default/files/2024-06/photo-pod-sell-sheet.pdf?utm_source=newsletter	chromecache_295.3.dr	false		unknown
https://billingcentre.purolator.com/billingcentre/obpp/portal/#/	chromecache_295.3.dr	false		unknown
https://github.com/bleadof	chromecache_377.3.dr	false		unknown
https://fb.me/react-async-component-lifecycle-hooks	chromecache_377.3.dr	false		unknown
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)	chromecache_377.3.dr	false		unknown
https://www.purolatorinternational.com/	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/endsWith	chromecache_377.3.dr	false		unknown
http://narwhaljs.org)	chromecache_377.3.dr	false		unknown
https://github.com/ReactTraining/history/pull/289	chromecache_377.3.dr	false		unknown
http://tools.ietf.org/html/rfc3492#section-3.4	chromecache_377.3.dr	false		unknown
https://github.com/tc39/proposal-observable	chromecache_377.3.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_377.3.dr	false	URL Reputation: safe	unknown
http://ecma-international.org/ecma-262/7.0/#sec-ecmascript-function-objects-call-thisargument-argume	chromecache_377.3.dr	false		unknown
https://code.google.com/p/chromium/issues/detail?id=25916	chromecache_377.3.dr	false		unknown
https://www.purolatorfreight.com/scripts/cgiip.exe/facts.htm?language=english	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/suvash	chromecache_377.3.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://github.com/andrewhood125	chromecache_377.3.dr	false		unknown
http://new.gramota.ru/spravka/rules/139-prop	chromecache_377.3.dr	false		unknown
https://github.com/ShahramMebashar	chromecache_377.3.dr	false		unknown
https://prod.virtualchatpurolator.com/#/Purolator-PROD	chromecache_361.3.dr, chromecache_262.3.dr	false		unknown
http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/	chromecache_377.3.dr	false		unknown
https://github.com/skakri	chromecache_377.3.dr	false		unknown
https://github.com/jalex79	chromecache_377.3.dr	false		unknown
https://github.com/kraz	chromecache_377.3.dr	false		unknown
https://github.com/sampathsris	chromecache_377.3.dr	false		unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_377.3.dr	false	URL Reputation: safe	unknown
https://ship.purolator.com/index.html?lang=en	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/ulmus	chromecache_377.3.dr	false		unknown
https://purolatorportal.cpg-gpc.ca/supplier	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/Modernizr/Modernizr/blob/master/feature-detects/history.js	chromecache_377.3.dr	false		unknown
https://npms.io/search?q=ponyfill.	chromecache_377.3.dr	false	URL Reputation: safe	unknown
https://github.com/orif-jr	chromecache_377.3.dr	false		unknown
https://github.com/facebook/react-native/pull/1632	chromecache_377.3.dr	false		unknown
https://www.purolator.com/billingcentre/obpp/portal/#/	chromecache_235.3.dr, chromecache_295.3.dr	false		unknown
https://github.com/whatwg/html/pull/907/files#r73505877	chromecache_377.3.dr	false		unknown
https://code.google.com/p/v8/issues/detail?id=687	chromecache_377.3.dr	false		unknown
http://stackoverflow.com/a/26603875	chromecache_377.3.dr	false		unknown
http://stackoverflow.com/questions/1641507/detect-browser-support-for-cross-domain-xmlhttprequests	chromecache_377.3.dr	false		unknown
http://peter.michaux.ca/articles/lazy-function-definition-pattern)	chromecache_377.3.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_236.3.dr	false	URL Reputation: safe	unknown
https://www.drupal.org/core/deprecation#javascript	chromecache_288.3.dr, chromecache_301.3.dr	false		unknown
https://github.com/sedovsek	chromecache_377.3.dr	false		unknown
https://github.com/k2s	chromecache_377.3.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_347.3.dr, chromecache_236.3.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
108.138.7.113	unknown	United States	16509	AMAZON-02US	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
18.210.77.166	nova-collector-1192479543.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
35.201.125.192	cdn.bc0a.com	United States	15169	GOOGLEUS	false
142.251.173.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
174.129.237.167	unknown	United States	14618	AMAZON-AESUS	false
52.60.138.120	purolator.com	United States	16509	AMAZON-02US	false
98.82.158.241	unknown	United States	11351	TWC-11351-NORTHEASTUS	false
216.239.32.181	unknown	United States	15169	GOOGLEUS	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
172.67.7.123	prod.virtualchatpurolator.com	United States	13335	CLOUDFLARENETUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
108.138.6.136	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
52.2.40.11	unknown	United States	14618	AMAZON-AESUS	false
35.244.153.179	ixf3-api.bc0a.com	United States	15169	GOOGLEUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
151.101.192.84	unknown	United States	54113	FASTLYUS	false
18.245.194.122	unknown	United States	16509	AMAZON-02US	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
98.82.154.76	s.amazon-adsystem.com	United States	11351	TWC-11351-NORTHEASTUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
108.138.7.87	d253r3uy4qzbcc.cloudfront.net	United States	16509	AMAZON-02US	false
13.224.245.11	unknown	United States	16509	AMAZON-02US	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
216.58.206.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.158.246.206	tags.srv.stackadapt.com	United States	16509	AMAZON-02US	false
13.227.219.96	d2kupluu740cd3.cloudfront.net	United States	16509	AMAZON-02US	false
35.157.12.239	unknown	United States	16509	AMAZON-02US	false
172.64.150.44	js.zi-scripts.com	United States	13335	CLOUDFLARENETUS	false
18.245.46.13	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.7
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546706
Start date and time:	2024-11-01 13:56:31 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://purolator.com/en/tracker?pin=335008262560
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@24/315@114/37

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.186.142, 66.102.1.84, 34.104.35.123, 104.19.191.24, 104.19.208.24, 142.250.181.232, 2.18.64.220, 2.18.64.212, 216.58.212.168, 142.250.184.200, 2.18.64.15, 2.18.64.26, 2.18.64.21, 13.107.42.14, 4.175.87.197, 142.250.185.170, 142.250.186.42, 142.250.186.170, 172.217.18.10, 142.250.186.74, 142.250.185.234, 142.250.186.106, 172.217.16.138, 142.250.186.138, 142.250.185.74, 142.250.185.202, 216.58.212.138, 142.250.74.202, 142.250.181.234, 142.250.185.138, 142.250.184.202, 142.250.185.106, 216.58.212.170, 172.217.23.106, 216.58.206.74, 216.58.206.42, 142.250.184.234, 172.217.16.202, 88.221.110.91, 2.16.100.168, 104.18.41.41, 172.64.146.215, 40.69.42.241, 13.85.23.206, 142.250.184.195
Excluded domains from analysis (whitelisted): api.pinterest.com.eip.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, time.windows.com, a767.dspw65.akamai.net, l-0005.l-msedge.net, maps.googleapis.com, clients2.google.com, www.googletagmanager.com, 2-01-37d2-0018.cdx.cedexis.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, analytics.tiktok.com.edgekey.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, e35058.a.akamaiedge.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, clients.l.google.com, www.purolator.com.cdn.cloudflare.net, a1916.dscg2
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://purolator.com/en/tracker?pin=335008262560

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3472
Entropy (8bit):	4.818234417311657
Encrypted:	false
SSDEEP:	48:ArVEREkrkqMJYsaWyLOdY/cQ+K0vRVH5ppyWCLO/pAJ0yWusiAFiEMI5Q1oXXeed:Mni+HVHfDBsmi/+4kR8UllmJkO/i
MD5:	F1218028346840B5322DA2B3F70EE76E
SHA1:	59C20695F5D28E99932C3DC5637197A70AEF9ED3
SHA-256:	6A847DA5B0D8599A75D638ABA6CBFE24CEF3F0EB2B6D09C5FA4BA25DD71486FE
SHA-512:	8F19B84EB189FE6418F414B30C7A8EF60CB9125BDB2F213FC74E3D07C8DD2DA5F4693C2AAC53EB2C86D5C8EE0D645823423694EB2145F27E070F05E0CF8D63FC
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Helper js for displaying header nav small logo.. */.(function ($, Drupal) {. var body = $('body');. var header_sticky = $('.header-bottom');. var header_init_pos = header_sticky.offset().top;.. function resizeAndScroll(){. $(window).resize();. $(window).scroll();. }.. function mobileAlerts(){. // On mobile all alerts go to the #main-content container. let alerts = $('.sitewide-alert').detach();. alerts.prependTo('#main-content');. $('header.page__header').css('margin-top', "2em");. }.. // Helper function to apply sticky class when necessary.. function applyStickyClass(el){. let init_top = header_init_pos - $(window).scrollTop();. let is_stuck = (el.is(':visible') && init_top <= 0 ) ? true : false;. body.toggleClass('sticky', is_stuck);. el.toggleClass('is-sticky done-scroll', is_stuck);. el.find('.logo-small').toggleClass('sticky d-block', is_stuck);.. // Sitewide alert. if ($('.sitewide-alert .js-dismiss-button').length >

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 34, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3747
Entropy (8bit):	7.9136997975209145
Encrypted:	false
SSDEEP:	48:TocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODl1f1uQH3HkrH:TZ/I09Da01l+gmkyTt6Hk8nTlB1dKfJ
MD5:	AEC31A713847C2DD8B14CEF426BC7345
SHA1:	2C802529EF86D55BE11B3F3C9C90BB526BB2F5CD
SHA-256:	9A9967666B7989EB7C71F8DB7304D483AC1D4A94269C1A3988056A050B903E7D
SHA-512:	AEEED161D21B19D24FD7BEC8DA28CCD85F940A94A0B00A085E582ABE822E4C0909668C569221320C4B77D2F9771B4DA5CA14B2C61BC67E3D94A1F22319594652
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/img/tracker-icon.png
Preview:	.PNG........IHDR... ...".....>.......pHYs...%...%.IR$....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=3260330%2C4433876&time=1730465872897&url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	691
Entropy (8bit):	4.883897739925605
Encrypted:	false
SSDEEP:	12:UJahuDmIerkZRMoNWdnYbZbCuvEMhmYHpP2/SkmvNXmirN5fgv:hh7gcAYnYNuu8jCmmZlq
MD5:	C9D3346CA20F2076F07F97C755A39833
SHA1:	47C99924D38ECA0F69C110FE6154E17BD575D366
SHA-256:	F47D56F4E42A0FD576EE274454E24C085010B464B849CABE80041C88AAF45363
SHA-512:	1070D5D68F6932BB2A613E3298D6845D8E5F77BDD435990496C1CD8B82D8CDCA539C49F957A14370727BD9D26BC363B29E65587334010CD2046FBAB95D706CE4
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Parse inline JSON and initialize the drupalSettings global object.. /..(function () {. // Use direct child elements to harden against XSS exploits when CSP is on.. const settingsElement = document.querySelector(. 'head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]',. );.. /. Variable generated by Drupal with all the configuration created from PHP.. . @global. . @type {object}. */. window.drupalSettings = {};.. if (settingsElement !== null) {. window.drupalSettings = JSON.parse(settingsElement.textContent);. }.})();.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	6.832130927024915
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfu:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenm
MD5:	8F379B3BCFD88DBA5D4528E6643F4A3E
SHA1:	2B769990E64D5946586489B56117698D79BE50D0
SHA-256:	F94FA06FA426C608A0CB184782CB19C91C0C9B3B71A3D28159F149DD4EEB1C89
SHA-512:	B738968E9258416B7F9EA0B6CA0CB693F843ACAC0E00F136AAE8A5507487D9F2D176DE15D28DE4CF7834C0CC9A78B308A6ABDFBC740E911E30DBA37AFBD5C878
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..8....Q{i?.F.$....R

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5369), with no line terminators
Category:	dropped
Size (bytes):	5369
Entropy (8bit):	5.064819709656671
Encrypted:	false
SSDEEP:	96:W0xrc6Raun/a/PEqKmGiVUC17skJ3KuwSmJ6JTHOHQWOH6Xt8f:W0P/a/PEhi17JC6JTHOHQWOH6Xmf
MD5:	D4CFF69B10171666B090393AEBD8EAA3
SHA1:	8988C2A1A7E12A5AA7B481297639E1FD48376547
SHA-256:	1E1EEDCC2E36825FE33D92B9F481A7926E7C1D116850C374103B560CD0CB1BA5
SHA-512:	89EC48A47195F0E7EDEF3F29F431A41196F8DF2DFF84FBBEA33DC508FBB9FF984070F08CB2854E50AD25BB224969F0EE01E1C02FAA7F6B58BE0AD2487F1A83E8
Malicious:	false
Reputation:	low
Preview:	!function(t){var e={};function o(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=t,o.c=e,o.d=function(t,e,a){o.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var a=Object.create(null);if(o.r(a),Object.defineProperty(a,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)o.d(a,n,function(e){return t[e]}.bind(null,n));return a},o.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(e,"a",e),e},o.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},o.p="/",o(o.s=0)}([function(t,e,o){o(1),t.exports=o(2)},function(module,exports){!function($,Drupal,once){

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	5.100106001936572
Encrypted:	false
SSDEEP:	3:WZoS+NGthrNQDJCFt+KvFAW6pAUp0mo1PWz7ikrncqCR:WZoSy6NNQyt+uFAW6pAUp0fymkI5R
MD5:	07CAFCE1E0E02C2436E021CE6148F47B
SHA1:	6BCBA6EA668B97240415851C8303836B79422C77
SHA-256:	5C1A90D09CBE16A3890852014CDE90099AE6B4B2D3853C79D7DFB91315C979D2
SHA-512:	AE0B08496A6EBCF1318C5D85D049CA81B4F3D972685722B8A547FE53BB09049D9E1058E69DEB0A7E2B33A6C41EF42123023556EC6F177819E4644779A352002E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwlVTvwIB8Pp8RIFDZFhlU4SBQ01hlQcEhAJmolYVES91SsSBQ2RYZVOEjMJ6r3sO9GtS0kSBQ050dBsEgUNHs3xhxIFDaFfeN0SBQ2-LVTKEgUNEsJhSRIFDbRgN1w=?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw01hlQcGgAKCQoHDZFhlU4aAAo+CgcNOdHQbBoACgcNHs3xhxoACgcNoV943RoACgsNvi1UyhoECCMYAQoLDRLCYUkaBAgjGAEKBw20YDdcGgA=

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	536
Entropy (8bit):	4.688885430564937
Encrypted:	false
SSDEEP:	12:2BeEEc+wrnVAJNqcRpgdHLAyv/mi3iO+KX7ht:2VEWqJYgpnyHmdOr7
MD5:	06EEFF75AD791A5D51A5953476A67F1F
SHA1:	22FDD92AEA37F29196E3DF46400FDD613E4E411E
SHA-256:	6A43C82F917ACA0A30127B68932598E3F4E0E29350B448BDED42097288C0DBD3
SHA-512:	52A02911CA2DAD1C511DF1DB65B544C6271EE8F9CA571D4191A47DCAD51E0D2305908A20284BC661C820A1D3972297544808ECC25E371C92D7F6AC576AA5BC4F
Malicious:	false
Reputation:	low
Preview:	(function (Drupal) {. /*. Command to attach data using jQuery's data API.. . @param {Drupal.Ajax} [ajax]. * {@link Drupal.Ajax} object created by {@link Drupal.ajax}.. * @param {object} response. * The response from the Ajax request.. * @param {string} response.event_name. * The event name. * @param {object} response.data. * The value of the event.. */. Drupal.AjaxCommands.prototype.gtagEvent = function (ajax, response) {. gtag('event', response.event_name, response.data);. };.})(Drupal);.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10106)
Category:	downloaded
Size (bytes):	273535
Entropy (8bit):	5.409294334917848
Encrypted:	false
SSDEEP:	6144:Y8S7cwziGx4WNgYCsGsRtcVFwE8AGknurzbprox/JMtMPtshK:Y8S7cwziGxmYAVFwE8ADnurzbprox/Jz
MD5:	C80C822A0297DD817361DB1ABE7EEDBE
SHA1:	11D77914252B4A43A0B344B1079B8B7E71B1EF09
SHA-256:	87969313EC0E62CA6DD87F362F5D80BE5D5850DF5CC92E40AEA16D405A80B9B0
SHA-512:	18C05753143D5770273BE0A19BFCCE79A822E363743165C7A2789185AED54678D4C289DA86B7A12857DD65ACA403783299A060CE84E9C4876C47414A8B5A3290
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Nia,Mia,Pia,Via,bja,cja,fja,Er,gja,Fr,hja,Gr,ija,Hr,Kr,Mr,kja,mja,lja,oja,pja,rja,us,tja,vja,wja,Fs,Aja,lt,Jja,Lja,Kja,Pja,Qja,Tja,Uja,Vja,Qt,Wt,$ja,Xt,$t,aka,au,bka,du,hka,pu,lka,qu,mka,nka,pka,rka,qka,tka,ska,oka,uka,vka,vu,wka,cla,gla,ila,kla,yla,Xla,$la,dma,ema,mma,nma,oma,pma,tma,rma,mx,nx,vma,wma,xma,yma,Ama,fw,gw,Bma,hla,ew,hw,Sia,Tia,lla,Uia,Zia,aja,Gma,Hma,Ima,Jma,Kma,ux,Wv,Nma,Oma,Pma,Rma,Ela,Wla,Pla,xja,zs;.Nia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Qg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Mia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Mia(f,a,d+1));e&&b.push(e);return b};Mia=function(a,b,c){a instanceof _.hh&&(a=a.Eg(b,+c));return Array.isArray(a)?Nia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.kc?_.rc(a):a};_.Nq=function(a){return!!a.handled};._.Oia=function(

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	66709
Entropy (8bit):	4.653529987070747
Encrypted:	false
SSDEEP:	1536:8BzbFJ1Gmh7ZOLXI52tSgtPJvLh+vBL+FEXA049ZkR/06V5O:oAmhUXtF9SDO
MD5:	11B89F4EFE1E6B6E2D5B8BE53C675AD1
SHA1:	310C72E5F32EB8A8DC533FB7CE7ECBA7E4536B7D
SHA-256:	580FC30EFB83CF7619CE94A8602EF1F031F136E993BC7C7AC312B56668C69BB7
SHA-512:	F8512DF19EF7BB33A4AA96ABB2DDCFB652E9B6D8FCF89635C8A6DCECDAE236519FDF8C53479027F6977B311EC7528B82B6895DCA8972CC636132EEC5ED2F6EFD
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Provides Ajax page updating via jQuery $.ajax.. . Ajax is a method of making a request via JavaScript while viewing an HTML. * page. The request returns an array of commands encoded in JSON, which is. * then executed to make any changes that are necessary to the page.. . Drupal uses this file to enhance form elements with `#ajax['url']` and. * `#ajax['wrapper']` properties. If set, this file will automatically be. * included to provide Ajax capabilities.. /..(function (. $,. window,. Drupal,. drupalSettings,. loadjs,. { isFocusable, tabbable },.) {. /. Attaches the Ajax behavior to each Ajax form element.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Initialize all {@link Drupal.Ajax} objects declared in. * `drupalSettings.ajax` or initialize {@link Drupal.Ajax} objects from. * DOM elements having the `use-ajax-submit` or `use-ajax` css class.. * @prop {Drupal~behaviorDetach} detach. * During `u

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.purolator.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3472
Entropy (8bit):	4.818234417311657
Encrypted:	false
SSDEEP:	48:ArVEREkrkqMJYsaWyLOdY/cQ+K0vRVH5ppyWCLO/pAJ0yWusiAFiEMI5Q1oXXeed:Mni+HVHfDBsmi/+4kR8UllmJkO/i
MD5:	F1218028346840B5322DA2B3F70EE76E
SHA1:	59C20695F5D28E99932C3DC5637197A70AEF9ED3
SHA-256:	6A847DA5B0D8599A75D638ABA6CBFE24CEF3F0EB2B6D09C5FA4BA25DD71486FE
SHA-512:	8F19B84EB189FE6418F414B30C7A8EF60CB9125BDB2F213FC74E3D07C8DD2DA5F4693C2AAC53EB2C86D5C8EE0D645823423694EB2145F27E070F05E0CF8D63FC
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/custom/purolator_components/js/sticky_header.js?v=2
Preview:	/*. @file. * Helper js for displaying header nav small logo.. */.(function ($, Drupal) {. var body = $('body');. var header_sticky = $('.header-bottom');. var header_init_pos = header_sticky.offset().top;.. function resizeAndScroll(){. $(window).resize();. $(window).scroll();. }.. function mobileAlerts(){. // On mobile all alerts go to the #main-content container. let alerts = $('.sitewide-alert').detach();. alerts.prependTo('#main-content');. $('header.page__header').css('margin-top', "2em");. }.. // Helper function to apply sticky class when necessary.. function applyStickyClass(el){. let init_top = header_init_pos - $(window).scrollTop();. let is_stuck = (el.is(':visible') && init_top <= 0 ) ? true : false;. body.toggleClass('sticky', is_stuck);. el.toggleClass('is-sticky done-scroll', is_stuck);. el.find('.logo-small').toggleClass('sticky d-block', is_stuck);.. // Sitewide alert. if ($('.sitewide-alert .js-dismiss-button').length >

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23122)
Category:	dropped
Size (bytes):	23261
Entropy (8bit):	5.227722635338554
Encrypted:	false
SSDEEP:	384:QorHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:eWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	93C1DD8416AC2AF1850652D5B620A142
SHA1:	6A76E4C7DB479053350580469AA010FEBFDCACD0
SHA-256:	17A879E50C3AB3078AFADED288E257FB66E94806B76FF7E796B54226F9848F50
SHA-512:	3BF9D44C5E66745921128407167F4DE709A06325B7DB724EEAFF24AFA96D4912AB899C93AFFF38D7BB5A55679A6D54B888E346936578E38403D0FD9CC21B9392
Malicious:	false
Reputation:	low
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017. https://jqueryvalidation.org/. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.sub

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4103), with no line terminators
Category:	downloaded
Size (bytes):	4103
Entropy (8bit):	5.573234278412048
Encrypted:	false
SSDEEP:	96:/2XjHtorvlP5rJ02moGkUtS6NYVbxb0wCp9s2ALwZxa:eJoTlPHfmookbjCpi4Zs
MD5:	16D5D552603D86726AE439FC61299D42
SHA1:	42E252A7AF04292577789C2DF07D88EF749A2B4C
SHA-256:	9CA07DF45944B8440AE6241E4A017DB2B6E4600E5F647D3180C96877198C3552
SHA-512:	F26A316E1D94DE19317113B75E1292AB1410D471E5F68BB24F93485F550B486AE6CB7EF9AF0B09F2A5AD4B3B57217A3A726BDA4265B8E0B22CF1E32296ACB2CD
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A7JYkbIvWKmS8mWYjXO12SIIsfPdI7twY91Y3LWOV/YbZmN1ZhYv8O+Zs6/IPCfBE99aV9tIC8sWZSCN09vf7gkAAACWey

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (23122)
Category:	downloaded
Size (bytes):	23261
Entropy (8bit):	5.227722635338554
Encrypted:	false
SSDEEP:	384:QorHpFSnWB6/tX2lH1dkMiYnFpg54Lrf7m9SNAc0Eny+RWuK7NeBMwV/vtrx+OLg:eWB6/8lH1dkMioFpg54n7mcQEny+NLx+
MD5:	93C1DD8416AC2AF1850652D5B620A142
SHA1:	6A76E4C7DB479053350580469AA010FEBFDCACD0
SHA-256:	17A879E50C3AB3078AFADED288E257FB66E94806B76FF7E796B54226F9848F50
SHA-512:	3BF9D44C5E66745921128407167F4DE709A06325B7DB724EEAFF24AFA96D4912AB899C93AFFF38D7BB5A55679A6D54B888E346936578E38403D0FD9CC21B9392
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery-validation@1.17.0/dist/jquery.validate.min.js
Preview:	/! jQuery Validation Plugin - v1.17.0 - 7/29/2017. https://jqueryvalidation.org/. * Copyright (c) 2017 J.rn Zaefferer; Licensed MIT */.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.on("click.validate",":submit",function(b){c.submitButton=b.currentTarget,a(this).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(this).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.on("submit.validate",function(b){function d(){var d,e;return c.submitButton&&(c.settings.submitHandler\|\|c.formSubmitted)&&(d=a("<input type='hidden'/>").attr("name",c.sub

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4103), with no line terminators
Category:	dropped
Size (bytes):	4103
Entropy (8bit):	5.573234278412048
Encrypted:	false
SSDEEP:	96:/2XjHtorvlP5rJ02moGkUtS6NYVbxb0wCp9s2ALwZxa:eJoTlPHfmookbjCpi4Zs
MD5:	16D5D552603D86726AE439FC61299D42
SHA1:	42E252A7AF04292577789C2DF07D88EF749A2B4C
SHA-256:	9CA07DF45944B8440AE6241E4A017DB2B6E4600E5F647D3180C96877198C3552
SHA-512:	F26A316E1D94DE19317113B75E1292AB1410D471E5F68BB24F93485F550B486AE6CB7EF9AF0B09F2A5AD4B3B57217A3A726BDA4265B8E0B22CF1E32296ACB2CD
Malicious:	false
Reputation:	low
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A7JYkbIvWKmS8mWYjXO12SIIsfPdI7twY91Y3LWOV/YbZmN1ZhYv8O+Zs6/IPCfBE99aV9tIC8sWZSCN09vf7gkAAACWey

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.6462918244996687
Encrypted:	false
SSDEEP:	96:jYWt6KTmkw7jUUUUUUUURhPhH7snMnEADbvG:jYM6Om9HUUUUUUUid7snMB/u
MD5:	BD708888B9EEC84930DF12949DE61F20
SHA1:	9D3B844FCC89F0324717AC6835DB10A09ED9E0D2
SHA-256:	90683685200A4B263107A7C3E3EB3FC80EEC7C8363521C2C71FBE888C8F749AB
SHA-512:	079D6656D3E1B0CD67CA2F4B7F33764E52E5D187EFEE9DC1B09CC6CB6AC90C9A6E811A6A44FE47185143B87375874562089A76F8B6530865DDF65834B6197D7B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9500), with no line terminators
Category:	dropped
Size (bytes):	9500
Entropy (8bit):	5.361838920270885
Encrypted:	false
SSDEEP:	192:j85B3yJdCE9r1dPZiDVGTtxRNs9lWzCWDFELiIh77fL4KL4vTfNhB:jawdC2BdPeOUDWzCOFELiIh77UzbVhB
MD5:	B2877DA906A3216C4F3FC4030B205E54
SHA1:	F7A612259BB345C70A1CAC073527E39DD5D8A0B7
SHA-256:	E779904E434D50E426E79DFAC680CDB8A04564E67121C257974278A02979E407
SHA-512:	428880BD5D5F63AF2E6A9354A6A500249E2A9EC96E5D3B995AEB9A467DBC075B255ACFFDB48A1A265273CFDFD25EBAB308D3B765BCCAD1C8BFF508947C19B866
Malicious:	false
Reputation:	low
Preview:	if(!window.zitag){window.zitag={}}window.ZILogs={ziScript:{info:"",err:"",scriptsLoaded:[]},chat:{},ws:{},sch:{},fc:{}};window.zitag.SCHEDULE_BACKEND_URL=window.ZITagEnv==="dev"?"https://schedule-staging.zoominfo.com/zischedule.js":"https://schedule.zoominfo.com/zischedule.js";window.zitag.FORMCOMPLETE_BACKEND_URL=window.ZITagEnv==="dev"?"https://ws-assets-staging.zoominfo.com/formcomplete.js":"https://ws-assets.zoominfo.com/formcomplete.js";window.zitag.ZI_TAG_BACKEND_URL=window.ZITagEnv==="dev"?"https://js-staging.zi-scripts.com/unified/v1/master/":"https://js.zi-scripts.com/unified/v1/master/";window.zitag.ZI_WS_BACKEND_URL=window.ZITagEnv==="dev"?"https://wss.zoominfo.com/pixel/":"https://ws.zoominfo.com/pixel/";window.zitag.isScheduleScriptAlreadyLoaded=()=>{if(window.zischedule)return true;else return false};window.zitag.isChatScriptAlreadyLoaded=()=>{if(window.insentCompanyDomain&&window.insentProjectName&&window.insentProjectKey)return true;else return false};window.zitag.isFor

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (591)
Category:	dropped
Size (bytes):	592
Entropy (8bit):	4.796083480550535
Encrypted:	false
SSDEEP:	12:5mN/DFelH/O9ZF6/H/6/D+3GQR4ng2RW3LtfJzI5MIIvJuT:+8lHG9bIfy+3GQR4dRWb+zT
MD5:	350ADDF379339FB97F1BEF4F8CD83896
SHA1:	F5EE004A6376F37665783FAE10089C6A116C12C0
SHA-256:	701EA6DCFD26B2D61367AEAE7C618FFEAB6E2FF8E6B571907BCB9E7A929EAC9C
SHA-512:	00C8826EEE1917D15D60DBC829407160652C14878AC34DBD85DEE7B9902FACEF38F3B1D88C2301AD3694456AA6E222D44FADD5CB2173392F7D695CA0C8E67D22
Malicious:	false
Reputation:	low
Preview:	!function(i){"use strict";function o(t,n,a){return i.chain(t,function(e){i.isElm(e)&&i.each(i.toArray(n),function(t){var n,r="data-"+t;i.hasAttr(e,r)&&(n=i.attr(e,r),i.attr(e,t,n),a&&i.removeAttr(e,r))})})}function e(t,a,u,c){i.isUnd(c)&&(c=!0);return i.chain(t,function(t){var n,r,e;i.isElm(t)&&(n=t.parentNode,r=i.equal(n,"picture"),e=null,c?e=r?n:t:r&&(e=n),i.isElm(e)&&(e=e.getElementsByTagName("source"),a=a\|\|(r?"srcset":"src"),e.length&&o(e,a,u)))})}i.mapAttr=o,i.fn.mapAttr=function(t,n){return o(this,t,n)},i.mapSource=e,i.fn.mapSource=function(t,n,r){return e(this,t,n,r)}}(dBlazy);.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	downloaded
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/bootstrap.min.js?v=10.3.1
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-65SMPXQ279&gacid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=149076324
Preview:	<html></html>

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (21436)
Category:	downloaded
Size (bytes):	22248
Entropy (8bit):	5.327189149879399
Encrypted:	false
SSDEEP:	384:XWNDWhDNyyu0sfL7mQYDbJF3C95D/EeD0ere0t4zveHcCMdNVb:XWNDW9NUfmQxrAeYerehzveHcCcj
MD5:	4ADA8E387939D0F7BC421B6D503C5B79
SHA1:	3F0C16808A4D26258969066E87E65FA271087144
SHA-256:	718D6DC7A0CC2E196558927E94A18A74D6F9BE529C735360C6E96690E9FCF938
SHA-512:	E752642276F9A7010964D8EE2F8ED74F292095053094F72C662AC41CA699642AB03F0EDA2BB407E34BF602377A74C91E5BB1438E611CD218060AC1AB13B74DAD
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/events.js
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "UEz8gC6aLzZ0XjEClX7upqXQNhavB7_6utODP1m4ZqY". . var userIdCookieValue = "s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE". var userIdV2CookieValue = "s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc". var userIdV3CookieValue = "s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000. var accountID = ""..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,total_secs_passed:0,hidden:!1,host:encodeURIComponent(window.locat

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3198
Entropy (8bit):	4.616720561892622
Encrypted:	false
SSDEEP:	48:lILSFWPW/1VAzIaThbL3xzzyf3pkNTpInJPPpm:CLSFWO/1VA8aNfB/yiWJPPpm
MD5:	FF6E3B56731660DEFE101E73763F20E8
SHA1:	D60EC1F3C61E309F223E1784C1F482C7731C8B01
SHA-256:	45EA6360DB2DA21687D298324747C537D8DD63E467B6787EC248C755C89752C7
SHA-512:	0188A32F367DBD5313FB4BE79460DE46767D765D092A520EB64C852F1F01C75C4F7D7C6FD33F49A0B8CC8A082DF153448BA5E1A1A40DE7D86055202389ABB572
Malicious:	false
Reputation:	low
Preview:	(function($) {. 'use strict';. Drupal.behaviors.search_header = {. attach: function (context, settings) {. let searchHeaderForm = $('#general-search-header-form');. let searchFormHandler = $('.block--header-search-block .header-search-trigger');. let menuItem = $('.header-bottom .nav .nav-item .nav-link');.. // Toggle visibility of header search block. function toggleSearchBlock(e) {. searchHeaderForm.toggleClass('open show');. searchFormHandler.find('span').toggleClass('d-none');. searchFormHandler.attr('aria-expanded', function(index, attr){. return attr == 'false' ? 'true' : 'false';. });. searchFormHandler.attr('aria-label', function(index, attr){. return attr.indexOf('Open') != -1 ? attr.replace('Open', 'Close') : attr.replace('Close', 'Open');. });. }.. // Get click event outside search toggler or header search block.. function getOutsideClick(evt) {. if (searchHeaderFo

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	4.832863815501617
Encrypted:	false
SSDEEP:	24:4oZlawomRVAtxGl6DgLuNJGIHGVwX931jxKaljxsq1t:4oZIwr3AK6DgsJ7xlll9sct
MD5:	6739DD9D2E1C3205A4DE81E528AF3EE8
SHA1:	E4D571F4F9EC566A8385DB66F21EC6E35242C11D
SHA-256:	923935D813106205B31D3953B21E34A007F32758EC0C3D2BA6DD3DDA1F8CF6E9
SHA-512:	B868AAD5359D537A7C4C372D413CA221642D01BB50F52979B2C93DD788D917F895DE6C10125E8185FEE29364ADC2032B758A4AF1D8C4A6B92FC3825221F4ECD3
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/drupal.init.js?v=10.3.1
Preview:	// Allow other JavaScript libraries to use $..if (window.jQuery) {. jQuery.noConflict();.}..// Class indicating that JS is enabled; used for styling purpose..document.documentElement.className += ' js';..// JavaScript should be made compatible with libraries other than jQuery by.// wrapping it in an anonymous closure..(function (Drupal, drupalSettings) {. /*. Calls callback when document ready.. . @param {function} callback. * The function to be called on document ready.. */. const domReady = (callback) => {. const listener = () => {. callback();. document.removeEventListener('DOMContentLoaded', listener);. };. if (document.readyState !== 'loading') {. setTimeout(callback, 0);. } else {. document.addEventListener('DOMContentLoaded', listener);. }. };.. // Attach all behaviors.. domReady(() => {. Drupal.attachBehaviors(document, drupalSettings);. });.})(Drupal, window.drupalSettings);.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1379)
Category:	downloaded
Size (bytes):	66599
Entropy (8bit):	4.688600867738131
Encrypted:	false
SSDEEP:	1536:JyzFG99PjGmh3AUNkzUA49gSmGkzYYTfb7h4cl4HUAIjV37BmLamqVfdghCJX/gT:vZA64iZHR7u8rnCRS6VZYYXdD4TeEyGZ
MD5:	49ED0D6ED8A8EAD630233AE6B1AE0AC0
SHA1:	0AC4A3248059B5E5FA1794F0969F65AB0D6D0C68
SHA-256:	A7399095BABC65BEE091B367D5157647E2E42ACEF98186D352FA0B67BB3D0D47
SHA-512:	EB9EC390C439B532DBE3619C9564B849E894F657E69B0DEDCC8F32ECBD1EB6AE3461D18C1F8F1438DEFD06F663341309096B5B5FAAB333DB8729F4B147B2933B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/hostinfo
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">. <head>. <meta charset="utf-8" />.<noscript><style>form.antibot * :not(.antibot-message) { display: none !important; }</style>.</noscript><link rel="shortlink" href="https://www.purolator.com/en" />.<link rel="canonical" href="https://www.purolator.com/en" />.<meta name="rights" content="Copyright .{date:html_year] Purolator. All rights reserved." />.<meta property="og:site_name" content="Purolator" />.<meta property="og:url" content="https://www.purolator.com/hostinfo" />.<meta name="twitter:card" content="summary_large_image" />.<meta name="Generator" content="Drupal 10 (https://www.drupal.org)" />.<meta name="MobileOptimized" content="width" />.<meta name="HandheldFriendly" content="true" />.<meta name="viewport" content="width=device-width, initial-scale=1.0" />.<link rel="icon" href="/themes/custom/purolator_theme/favicon.ico" type="image/vnd.microsoft.icon" />.. <title>Page not found \| Purolator</t

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12283)
Category:	dropped
Size (bytes):	393007
Entropy (8bit):	5.670915363037364
Encrypted:	false
SSDEEP:	6144:enti7PJOuRze6Lf63mod3WEIML6WX+pGTRA/LY9Fawb7TAgY1fY/I3dRmDWzhqcB:enti7PJOuRze6L3odIMLn2LYXawb7Etl
MD5:	A94D791CCC4DCC63D86CDFCBBAEDA621
SHA1:	B5D43CD4DA358DC358DDC7B3F17D5B5DE596F4F0
SHA-256:	DAB613CE872E51FDEB0766A07FD1547BA1D1E2E0A8A04067ACC5D9D05FD019A7
SHA-512:	B1475D10B739D40AF72EA95DF9B734C41AE7A4C48723B9AF83DCED1B65F12D455EA6720BBB55E8AB09C2493A27753D4634C8414F796F0C51E11A93601487E238
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en\u0026","https://khms1.google.com/kh?v=989\u0026hl=en\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en\u0026","https://khms1.google.com/kh?v=163\u0026hl=en\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixels-pa.googleapis.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2538
Entropy (8bit):	7.893827425262821
Encrypted:	false
SSDEEP:	48:5P4t/poDwtYYWqU+RzwzxXbLCJq8quFhZ3JGdzD3o5K2ig1MhSvfZG:rDwKrqlRQbYBs5D3oI23aSXk
MD5:	090ACE433B65792BF872BD905A910807
SHA1:	8365798DD63518D343B73043D24240C08771713F
SHA-256:	63903DEAF110A044B3269A9F829926C1E7CACC01639691022174AEFF62F5412E
SHA-512:	177E8002059F777FBCA9B125293954D3355D9E859FEA8577BA1CB4306CD978D8F5F8BE7BD9535FD35C9ED59D24B5EBC5F894C0878AD21F66F6BC5B6BEECD5441
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........j..y..ALPH......Sm{U..$D.."!....X..$ ......]...[\|L.X..s.D...{...:..^..+..K....k..:..\|.. ?......U.g%.<......N........B._I.3m._.#.B(.M._I...Q.$O_..t....{......z..F......0.....v.H.f....~j.]Ai..C.6...P...M..[...&K..K..$.}..P,....h..IR.F..6[m...#.T.6...;.!...l+.,e......P....b..V%i.!..I.N..6.....e.A.m.I'.m.zUbH.8.Z..j.R(..&I.b..v.2[.$[/..lK0.V;..l.T......oHR.........h.../t........._E..........-S4.8l..jYR.9..t.@/V$M......`..I....,V$%.&.m...&I.:p.l[(.`.fY+.$I..)..u`H.-...@2.....K.v....a.f[$..I...0..H..$..bi.[,.$%.C.....ha$`.7[L.@5Me.a.."O..E...s.......P.J...F.j......A.\|...9..V.m...........m]1.....H...0~...\|y..w..Wu=._.<.=...a.z~>.R.....z.[...:.[..VP8 &....&...k.z.>1..B.!!...l .........9....7-......i.Y#..G...~W}.........._..Og..?.=.z..%.......o.;.g..L.......i...`.E.U.......Y.> 9.r....^c4.....}..T..v.......M..$...3...e>/....q.......;O....%.n..k1.$.`$m'..?.T.-U.......\._+.....hD...+..~..H8..O..U....8......m..6S:.%...@wq.N.F..R..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791)
Category:	dropped
Size (bytes):	58072
Entropy (8bit):	5.247960089226309
Encrypted:	false
SSDEEP:	768:5NYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGk:5NTKktDLmTF8yJL45XtHjoGk
MD5:	E1D98D47689E00F8ECBC5D9F61BDB42E
SHA1:	6778FED3CF095A318141A31F455C8F4663885BDE
SHA-256:	0A34A87842C539C1F4FEEC56BBA982FD596B73500046A6E6FE38A22260C6577B
SHA-512:	021E615983F30EC5477FD8B611E8C5045AC6D9900F9A9BB8649B56E0C7D282965A727F8CF501C3B7E1DDFF02F5B44924D5481BCEA7A926BE8A9E166314A07ED0
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescriptor

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (1526)
Category:	downloaded
Size (bytes):	6532
Entropy (8bit):	5.054352278868648
Encrypted:	false
SSDEEP:	96:wLzJS+SyD7DGDHL3+B6omokaJdaJf0WGAN0+a46swpRrH3r1rtc/am:wLzJS+SyPyraJAfeAv+sArXr1rtcym
MD5:	E1849E5BD39DB99B43DF6E6A0311C946
SHA1:	0B11A357F5A9555B0B8334B6489EE05D74E76EA9
SHA-256:	77D3AC3CF368D57F9015E8940FCB829F0E7C2D3FD74A60D6705BC2DE62A6C694
SHA-512:	3F7954C6AC4B84E8A5C17075DB6F76402812533E713B3E29B3053E288DDC34D079374FA2FBF92B4568AC8FDBCA43F6BB8BEB70446E43ED49B0C08140FC11F2C2
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/sites/default/files/css/css_yAj8yOqxBR2PJCac1P4AXFG6RsJBupy_WFsffNLX02s.css?delta=0&language=en&theme=purolator_theme&include=eJwtzUEOwyAMRNELoXIkZMJIcQUY2RM19PRdNMv_Nj92ECNXCSSXpneuZgy6rKeDuyOty60LzQtPDDx6mCM3v5b0l7zlTphU7oJR0fIhi2oz1S7f_V-EEh9tKNLhzDqVPw9FMuc
Preview:	/* @license GPL-2.0-or-later https://www.drupal.org/licensing/faq */..text-align-left{text-align:left;}.text-align-right{text-align:right;}.text-align-center{text-align:center;}.text-align-justify{text-align:justify;}.align-left{float:left;}.align-right{float:right;}.align-center{display:block;margin-right:auto;margin-left:auto;}..fieldgroup{padding:0;border-width:0;}..container-inline div,.container-inline label{display:inline-block;}.container-inline .details-wrapper{display:block;}.container-inline .hidden{display:none;}..clearfix::after{display:table;clear:both;content:"";}..js details:not([open]) .details-wrapper{display:none;}..hidden{display:none;}.visually-hidden{position:absolute !important;overflow:hidden;clip:rect(1px,1px,1px,1px);width:1px;height:1px;word-wrap:normal;}.visually-hidden.focusable:active,.visually-hidden.focusable:focus{position:static !important;overflow:visible;clip:auto;width:auto;height:auto;}.invisible{visibility:hidden;}..item-list__comma-list,.item-list

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	66709
Entropy (8bit):	4.653529987070747
Encrypted:	false
SSDEEP:	1536:8BzbFJ1Gmh7ZOLXI52tSgtPJvLh+vBL+FEXA049ZkR/06V5O:oAmhUXtF9SDO
MD5:	11B89F4EFE1E6B6E2D5B8BE53C675AD1
SHA1:	310C72E5F32EB8A8DC533FB7CE7ECBA7E4536B7D
SHA-256:	580FC30EFB83CF7619CE94A8602EF1F031F136E993BC7C7AC312B56668C69BB7
SHA-512:	F8512DF19EF7BB33A4AA96ABB2DDCFB652E9B6D8FCF89635C8A6DCECDAE236519FDF8C53479027F6977B311EC7528B82B6895DCA8972CC636132EEC5ED2F6EFD
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/ajax.js?v=10.3.1
Preview:	/*. @file. * Provides Ajax page updating via jQuery $.ajax.. . Ajax is a method of making a request via JavaScript while viewing an HTML. * page. The request returns an array of commands encoded in JSON, which is. * then executed to make any changes that are necessary to the page.. . Drupal uses this file to enhance form elements with `#ajax['url']` and. * `#ajax['wrapper']` properties. If set, this file will automatically be. * included to provide Ajax capabilities.. /..(function (. $,. window,. Drupal,. drupalSettings,. loadjs,. { isFocusable, tabbable },.) {. /. Attaches the Ajax behavior to each Ajax form element.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Initialize all {@link Drupal.Ajax} objects declared in. * `drupalSettings.ajax` or initialize {@link Drupal.Ajax} objects from. * DOM elements having the `use-ajax-submit` or `use-ajax` css class.. * @prop {Drupal~behaviorDetach} detach. * During `u

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31941), with CRLF line terminators
Category:	downloaded
Size (bytes):	33700
Entropy (8bit):	5.295197188866842
Encrypted:	false
SSDEEP:	768:NT5eRZmli2Tu6VbPnUedGdOV5UDBEqNDAdcJop3lQnNcD0+kVYQknFow/Q8:NThlLTuEPnU8hODFYlQw0+kVrknFvI8
MD5:	F5514B1CE3D12A9D2D3407F159AC9FCD
SHA1:	E08BA864EF8590046D93719BDBA872601D6E9FB6
SHA-256:	C129F5956BC8E9C3A2838069E9A3FF50AD7A540A077B42934B2C5D7C902F4EFC
SHA-512:	759A2C5069D16DCAD2870F99ECE4EE78E9081FADFBBCE477C75BACAC6AEC88DD474DCD7C3AD6B13A75C529517974B6ABD85AB0A4E52E5F5C1BA1B38AB59E0C86
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/js/bootstrap-datepicker.min.js
Preview:	/!.. Datepicker for Bootstrap v1.9.0 (https://github.com/uxsolutions/bootstrap-datepicker).. .. Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0).. */....!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a,b){function c(){return new Date(Date.UTC.apply(Date,arguments))}function d(){var a=new Date;return c(a.getFullYear(),a.getMonth(),a.getDate())}function e(a,b){return a.getUTCFullYear()===b.getUTCFullYear()&&a.getUTCMonth()===b.getUTCMonth()&&a.getUTCDate()===b.getUTCDate()}function f(c,d){return function(){return d!==b&&a.fn.datepicker.deprecated(d),this[c].apply(this,arguments)}}function g(a){return a&&!isNaN(a.getTime())}function h(b,c){function d(a,b){return b.toLowerCase()}var e,f=a(b).data(),g={},h=new RegExp("^"+c.toLowerCase()+"([A-Z])");c=new RegExp("^"+c.toLowerCase());for(var i in f)c.test(i)&&(e=i.replace(h,d),g[e]=f[i]);return g}function i(b){var c=

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/identify_7bf75739.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8650
Entropy (8bit):	7.972342746257268
Encrypted:	false
SSDEEP:	96:OLpIr8WljRz9fSjF3Qm5qZC44SAVLtE9jsXkDCcQL1OVdMR9A/gfYNtAqmC5SPoh:+irLnfiAmNgoLajbDCXqMSsC5QXnlKr
MD5:	C66A12CACAD31C032608CFABE9797B1A
SHA1:	E76750560AA71D22E82D6022BEB882BBF8A02B5E
SHA-256:	955AB7947A69A4A8949E645A9832940176328437EB351471C368F03CF43C59A3
SHA-512:	49C714D19A5009ED04A84F8D2BCBBBF58F2E0CC7455F3EEA8189ACDF663F71AEECD645E64CC94833CE789FA370BB0475172F590809654B3A6E05CD58D645BE2D
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X........3.....ALPH.......0.$3uo......=g...j.m.....E..X.:,C..4u...B...~p....<c..G....9..B.,...04.\|.S..&.G.....q..Y.L).5..,...4.......c.F.y.eUz..+}Q.K.......[....:.\....p..9.9.9.9.9.9.9.9.9.\|...........-..5.eY......LEW:....I:2.KxH.RB.D.).<.R.v<...A.J9.'.6..d90...^o!\....VP8 . ..P....4...>1..C.!.......Y.\...w.../.............C.._<...........G...........C.O........j.@?..".^...............G.....?.o....@..oq...P.F..._....?.;q.c.w.O.w.N..5.....c.....;...O....h<...........>.....{..d..k...........O..Q/.}........G......c....}..........{..2...c.W....O......=....._.?....#......._.....s.?.K......s..?l...X......^}d.l.[{om......{om..../SO....f..VM..v.(&....m_.~..y...:......\|.;..b.fZ.p..Ag..J...!.G.$.v....Y.%...........Ns...r.o%.g-.....{G.kB'[.o.=uGd...8..c..D]".xX.'.Z...F.]....W..o.l....(%..L.Q!.i.........$J.6...F.A.p..U\.yN.%.g.l...V.X....._..,V..gJ>.JC&.hz...5t\|...MG...o.>.T..}#..(..e..F..mr..jcX..:..u'Ok. S7.5..~K..B;vwiNm.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5269
Entropy (8bit):	4.434834841651509
Encrypted:	false
SSDEEP:	96:OIKbKQDL14oTtGexH0CF+cSyzpgSarKvZ+6c6cvEG0Z:vKbK+L14ynxH0CF+crzpja2B+6cFvEJZ
MD5:	CA7102D2A0283824CE7861A0884CA0FC
SHA1:	B1F90D3266E0C06C6C8209BD46363B4C4856DCBA
SHA-256:	A7275DDF5A9E695C2767BCE654564447B45DB2561349AE0BD3967DE818F4AE90
SHA-512:	C4F6ED02B0FCDE0E96B0BC7D8D00747FC802946F40BD01AB13AF989753F923CC03090C73D33BF3FCD5280AD8C93692A3533CE55E350F6DFE8D647D5424408AF7
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Progress bar.. /..(function ($, Drupal) {. /. Theme function for the progress bar.. . @param {string} id. * The id for the progress bar.. . @return {string}. * The HTML for the progress bar.. /. Drupal.theme.progressBar = function (id) {. const escapedId = Drupal.checkPlain(id);. return (. `<div id="${escapedId}" class="progress" aria-live="polite">` +. '<div class="progress__label"> </div>' +. '<div class="progress__track"><div class="progress__bar"></div></div>' +. '<div class="progress__percentage"></div>' +. '<div class="progress__description"> </div>' +. '</div>'. );. };.. /. A progressbar object. Initialized with the given id. Must be inserted into. * the DOM afterwards through progressBar.element.. . Method is the function which will perform the HTTP request to get the. * progress bar state. Either "GET" or "POST".. . @example. * pb = new Drupal.Progress

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1173
Entropy (8bit):	4.947201692337221
Encrypted:	false
SSDEEP:	24:7G6Vcsqi9ai1KrgjaWAG3uPgMYi8vuSssRIWAF7TiEdPGRWo2z:7G6+s991KrMVj3YgMYh6s5A5iEdewoo
MD5:	65B0C2179CF02E9F9704113FF9E4D8CE
SHA1:	F0EDBEF9B66D306BC90B4C11A95EB5962306AAC4
SHA-256:	792603AB09DCFEC42A3B0550980D87973F65BF5CBE76954E5B1509B590263940
SHA-512:	8723F9BE368B2CD793DB930B6E21E74298F3F7D527DA52CC64B066B6FFEA3040F5AAC215487CFC7FD9D721E2D7605EE42CA66CFC6EE215011C7278CA784E7FA6
Malicious:	false
Reputation:	low
Preview:	const dl = drupalSettings.gtm.settings.data_layer \|\| 'dataLayer';.window[dl] = window[dl] \|\| [];..(function (drupalSettings) {. const config = drupalSettings.gtm;.. window[dl].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' });. const gtmSettings = config.settings;. if (gtmSettings.include_classes === true) {. window[dl].push({. 'gtm.allowlist': gtmSettings.allowlist_classes ?? [],. 'gtm.blocklist': gtmSettings.blocklist_classes ?? [],. });. }.. let gtm_environment = '';. if (gtmSettings.include_environment === true) {. const gtm_auth = gtmSettings.environment_token ?? '';. const gtm_preview = gtmSettings.environment_id ?? '';. gtm_environment = `&gtm_auth=${gtm_auth}&gtm_preview=${gtm_preview}&gtm_cookies_win=x`;. }. config.tagIds.forEach(function (tagId) {. const script = document.createElement('script');. script.async = true;. const dLink = dl != 'dataLayer' ? `&l=${dl}` : '';. script.src = `https://www.googletagmanager.com/gtm

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1642
Entropy (8bit):	7.825552121311043
Encrypted:	false
SSDEEP:	24:oNVKgcwbM34icLAd5oehL6n1jv/JRpKIg4LH2fFlS+Wqm/NGnpbp7H7PW5dDZMTP:oNMgNM3BGyTL2/nBLWNlWtEnUaT0U
MD5:	295E04CC4B99728AF23978C96761FCF9
SHA1:	6473593630D987E40ED02BE00CD5719F886DFB48
SHA-256:	8F16304615F6482D04DC05935ED80E8F04969F994BA05BACA470912896E80972
SHA-512:	7F16A48AE7267A9E99BEC6800E81AAE1C78056FA3A07C2EA7C19FDBBF7DFE21EBE4AAB7D5965D29F15DC540219D62C3C1365C32142FA51CE1E6335BC672A6D33
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/themes/custom/purolator_theme/logo-small.png
Preview:	RIFFb...WEBPVP8X........V..;..ALPH......h.!Y1.m.m.m.m.m.fDf......$.5.s...j.<..-d..i..Q..l5v.U...xe...\|\L...G...:.qsxOmI..c.r...=...Og..". a#.........L..:.....t.9S.T.M.kjzt......@z..)@..s5.Qk.....k.m..8.o<...B.S+R.~..h.faK.W.D..T...B..4......G..S.T~L....qNCp...4....>2.+.4...C..$&vz..p.IZ.{jAwOy>.CT....8i....:..a.\+.Q..Rg&>.T...eJ...p.I..4........>.u..A....pm..uF.+CPi.S.yt...i.:e.....M...%.\|.g..G...]....:s.A...`5........z..3.AYg.Y}.H..~..Y...VZ...=)W......JM...."..j...Y.i)#K{....m....Mc.8.AYg.ne>U.^=.F* ...:.H..V..B.^..b[...s.y..t......[.Jd.......f..1.AYg'9.{..G4..;Y.F....>...:........w^.J...9DUO.....4.....N<......z....c...n.".9e.....\....0...\..).hkV..w;..i..:...... wu.F...e\|.\|k..L%..9....j#>FT..S.....}.09..u.}../L;L.y...u.d...=.=.2._m..P.L.Ni...#......`......z...9.VP8 $........*W.<.>1..B.!!...H ....8..A~5...1I:......>.}....n8...^................`?Q..z.~.u.z.~........g.O.....+.g.'X.[.N...3at...T1&.q.v.=.:. .J..~..p.....~.Q.I.....

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3235)
Category:	downloaded
Size (bytes):	3236
Entropy (8bit):	5.088604666201516
Encrypted:	false
SSDEEP:	96:vorXBAoTn0KaJxSr4pCVlgmoinOOJfkq6:vgX3bExSrVlgmDOO+
MD5:	B3F92A2BBEF8C0CBDB772ABDEF438B7B
SHA1:	BAB0C756728ACD2AD34664015ABECE3887043298
SHA-256:	EEE238D0BD2DEDE876B3DCF62E4D97CBAE4C57944D0726D9F6923E2B988374FE
SHA-512:	2A2E053560C2E1D7FF92D7CDCC6CE3958739611913CDD69D9C4740C12FE8D19D1A682B93EE26DB7536B250CD2B28F5FB31B97A5DD96B40AB92F346FFD589EAB6
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/base/blazy.min.js?sliq8r
Preview:	!function(t,e){"use strict";var o="Blazy",s=t.dBlazy;s.isAmd?define([o,s,t],e):"object"==typeof exports?module.exports=e(o,s,t):t.Blazy=e(o,s,t)}(this,function(f,u,o){"use strict";var d,v,n=o.document,g="srcset",i={},r={},p={},a=u.viewport;return function(t){var s=this;s.name=f,s.options=i=u.extend(u._defaults,t\|\|{}),s.options.container=!!i.containerClass&&u.findAll(n,i.containerClass),s.destroyed=!0;t=s._util={};return i=s.options,d=i.src\|\|"data-src",v=1<u.pixelRatio(),a.init(i),s.windowData=function(){return u.isUnd(p.vp)?a.windowData(i,!0):p},s.revalidate=function(){e(s)},s.load=function(t,e){var o=s.options;t&&u.isUnd(t.length)?c(t,e,o):u.each(t,function(t){c(t,e,o)})},s.destroy=function(){var e=s._util;i.container&&u.each(i.container,function(t){u.off(t,"scroll."+f,e.validateT)}),u.off(o,"scroll."+f,e.validateT),u.off(o,"resize."+f,e.validateT),u.off(o,"resize."+f,e.saveViewportOffsetT),s.count=0,s.elms.length=0,s.destroyed=!0},t.validateT=u.throttle(function(){l(s)},i.validateDel

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	5977
Entropy (8bit):	4.754914857744224
Encrypted:	false
SSDEEP:	96:O7FLdIiQtqbNNhkVQAoc1S4tiQmO6ixnatUmuQ2IevRnQGQvCH6EC71l1hVtjy0P:cPIiQoZ3kVQAoco4tiQ0i0tUmuQDevRQ
MD5:	57EE94AE7F048FEFB8D68911BF1BFB2F
SHA1:	A33F9BC5A3AE22242B590A0E73D715A4FF3C75DC
SHA-256:	535C90DDE53E22E15114000AD7ECE06A96FFB83EC1D1A588E8B14A93FA5F6870
SHA-512:	725E29817FC907D6F774D167CF9F42EFC6F48127D46C9992825A4C8456716F96AE1C414DDC13D576AAB4940A5AC9C3657598D2ED62D232F813D1F8A5E5747ACB
Malicious:	false
Reputation:	low
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.*/.(function (Drupal, drupalSettings, once) {. const sitewideAlertsSelector = '[data-sitewide-alert]';. const shouldShowOnThisPage = (pages = [], negate = true) => {. if (pages.length === 0) {. return true;. }. let pagePathMatches = false;. const currentPath = window.location.pathname;. for (let i = 0; i < pages.length; i++) {. const baseUrl = drupalSettings.path.baseUrl.slice(0, -1);. const page = baseUrl + pages[i];. if (page.charAt(page.length - 1) === '') {. if (currentPath.startsWith(page.substring(0, page.length - 1))) {. pagePathMatches = true;. break;. }. } else if (page === currentPath) {. pagePathMatches = true;. break;. }. }. return negate ? !pagePathMatches : pagePathMatches;. };. const alertWasDismissed = alert => {. if (!(`alert-dismis

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4204
Entropy (8bit):	4.678225790097852
Encrypted:	false
SSDEEP:	96:khvfoCWSxxVIw2cdp69FkZtovDfW/ci2eWs:ioCWS+w2FGWDfLiFWs
MD5:	4658076D66208931B9997E5F2FBD496B
SHA1:	41C0A2B7F78F05DC84DD5BD19B731AA89C21A6C1
SHA-256:	95918AEC0F6E6D0B39D7E4D7745A657BFD35710E630FD266B7A1C428727772E4
SHA-512:	F9E5B6F3087A907BF8F7C9A7C55AC1FF143896F3D09AD8D2277D844CCB593EA0DA0F8A4F18FB21147554BE2CD28C1115E8E8158E3D287590D4DF3B381C42BA4F
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/logo.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 188.419 26.169" style="enable-background:new 0 0 188.419 26.169;" xml:space="preserve">.<g>..<path style="fill:#EE3124;" d="M128.981,19.346c-0.141,0.328-0.33,0.653-0.566,0.947c-0.945,1.174-2.406,1.927-3.635,1.927...c-1.135,0-1.891-0.721-1.088-2.381c1.135-2.417,3.921-3.102,6.518-3.102L128.981,19.346z M132.665,6.523...c-3.259,0-6.187,0.883-7.792,1.566l-1.84,3.983c1.793-0.817,4.201-1.633,6.656-1.633c2.547,0,2.691,1.273,2.123,2.479l-0.189,0.329...c-5.903,0-11.522,2.219-13.834,7.146c-1.462,3.164-0.376,5.775,3.21,5.775c2.077,0,4.251-0.786,6.141-2.254h0.139l-0.565,1.858...h5.192c0.33-1.142,1.041-2.768,1.795-4.466l3.164-6.756C138.799,10.373,138.989,6.523,132.665,6.523"/>..<path style="fill:#EE3124;" d="M72.849,6.884l-5

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8046), with no line terminators
Category:	dropped
Size (bytes):	8046
Entropy (8bit):	5.753497775467034
Encrypted:	false
SSDEEP:	192:ZKkPvJIGLV4PS2gFQL0alxJ2QRyq6rBTtS:DJIGLV4PS27LPJvottS
MD5:	91A124A5497C98DA76993F273F2BBAE0
SHA1:	2E6932254C1AB645F397A0AED269CCBAD75FE420
SHA-256:	21B9584DC2D0FC47AA059FC8AE844A461761E384F837D71B022D996431DF4ADA
SHA-512:	AA91BC52AC92BE46FBC4DEA098050A9D143BE8CABDF5DC2AD0F1D431202FFA905B78EEF82BB04EC49C8628416431F9E2AACED9A45D556EA5A6CBC72F95E59ED5
Malicious:	false
Reputation:	low
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,n,o,y,z,B){V=b,function(c,d,U,e,f){for(U=b,e=c();!![];)try{if(f=parseInt(U(174))/1+-parseInt(U(191))/2(-parseInt(U(243))/3)+-parseInt(U(196))/4+-parseInt(U(256))/5+-parseInt(U(229))/6(parseInt(U(222))/7)+parseInt(U(182))/8+parseInt(U(212))/9,f===d)break;else e.push(e.shift())}catch(D){e.push(e.shift())}}(a,976678),h=this\|\|self,i=h[V(186)],n={},n[V(184)]='o',n[V(248)]='s',n[V(242)]='u',n[V(223)]='z',n[V(169)]='n',n[V(260)]='I',n[V(264)]='b',o=n,h[V(266)]=function(D,E,F,G,a4,I,J,K,L,M,N){if(a4=V,E===null\|\|void 0===E)return G;for(I=x(E),D[a4(252)][a4(178)]&&(I=I[a4(206)](D[a4(252)][a4(178)](E))),I=D[a4(181)][a4(172)]&&D[a4(268)]?D[a4(181)][a4(172)](new D[(a4(268))](I)):function(O,a5,P){for(a5=a4,O[a5(271)](),P=0;P<O[a5(217)];O[P]===O[P+1]?O[a5(170)](P+1,1):P+=1);return O}(I),J='nAsAaAb'.split('A'),J=J[a4(224)][a4(165)](J),K=0;K<I[a4(217)];L=I[K],M=v(D,E,L),J(M)?(N=M==='s'&&!D[a4(209)](E[L]),a4(246)===F+L?H(F+L,M):N\|\|H(F+L,E[L])):H(F+L,M),K+

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	766
Entropy (8bit):	7.623105820374657
Encrypted:	false
SSDEEP:	12:2ge07vE2j85kU1Z7EkvrunUw4UxawfETmz0IqLMY+CMB5ZKFKnvd58U/jT8G8pol:ze07lj85J1GkzunLHaSETmIyCm5ZKFK/
MD5:	5A95059334505D7D22C64E831E2623FA
SHA1:	D15F7DFAB6FE5FF918B075575D056376660494BB
SHA-256:	01B584C69BE4E8710927759FA26959DE8EA345653F8C1117512D9B21E0CBA98F
SHA-512:	D7A599DC24E2012AFD8CC59B69F883DF87DBE84E8B0E8CC9851B8EC3453897757EF0DBC7CD9E35167B4FB01716083B684B8CF159615E39DA33429DB30E66AECF
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-linkedin.png?itok=t2D5awqO
Preview:	RIFF....WEBPVP8X........0../..ALPH=....?@&m...0.....g.5.$)....7.=..D...8..;......iBn^.Vl.`.:.o...VP8 ....P....*1.0.>)..B...Uv...B[./.@.enK.W...s......._m>...h....).s.........W.....S...t_. d.{...E........\.Y..'V.i.8...eN.iD.m.~iQ..lX.3..:z0.E.`=....H.\|...@_..5.."......V.y..@.1...wR..svFffC..y.-2....%..^.m...J.....N.....4..r#6.....,.0......d.._.&.8?Z...^.<..)...~....z......... .....].....a.e....0.....aw..Y...I....r..........(e...u7.../-."]..L.nJ!..}F...m.V?..y_wm..3_.....&JS.. .....^.B7%...b.y..;.Y.... j......>..".x.a.........Mh9Q...zZ..:.>aZ.X)(..J.2..z3X...u..\.<....Hh......6....Y....9.Q...'T}.<...$i..6.i.o.-.G..s....^....).g.nKO..Z.\|.q~O.\|.s..q%~Q..q6Q.1E%F/.....A?........B......A..U......=..g...a9.k..P..Z>}>....E.$.r.....

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	79271
Entropy (8bit):	5.334376834240747
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QqSYTZ02LKVsdmpyKcicx2:RIT7OXVs9ZVKBvYj8wKcHx2
MD5:	39DBCECAF7B9EDFF7C66112A9C92A103
SHA1:	008C902CB333D847CC6D02A61A6938EEE3C0DEF1
SHA-256:	5EC6CEC83BFC3ACCFB2878A08887540A74EF8A015A9FFE733961507532E580BC
SHA-512:	40E49FEBA784279A90EEA92B58CC44AD779E9969C1B756015583EE5417110E2A45DAC597414B76448A2B2E4FA82871BE17B3B86D68B9226ECB3D6E47E9D0F27C
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	downloaded
Size (bytes):	344002
Entropy (8bit):	5.417034116140363
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoOkn+gs29IlIoL+kyqAfN+Th3dFTUOQeyePEuoZJ+4TnLXHmmA:8JV06+gs29UIoL+kFAfg9dFTU9e03A
MD5:	9E849DC9566F5E58E5725108FA04C8A1
SHA1:	F0B8C295D42DD19442D29F1A4BA564B37D38025B
SHA-256:	8838B00C4D65FB353A4FC115FB3D5EC4AC665DDDD47131DBCB41799E5CE6B25A
SHA-512:	0C8A6932163D1B9933FF5ED9D087CBA0B2E367DEF33AF3E0D15408A10DF8F448C1C9F038E28369A174330B4047640286DD330F5A8FA8B8AA1DD09BDEA69F45D6
Malicious:	false
Reputation:	low
URL:	https://analytics.tiktok.com/i18n/pixel/static/main.MTJhNGMzN2YwMA.js
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (943)
Category:	dropped
Size (bytes):	944
Entropy (8bit):	5.059774860978226
Encrypted:	false
SSDEEP:	24:pbP+NPBBaqzbN6rrHebsVb2ADcCKXwSDe:R+E0J6XzqMvKu
MD5:	1CD580A5A6B590276A304F3A259B4E71
SHA1:	B9A1A34D7EBDC79A94F460EEB6292335B4D85745
SHA-256:	C7FEA7A244AB5EF75669741CBACA5F5E46564579B06DFEE51DF9FBBCDD6444BB
SHA-512:	ADE01DC3D9AF002AF9BB2BDBA031AE6B827E87A98DE89B9C06BE0A5DFCAACABC36EC318280FD66EF57AAAF7A466E8BE45900A9F86758431B220DCA670B93540B
Malicious:	false
Reputation:	low
Preview:	!function(i,s){"use strict";function a(t,e,n){return t?("undefined"!=typeof DOMPurify?(r=DOMPurify.sanitize(t,e),r=i.isObj(e)&&e.RETURN_DOM?(n=!0,r):c(r)):function r(t){t=t.children;i.each(t,function(t){var n,e;n=t,e=i.nodeMapAttr(n.attributes),i.each(e,function(t,e){return!!o(e,t)&&void n.removeAttribute(e)}),r(t)})}(r=c(t)),n?r.childNodes:r.innerHTML):"";var r}function o(t,e){t=t.toLowerCase(),e=e.replace(/\s+/g,"").toLowerCase();return!(!["src","href","xlink:href"].includes(t)\|\|!e.includes("script:")&&!e.includes("data:text/html"))\|\|t.startsWith("on")}function c(t){return(new DOMParser).parseFromString(t,"text/html").body\|\|s.createElement("body")}i.create=function(t,e,n){var r=s.createElement(t);return(i.isStr(e)\|\|i.isObj(e))&&(i.isStr(e)?r.className=e:i.attr(r,e)),n&&(n=n.trim(),r.innerHTML=a(n),"template"===t&&(r=r.content.firstChild\|\|r)),r},i.sanitizer={isDangerous:o,sanitize:a,toNode:c},i.sanitize=a}(dBlazy,this.document);.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1101)
Category:	downloaded
Size (bytes):	1102
Entropy (8bit):	4.900961898390107
Encrypted:	false
SSDEEP:	24:TL6j1zXkaMwoNo9GiI9hMiKTeMVfMqIzK8TfGDVs6GL:Tq+aoeQVKTeMVfPImJqL
MD5:	8CA9BAAFF95855EE5D3919153C4FC35C
SHA1:	016AC6970EB1F3A877E1E7057B9FB09FA16A70CB
SHA-256:	EFFC8DFDF5A84D54DE73D083EF12D1D7953B3859D897B85C75F5AFD2767BA3FD
SHA-512:	9D0CA056FB9DD254BA313954747A49ADA622C6464A5AAA19AB4E47F2DD752CB85FF14284176FD27965CE981FAB99FCAEF8DB9080389D32404183B9B7744D418D
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/plugin/blazy.once.min.js?sliq8r
Preview:	!function(o,u){"use strict";var c="data-once",f="jQuery"in u,a="remove",s="set",v=/[\11\12\14\15\40]+/;function i(e,n,r){return n.filter(function(n){var t=o.is(n,e);return t&&r&&r(n),t})}function d(n,t){return o.findAll(t,n)}function h(n){return"["+c+'~="'+n+'"]'}function l(n,t){var e=t.add,r=t.remove,i=[];o.hasAttr(n,c)&&(t=o.attr(n,c).trim().split(v),o.each(t,function(n){o.contains(i,n)\|\|n===r\|\|i.push(n)})),e&&!o.contains(i,e)&&i.push(e);e=i.join(" ");o._op(n,""===e?a:s,c,e.trim())}function m(t,n,e){return i(":not("+h(t)+")",d(n,e),function(n){l(n,{add:t})})}o.once=function(n,t,e,r){var i=[];return o.isStr(n)&&o.isUnd(r)?m(n,t,e):(o.isUnd(e)?0:(i=m(t,e,r)).length&&o.each(i,n),i)},o.filter=i,o.once.find\|\|(o.once.find=function(n,t){return d(n?h(n):"["+c+"]",t)},o.once.filter=function(n,t,e){return i(h(n),d(t,e))},o.once.remove=function(t,n,e,r){return i(h(t),d(n,e),function(n){l(n,{remove:t})})},o.once.removeSafely=function(n,t,e,r){var i=u.jQuery;return f&&i&&i.fn&&o.isFun(i.fn.remove

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	704
Entropy (8bit):	7.574780485816773
Encrypted:	false
SSDEEP:	12:JWIbk89j5u3GEIgcTYjv0nkD0Npr9rO2hTlsm9jj+lZKkLJC9xCc8Ht:JisjkOTYjcnkI/h2+3CT
MD5:	B1543D5DEC40093B827F8568EBC0942E
SHA1:	797C589F34E85DA63C5CDF5541E52C0F48BA6215
SHA-256:	D0CB106DA2ED7EDDF40C18542D88549969F27AB60E6878509A42BFAE4D6F41B5
SHA-512:	63D470F893F736FF7CBA74E76AC08880576167B71B9A37CDE5259C74B62615B480DAE3C177C8E7B913DDEFC1858D20783106104B24CD21BC9C819BC2A9FB5343
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........0../..ALPH.....p$..d$....Uq..Gl.6..O.VDL......M...ANi...6..:..N.".).M...0v... h#.W.[..f..@...y......"oBA.$)...t.....s...$.....P).J..z..6F.2."...BP!....l..........VP8 .........1.0.>-..B........bY...r.kWr...8.m....s..............'.c.W4.i...f..}.\|..%.g..W.-{..."....A..w.o1?.^...x-......X.h..&.T..A...P..S......w.P..WH....R...@.........P...V..W...js..}..M..V....w.G.XE.^=...8A.kW...../o......i.vW.Q.jO...b^b..{..jPUu......G.w.e\.\......`/..u..7.....E..../..4..6B2....R......o.......^f..b'....G..1..?..Q ~"_.A&,?Sw.a..\|.(.]:=m..$................w..b.N.W..6m\|.S.2j.-^_.$1.@P.... w...a!.....C..5..L....'?.R.t..^.y~......M...k9..^&...F...6(-..eiY.a...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20232)
Category:	dropped
Size (bytes):	20427
Entropy (8bit):	5.546985663655923
Encrypted:	false
SSDEEP:	384:qYMxsp2uk5wWpbIGVZyxYfJzK89AdN6Bq28f7Tv+u/2ccOU6DcGXEJm:dMxswuk5RbIYAxL89AT6Bq28f7L+uuXW
MD5:	391DD673BF3B0837320A35AA7A940BF2
SHA1:	C8B355CAD4BDB9A08900F49E34217BACE31A04CF
SHA-256:	2AEED5B3C05C979624808226BA200108245D3065417B983D135AB1346A9E6383
SHA-512:	94955F84670030C5B51AEF0C86E9859AD862F592FB4C3761108C0C03591F5124083F19E238ED26DAAE12EBAA58260C1CA5D0BCFB886A6C380DE665690B2719B6
Malicious:	false
Reputation:	low
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 5, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";const e=1e3,t=864e5;var n={NAME_MAX_LENGTH:256,EVENT_PARAMETER_MAX_VALUE_LENGTH:1e3,EVENT_NAME_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's name is longer than 256 characters.",EVENT_PARAMETER_NAME_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter name exceeds 256 characters.",EVENT_PARAMETER_VALUE_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter value exceeds 1000 characters.",EVENT_PARAMETER_KEY_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter key exceeds 256 characters.",AMZN_TOKEN_COOKIE_NAME:"aatToken",AMZN_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent",MT_LP_QUERY_PARAM:"aref",MTS_EVENT_ATTRIBUTE:"arefs",MEASUREMENT_TOKEN_COOKIE_NAME:"amznAref",MS_IN_SEC:e,MS_IN_HOUR:

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	766
Entropy (8bit):	7.623488430124489
Encrypted:	false
SSDEEP:	12:2oKWVvg5soD8jzRHffVUuvFJNLTAeMy68ASKmqEsIQ2B1I03ePTrLxvkBQbiF:9NW5sGC5fdvFvnAeMj8XqYPluPNvpbiF
MD5:	809252D6A16F144C3E119781939E544F
SHA1:	95E42D660E0187B297BE057429E1B3353492FC86
SHA-256:	EDF05D8671976E1CFA6DD04B215E1D3785FAFADC7938D68F892E0C7725FB32BA
SHA-512:	A992F80247D3E42A7106AEBC7A19BF5E9D23F18DEA480D6381951F5F89DA004F07372AC52BCB9C5B2A1E7C8D403C1062FDB15E8D835644F43BEB9263B86990F4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........1..1..ALPH......bm...I..Dt..Cf.$.,.D"i&..H........\|,...p.EI..$y..?q..d.....'...n.I.n..O.e.H.@...%9..-rZd....Q......H......W.LC....)l.1..(.VP8 J...0....2.2.>1..C.!... ........?.rRz..Y..z%..\|.f3.+.3.#.........}.{..7...o...`........g....O...3...kqsv.=3c.)rU...m[4x....l..tMms..Z.. ..oW.......p....e.O.>b.....T...3...L+s.D....g.K.?.......*.N.W..7..A}..D.f.eS.~..y`...>.$g...G..?)R..y.+.lz.f..."Op......?@G.......{...D....3?.'...qcFq..{..P.7%Z....c..N..W9..K.V..TxN.....^=..f.M.u\|..=.~-m.O.>J.Y....~..;7E.\|.QC...f...J.wg]-...r.CK=..z.O...v.Z....U@...\|+....{....sG...mv.$'.:.qO.\|...&..61~K?.U.^?.o..(.= f..(.`G..5.O.~......pZ.>..?r..v....7..t.[x....Kh.>7c...........v........"QVb.F.T..`.mHVt{.8.+.n0...&{15.g.MHf.......

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6576)
Category:	dropped
Size (bytes):	12010
Entropy (8bit):	5.8662276502172555
Encrypted:	false
SSDEEP:	192:O4kko3D3Sf/aRyK30klyyxgrRyK3xRi1CCuhiohVi6fT:OIaBEk1xEBMIbr
MD5:	9C3CC65916B16EDF6765F2967642942F
SHA1:	961AC644E57D06ABA33B9077B951792644793BF3
SHA-256:	D8FD3EC04F6F9917BBD3ABC34D076FA12412B3923C1B36840044B0E0BB06D303
SHA-512:	F214C5315F578397393FB396489BCFC5E313D4710F99DF176F81AE23B0DEF2D5E31B7E4AE25533DAD10878E4D38C88E6AB95E8C6F8E40E6EE317053C94250BA9
Malicious:	false
Reputation:	low
Preview:	//Variables for Virtual Assistant Pop up/DropIn UI setup.var dropinTitle;.var dropinSrc;.var param = '';.var appContainer = document.querySelector('section[data-apps="tracker"');..//Used for DropIn UI setup.var typeParamPin;.var typeParamCategory;.var typeParamCampaign;.const categoryTypes = [ "Address-Correction","tracking-general","file-a-claim","claimstatus","generalbilling","notifications","location","billing-invoice-inquiries","tech-support","international-inquiries","schedule-pickup","residential-schedule-pickup","sales" ];..//Hook to open Virtual Assistant pop up.//1. Function to check if browser is IE 11 or below.function isIE() {. var userAgentString = window.navigator.userAgent;. var msie = userAgentString.indexOf('MSIE ');. var trident = userAgentString.indexOf('Trident/');.. return (msie > 0 \|\| trident > 0);.}..//1a. Function to check if page language is french.function langCheck() {. if (document.documentElement.lang === "fr" \|\| window.location.pathname.indexOf('/fr')

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1173
Entropy (8bit):	4.947201692337221
Encrypted:	false
SSDEEP:	24:7G6Vcsqi9ai1KrgjaWAG3uPgMYi8vuSssRIWAF7TiEdPGRWo2z:7G6+s991KrMVj3YgMYh6s5A5iEdewoo
MD5:	65B0C2179CF02E9F9704113FF9E4D8CE
SHA1:	F0EDBEF9B66D306BC90B4C11A95EB5962306AAC4
SHA-256:	792603AB09DCFEC42A3B0550980D87973F65BF5CBE76954E5B1509B590263940
SHA-512:	8723F9BE368B2CD793DB930B6E21E74298F3F7D527DA52CC64B066B6FFEA3040F5AAC215487CFC7FD9D721E2D7605EE42CA66CFC6EE215011C7278CA784E7FA6
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/google_tag/js/gtm.js?sliq8r
Preview:	const dl = drupalSettings.gtm.settings.data_layer \|\| 'dataLayer';.window[dl] = window[dl] \|\| [];..(function (drupalSettings) {. const config = drupalSettings.gtm;.. window[dl].push({ 'gtm.start': new Date().getTime(), event: 'gtm.js' });. const gtmSettings = config.settings;. if (gtmSettings.include_classes === true) {. window[dl].push({. 'gtm.allowlist': gtmSettings.allowlist_classes ?? [],. 'gtm.blocklist': gtmSettings.blocklist_classes ?? [],. });. }.. let gtm_environment = '';. if (gtmSettings.include_environment === true) {. const gtm_auth = gtmSettings.environment_token ?? '';. const gtm_preview = gtmSettings.environment_id ?? '';. gtm_environment = `&gtm_auth=${gtm_auth}&gtm_preview=${gtm_preview}&gtm_cookies_win=x`;. }. config.tagIds.forEach(function (tagId) {. const script = document.createElement('script');. script.async = true;. const dLink = dl != 'dataLayer' ? `&l=${dl}` : '';. script.src = `https://www.googletagmanager.com/gtm

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1057)
Category:	dropped
Size (bytes):	1058
Entropy (8bit):	5.222098068088748
Encrypted:	false
SSDEEP:	24:4lL4aQNFCDTBIJm3s/v0klLZMsHwowkZFcqTc1hnn0GcX6ScKCv:4XQN7mynMsHwVWFcqTc1hnn0NXiv
MD5:	0A881449E78A55AF745EDBA35E31D922
SHA1:	37EE4D0586F8095173079FCEE26A7117C95B01FC
SHA-256:	774A1465598246FAB7D99FBAFE218C04CFAB9BD0EAB97ABC694640942CA2CBAB
SHA-512:	F2013ADECA33502D8FBC7AE0CB1AE18A2D94F67037505DFEBF05CE337BBB41F0263C80B2AE89253F98C16E53C6652AEB5D8DBE9A69308CA4C06560CB84C2F8EA
Malicious:	false
Reputation:	low
Preview:	!function r(e,t,n){function o(u,f){if(!t[u]){if(!e[u]){var c="function"==typeof require&&require;if(!f&&c)return c(u,!0);if(i)return i(u,!0);var a=new Error("Cannot find module '"+u+"'");throw a.code="MODULE_NOT_FOUND",a}var l=t[u]={exports:{}};e[u][0].call(l.exports,function(r){var t=e[u][1][r];return o(t?t:r)},l,l.exports,r,e,t,n)}return t[u].exports}for(var i="function"==typeof require&&require,u=0;u<n.length;u++)o(n[u]);return o}({1:[function(r,e,t){"use strict";r("./index").polyfill()},{"./index":2}],2:[function(r,e,t){"use strict";function n(r,e){if(void 0===r\|\|null===r)throw new TypeError("Cannot convert first argument to object");for(var t=Object(r),n=1;n<arguments.length;n++){var o=arguments[n];if(void 0!==o&&null!==o)for(var i=Object.keys(Object(o)),u=0,f=i.length;u<f;u++){var c=i[u],a=Object.getOwnPropertyDescriptor(o,c);void 0!==a&&a.enumerable&&(t[c]=o[c])}}return t}function o(){Object.assign\|\|Object.defineProperty(Object,"assign",{enumerable:!1,configurable:!0,writable:!0

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	downloaded
Size (bytes):	418463
Entropy (8bit):	5.636786351783985
Encrypted:	false
SSDEEP:	6144:D2GDFhLGLgB40orAzWRSR9cM8rT/+2zUZ9Or24AvP:K8FhIc40or68mYg
MD5:	C41F578EFE7C1833F073B8E0ABAAF441
SHA1:	437292F3AC024089453D4A9E754D60DB45610CA5
SHA-256:	8695BA1852C97201340CE1C88B6359B1EA18794028A15848956EC99A5A26B201
SHA-512:	3EB60489D6FF5274AC53732A74D079F03CFA7F2DBC509BB814D33E177103D707474F273F79C2AB5C0865AB83D038718839E129A95D36E4C8DA789A4286F00305
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-65SMPXQ279&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":14,"vtp_value":true,"tag_id":9},{"function":"__ogt_ip_mark","priority":14,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":11},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":12}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1830), with no line terminators
Category:	downloaded
Size (bytes):	1830
Entropy (8bit):	5.031095557238114
Encrypted:	false
SSDEEP:	48:lhESAG6gv/lMMxVnIFNPwa1ny/Y/87WsC3QP:jE7GJ/vpC0YKP
MD5:	4B6D3C28597A87B540CD1CC4A951402C
SHA1:	798C12342EA36DAC50D387A33B0B1D9C1CF64AEA
SHA-256:	A4C4C16266AFBF15B07A0CEAC0998C9A66152EC437731896062F72ABF771CCD3
SHA-512:	6DCCE0ED90615D0F75695CCCD60B8D97D7F483C4BC8B46B924BAC5D1390FAAC5C8B981514817EE89F07C16CA80792F1B3E9BB00075523339801288287EFE88DF
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/assets/vendor/loadjs/loadjs.min.js?v=4.3.0
Preview:	loadjs=function(){var h=function(){},o={},c={},f={};function u(e,n){if(e){var t=f[e];if(c[e]=n,t)for(;t.length;)t[0](e,n),t.splice(0,1)}}function l(e,n){e.call&&(e={success:e}),n.length?(e.error\|\|h)(n):(e.success\|\|h)(e)}function p(t,r,i,s){var o,e,u,n=document,c=i.async,f=(i.numRetries\|\|0)+1,l=i.before\|\|h,a=t.replace(/[\?\|#].*$/,""),d=t.replace(/^(css\|img\|module\|nomodule)!/,"");if(s=s\|\|0,/(^css!\|\.css$)/.test(a))(u=n.createElement("link")).rel="stylesheet",u.href=d,(o="hideFocus"in u)&&u.relList&&(o=0,u.rel="preload",u.as="style");else if(/(^img!\|\.(png\|gif\|jpg\|svg\|webp)$)/.test(a))(u=n.createElement("img")).src=d;else if((u=n.createElement("script")).src=d,u.async=void 0===c\|\|c,e="noModule"in u,/^module!/.test(a)){if(!e)return r(t,"l");u.type="module"}else if(/^nomodule!/.test(a)&&e)return r(t,"l");!(u.onload=u.onerror=u.onbeforeload=function(e){var n=e.type[0];if(o)try{u.sheet.cssText.length\|\|(n="e")}catch(e){18!=e.code&&(n="e")}if("e"==n){if((s+=1)<f)return p(t,r,i,s)}else if("prelo

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	4305
Entropy (8bit):	4.565502257431684
Encrypted:	false
SSDEEP:	96:+WZMdOYZ7xmSW0mPyhx2soRRoy44lZKDMnAUn4TouX:+UGdxmuiyhYsCyyhiDOAy486
MD5:	355F4F1CEB77743CA3D22BD365A10D2B
SHA1:	3D339F12D7097AA04CBD4AD71528DEDAF7A39EB3
SHA-256:	E4F48E1F5558252EBA1D25BE60A35A35A024390CF4970E0652B9E654F9E0302B
SHA-512:	C2E79CE0BDE097173666F6A2B84D2E9E318CB7B93DEA2DE875056E9E3FD49843415260AF9B48E52B444543042680F53104C49A47268D8BCAF0BAD2DBC0548496
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Adds an HTML element and method to trigger audio UAs to read system messages.. . Use {@link Drupal.announce} to indicate to screen reader users that an. * element on the page has changed state. For instance, if clicking a link. * loads 10 more items into a list, one might announce the change like this.. . @example. * $('#search-list'). * .on('itemInsert', function (event, data) {. * // Insert the new items.. * $(data.container.el).append(data.items.el);. * // Announce the change to the page contents.. * Drupal.announce(Drupal.t('@count items added to @container',. * {'@count': data.items.length, '@container': data.container.title}. * ));. * });. /..(function (Drupal, debounce) {. let liveElement;. const announcements = [];.. /. Builds a div element with the aria-live attribute and add it to the DOM.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Attaches the behavior for drupalAnnounc

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	750
Entropy (8bit):	7.619296174355934
Encrypted:	false
SSDEEP:	12:3WZnrGhYbu3pgZBFc0KvsK4WeUQH00U7JhEcA38eRnIl0jyot7IRyfkcstzSiJoL:3QrxP/wmWeUQU0U7JhE9bxDWDZGpN
MD5:	1F793F7CF7877BCE5566CB5446093EFC
SHA1:	EF83C8F4773452CFF1EF42F97E2520E14E4F1120
SHA-256:	211D20A0304F7D172DA5B2D4DDC7303D65FBF2C8F040493448D0FDE551079BD0
SHA-512:	6F74C60FC2F42656B1C9320319F267320FC63B38B658F676AFB358F0C4F9C6B4F877CBA7F628470542FCF5864BB271DEDCC1C49D5ECCA5A0D0C3066F826D5054
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH.....p].V.....\|K9XB...R+..0.\+...n.6..{..O.0o2...i.H.<.....Z.L..Q.\.....Q...b]...tI.{.....X.@....;.w..)%b..%G.....x..<....x..q?...2.. .Paa...t...@.....M....W..}.m..;..VP8 ........... .>1..C.!!... ....N.B8..?.?f....h.q2Q.....W..p..'..`.@.....@...I...._.o..e_.h.Y..5.G.9.nR.....$.....E.d>rf...[...o[...1N....<...8#..@.3.......'..<.W..w..u...M.t.......4F\....(.v{.-@r.#...w......).I.+....5...><o.'.s.j..$..l3..e}lG.)....v{...@.@e..kl.z..O.+....%49.x.ua8..........W_.....%...N.8.w.O/.e.G...5K...I....{7....Q&....Fq.9d.~......\!T.(..EJ.Da...\ .W..9...E.]r=rr..w....D..rU....W....;9.}.Qe....X...\|(.'.vR..@z..S7.{.)........e...4O.?.0Z...1..C.6v.M..Y.bO.?..U.v....3...__x/".9\fvs....L.`.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 821x1260, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	21456
Entropy (8bit):	7.983624656424126
Encrypted:	false
SSDEEP:	384:7FgKJ0QEM0TWjJPcnpJtLrD61XYD2mOma6d6E3zLM6tV1ZUfI6WFXt6k6ZfVbiPU:qMETuILRSm5j4E35UWF96kA73oRttm
MD5:	2890DF73B0F01DDDC038CD69968B7133
SHA1:	9A341CBF09FB8530D6B59D59B23F894FAC812062
SHA-256:	10A41EC77BC17A89D7FFF4F3AA9EE47E7B521A0DDBA67ADE41649FFA028B8713
SHA-512:	39EC81AE19279F092FA014FBBDA6351535D70425010A6EA3B967D5B2C5B34D7561E42271D47077E53061B367F0DE89B073454D4A34D36BBDF70097D6F5EBCDC2
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-trakcer-banner-image-pod.jpg?itok=dp8fmKbM
Preview:	RIFF.S..WEBPVP8 .S..05...5...>m2.I$"..".x...gn....5.M.@'..:x%_..o.......3.+..u.+.....~].O....~....7./.?....r.R.K...#.....O...?.z.................j...z.....................?..y..n.u>..fuW........_....n.X/....y....W...{..../...?....Z........_.<..]...W....{..A...-.....?...{\.....D\)Q~2/.EA{.....U..T_....Q~2/.EE.....K..Z...R..dT_....Q~2/.EF...S........."..dT_....Q...../.EE......."..dT_A.0..r.K$.....7.@......... ..c.\7p./WrF..........."..dT_.A.8....a....K...u....TR...x).Y..* ..f).%.aW..:.T......"..,..I=.......Y.,x)G\.P..c.J:.B./...Pv.(PW.G6..F..UH../.EE.O.e<.. ..........X..`,........'z..;...{.........,I...Ev.2D.Go$.Q~2/.D...J>ZlPey>.S.p.E.......n.....E.)VE....0u\...?...R..dT_/v....j.#.q...{...<.Pov......s....=........It=.s.2....g.....E.:.G.../.U.p.E....;_..y.8.r.@ ...I.)Y.0..A..\|..s...>SO.r...-p1Z..'..^.n.....Od.Y ...k..<j....pD.....A...'\|....D..".$.T0!.R..dT[.....<...3.5!...P.&.O....J..#.].....9.B...h..<..4........N...n..9.p.E.....H..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1023)
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	4.958859561972113
Encrypted:	false
SSDEEP:	12:tXC081Vj06XASvXbRPBvVPperKruL2RGM1VsN2VlD6F9Rl12RoEwA+GSke44HJzE:jKFHLVPpKj2GMg9RTgwA+we44HJziFz
MD5:	CE42004730DF56C76A237F746AB3C9F8
SHA1:	75C1E4C29B66D2C4D4F11EAEA14BF74E245E5127
SHA-256:	ADBB9069BA75217C2D6806842B68EFF94AAB36A541D929C95FD5D581EADC9D4D
SHA-512:	A0134AB6FCED410B27E4D3676D08C1B8C9C08BFBC53A198B41DB2623FA8403362ADE0068EC1C25889AEA872A6C2084DA9CEEA87634DA2987A7FA232872FF075D
Malicious:	false
Reputation:	low
Preview:	!function(e,r,i){"use strict";function u(t){return t.target\|\|t}function a(t,n){return e.hasClass(u(t),n)}e.debounce=function(t,n,i,e){return i?r.debounce(function(){t.call(i,n)},e\|\|201,!0):r.debounce.call(this,t)},e.matchMedia=function(t,n){return!!i.matchMedia&&(e.isUnd(n)&&(n="max"),i.matchMedia("("+n+"-device-width: "+t+")").matches)},e.isBg=function(t,n){return a(t,n&&n.bgClass\|\|"b-bg")},e.isBlur=function(t){return a(t,"b-blur")},e.isGrid=function(t){return e.isElm(e.closest(u(t),".grid"))},e.isHtml=function(t){return a(t,"b-html")},e.image={alt:function(t,n){var i=e.find(t,"img:not(.b-blur)"),i=e.attr(i,"alt");return n=n\|\|"Video preview",i\|\|(t=e.find(t,".media"),i=e.attr(t,"title")),i?r.checkPlain(i):r.t(n)},ratio:function(t){var n=e.toInt(t.width,640);return(e.toInt(t.height,360)/n100).toFixed(2)},scale:function(t,n,i,e){e=Math.min(i/t,e/n);return{width:te,height:n*e,ratio:e}},dimension:function(t,n){return{width:t,height:n}},hack:function(t,n){return{paddingBottom:t,height:n}}

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4779), with no line terminators
Category:	downloaded
Size (bytes):	4779
Entropy (8bit):	5.432039998261811
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALw8LMpn02MGkdtRre81pecbt:9++2y7CpR8yfMBrVwcbt
MD5:	A3612075AEA5509A1B689E591F9A0CCE
SHA1:	63A9BD9A7CE89018AFA7822C215B426487042297
SHA-256:	82750F27BE03D4B9E57A91DFA19180873DDBB22DD81ABA6854DD7B7EA08C1E9A
SHA-512:	E4671E2AC937A7292A1CA7C722E58819D420DE38B7A9A1F0C35104FBCFCE616D8A06965EF054BE41C6847E8276A8F7E2BC96117D14215A3AA058999598C8DA36
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	116
Entropy (8bit):	4.789931298900708
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHWrXVxL5fH4JHjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAWz/5fYJHjWRZBAB
MD5:	3DF156A06B2C14B8CAF30045AF3BA634
SHA1:	A56CB5DF5B8DA70D6F2ECB7FA621FF9DE454BB90
SHA-256:	ABC7ED5944D211EAC003E38EB61FC5A60E83A590B1E12D60BACB29CA69F78A30
SHA-512:	A53890C54016BEB5ADFDDC052D04A58EA9A4A1F7220BB8CEF473E282A18F5C49A96B0F98847ACB612B89EC00CCC664EBC97D71B2682FBDDE647141711E39D0F2
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["YMzX7A0cgoMfht2i7PsLEb"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	244261
Entropy (8bit):	5.453901728691554
Encrypted:	false
SSDEEP:	3072:efLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713FN:efLeYc+PJxH8NNfFcrHurPK713z
MD5:	818B1FE2640571AF9DC68FD127B14F38
SHA1:	836DC599CD0462EB157119521EE84723BBB7551A
SHA-256:	B1B27D92DE22D509EBD21DE47D14975728928E881BD6C9D1695CC5D38F2942BD
SHA-512:	9F3F219787F765BF37C93B51321F3CCDFCAC8D9A6D5BCB9354423B8BA2BD6CA872C7A89B8AEEF762BF147AFFF0BC874A3ABF9C87B53C6D1B7D93F199BFC00B12
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	4.883897739925605
Encrypted:	false
SSDEEP:	12:UJahuDmIerkZRMoNWdnYbZbCuvEMhmYHpP2/SkmvNXmirN5fgv:hh7gcAYnYNuu8jCmmZlq
MD5:	C9D3346CA20F2076F07F97C755A39833
SHA1:	47C99924D38ECA0F69C110FE6154E17BD575D366
SHA-256:	F47D56F4E42A0FD576EE274454E24C085010B464B849CABE80041C88AAF45363
SHA-512:	1070D5D68F6932BB2A613E3298D6845D8E5F77BDD435990496C1CD8B82D8CDCA539C49F957A14370727BD9D26BC363B29E65587334010CD2046FBAB95D706CE4
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/drupalSettingsLoader.js?v=10.3.1
Preview:	/*. @file. * Parse inline JSON and initialize the drupalSettings global object.. /..(function () {. // Use direct child elements to harden against XSS exploits when CSP is on.. const settingsElement = document.querySelector(. 'head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]',. );.. /. Variable generated by Drupal with all the configuration created from PHP.. . @global. . @type {object}. */. window.drupalSettings = {};.. if (settingsElement !== null) {. window.drupalSettings = JSON.parse(settingsElement.textContent);. }.})();.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	149805
Entropy (8bit):	5.6004134683803555
Encrypted:	false
SSDEEP:	1536:Cnxj4bndhXdOU0tNo455wjdrm/bK+OTRMWMrvBDJTcitj+wf2EAeiPWMWNZVgdyo:Cnxj479OU03o4PwjhIBVT39ROyuvb
MD5:	5693E74A87CDFE0DD8CF9E97ABC2EC67
SHA1:	0912A92CEBFC4248B4D561F57B32D18135F9AD59
SHA-256:	79951B5BD4D729A2B2F4D380819F2C14BBCF26F21DB56A520189633467766CF4
SHA-512:	B0954FF6229C037AAEC67F6CC91889D3AD1C0D38AC3E53E61F3A98D49379FA43C1FF709C7017459B9BD416BCEB2236D90B24C17E072882C122360069DCD9E0E0
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},d=Object.prototype,n=d.hasOwnProperty,r="function"==typeof Symbol?Symbol:{},o=r.iterator\|\|"@@iterator",i=r.asyncIterator\|\|"@@asyncIterator",a=r.toStringTag\|\|"@@toStringTag";function $(t,e,d){return Object.defineProperty(t,e,{value:d,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{$({},"")}catch(t){$=function(t,e,d){return t[e]=d}}function u(t,e,d,n){var r=e&&e.prototype instanceof s?e:s,o=Object.create(r.prototype),i=new w(n\|\|[]);return o._invoke=function(t,e,d){var n="suspendedStart";return function(r,o){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===r)throw o;return E()}for(d.method=r,d.arg=o;;){var i=d.delegate;if(i){var a=_(i,d);if(a){if(a===c)continue;return a}}if("next"===d.method)d.sent=d._sent=d.arg;else if("throw"===d.method){if("suspendedStart"===n)throw n="completed",d.arg;d.dispatchException(d.arg)}else"return"===d.method&&d.abrupt("return",d.arg);

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20989)
Category:	dropped
Size (bytes):	21162
Entropy (8bit):	5.219703272963418
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirV9nNbRGlB9D45HjiWZ8xpOxvRVgD75zBY5vImg3+zopL9TidOg4:vLsgyziJ/0D45sxpOxvYD73Y5v9zwL9F
MD5:	E21A6649041EF6F5F1BF43F11946621F
SHA1:	01BCAEF811210DE0EA58E55E47FBEFD77BE5C442
SHA-256:	7D3B9482D4FB3B6AEAA089B08EB84381B5D3294C32C71BA320C4482BB4DBB8D5
SHA-512:	10D373506802082BB1121092294E2AC7CF5695024A2AC9CE3E5D0A83F71B8FE906C3D9B736C667ECBBA5A340D73E284F1CF710F393A1614D051BF4EE21AC8D87
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.019440290964103
Encrypted:	false
SSDEEP:	3:fnSVABnxqfRukpSedK0CsTvqkTHsEk+n:PV/kbHdvBuLQ
MD5:	5868D6B15830FE152D8B020C68FD2598
SHA1:	FED4D4DD5324862B71BF6A7383EDB85599562537
SHA-256:	57291619D0D4BDBF8D18FFCB1229EB5C0C27F00C5593ADD739444099BA1C3CFA
SHA-512:	A50FD2FAC14E24D141CD3BD25C35567081561CB9E3B3A3FC77B77BF6BCBD01AFB02BBFEFD6C1DE1D47B7FD22FD7C01E5A6556998E72F9571EF68EF33B38C1C46
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwnqvew70a1LSRIFDTnR0GwSBQ0ezfGHEgUNoV943RIFDb4tVMoSBQ0SwmFJEgUNtGA3XA==?alt=proto
Preview:	Cj4KBw050dBsGgAKBw0ezfGHGgAKBw2hX3jdGgAKCw2+LVTKGgQIIxgBCgsNEsJhSRoECCMYAQoHDbRgN1waAA==

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5695)
Category:	downloaded
Size (bytes):	5956
Entropy (8bit):	5.157623603340941
Encrypted:	false
SSDEEP:	96:4s+kqsBWGuJHTwh7TajKS1oq0NZzeL/uxJz8kdSN9tK9M7:Z5FuJHTwh7TBS1xbL/8z+eK
MD5:	4D852126EABD230DD9D1E77EDD3128D8
SHA1:	CF4F200C271284D4D581544E8633997D70E76834
SHA-256:	CEC04FE7936FCE4F9E63FD026C4466F66DEDA2E5FA9E1B6AAC3BFBB18D787B04
SHA-512:	342E0CE8655A06F07F1E5F573926B9CCD0D357A6555E04AD02CE63259595F8B4C18BB5ECD6C53AC81A4D8030D303C4B5037757446CC290EFA4D01A8B5AD8DC9F
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/stickybits/dist/stickybits.min.js?sliq8r
Preview:	/. stickybits - Stickybits is a lightweight alternative to `position: sticky` polyfills. @version v3.7.4. @link https://github.com/dollarshaveclub/stickybits#readme. @author Jeff Wainwright <yowainwright@gmail.com> (https://jeffry.in). @license MIT./.!function(t,s){"object"==typeof exports&&"undefined"!=typeof module?module.exports=s():"function"==typeof define&&define.amd?define(s):(t=t\|\|self).stickybits=s()}(this,function(){"use strict";function b(){return(b=Object.assign\|\|function(t){for(var s=1;s<arguments.length;s++){var e=arguments[s];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i])}return t}).apply(this,arguments)}var e=function(){function t(t,s){var e=this,i=void 0!==s?s:{};this.version="3.7.4",this.userAgent=window.navigator.userAgent\|\|"no `userAgent` provided by the browser",this.props={customStickyChangeNumber:i.customStickyChangeNumber\|\|null,noStyles:i.noStyles\|\|!1,stickyBitStickyOffset:i.stickyBitStickyOffset\|\|0,parentClass:i.parentClass\|\|"js-

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51937)
Category:	dropped
Size (bytes):	467534
Entropy (8bit):	5.554485646933187
Encrypted:	false
SSDEEP:	3072:XwQu7qvSDyHnwizDGHETfy0oCn045CptcY0/H8+ARYrOS2WrDmuD0C8rT/tNX5tg:XwQzGHgfy0ooozWiSRd0C8rT/7Xfq9
MD5:	E20B3F01896F44219566D79D0B25B216
SHA1:	FF3DD4D11D401613218FD2268382A78DEC16D3D0
SHA-256:	0E554B915A622E03E32D3D8371DED71EA729BE019C31422DACFCB408C9B04C12
SHA-512:	A7D824CF19CF596A25D73820C6F180A81271DA419C2B031407D7F4ED7C2FBBC893E24BCF9C71BA96D41744AE446BFAECD7269B46E112C76EA9B10900F21F2E5E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"120",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"gtm.element.parentNode.parentNode.dataset.parentpin"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementClasses"

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	8446
Entropy (8bit):	4.543284608081913
Encrypted:	false
SSDEEP:	192:SJqwEGJSeqbpqh+xZFVV4y8zuI9UpjDC8mKgZ0ZjL5sy1bH9xF3U39EjdVx69:SJZEx7rrV/8qp/mrQjLt1Bn5Ve
MD5:	1E4426D764C1309842C3810174F0730D
SHA1:	F24845B622A78FCD44CEC229A84A3FEC23CA139A
SHA-256:	0A61DEC2FD3D6D4FB688C4D0500F5F6268147C6771F2FE9E095D1CD074CA56FD
SHA-512:	72F7C840DFD8C29F4882469431CE2F9400870055752227645954C44FD4A459AFF21111826EAC7FA9FFE844CB63C38996D27EE93702910D4732E9A83F09BDBB79
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Message API.. /.((Drupal) => {. /. @typedef {class} Drupal.Message~messageDefinition. /.. /. Constructs a new instance of the Drupal.Message class.. . This provides a uniform interface for adding and removing messages to a. * specific location on the page.. . @param {HTMLElement} messageWrapper. * The zone where to add messages. If no element is provided an attempt is. * made to determine a default location.. . @return {Drupal.Message~messageDefinition}. * Class to add and remove messages.. /. Drupal.Message = class {. constructor(messageWrapper = null) {. if (!messageWrapper) {. this.messageWrapper = Drupal.Message.defaultWrapper();. } else {. this.messageWrapper = messageWrapper;. }. }.. /. Attempt to determine the default location for. * inserting JavaScript messages or create one if needed.. . @return {HTMLElement}. * The default destination fo

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277)
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	5.060674328443428
Encrypted:	false
SSDEEP:	24:ekt6t/ZyyIGb1RmGPJR7tnJOLig+KGb1R8IRXiYqDVkn4KxBr:eyyIGbCGbtJOLEKGb1VDq3st
MD5:	CE982BA885BC71901074B4453BF3917A
SHA1:	1C44364024B0791A8363276225FB7D59955212E1
SHA-256:	1D137F9B816994FF3DD240EF04942EBF47C48131C32B0ACC640DB3065755D496
SHA-512:	DCB975832F9E7B61622C78ED3E03838CEAEE87E7CE7028ADDE2AF7B4A8B1EC7B4BFA3C00D345CEA0BB2DF9E21D775B1BB9B9119102575D8B88A591A53E1BB37B
Malicious:	false
Reputation:	low
Preview:	/! @drupal/once - v1.0.1 - 2021-06-12 /.var once=function(){"use strict";var n=/[\11\12\14\15\40]+/,e="data-once",t=document;function r(n,t,r){return n[t+"Attribute"](e,r)}function o(e){if("string"!=typeof e)throw new TypeError("once ID must be a string");if(""===e\|\|n.test(e))throw new RangeError("once ID must not be empty or contain spaces");return'[data-once~="'+e+'"]'}function u(n){if(!(n instanceof Element))throw new TypeError("The element must be an instance of Element");return!0}function i(n,e){void 0===e&&(e=t);var r=n;if(null===n)r=[];else{if(!n)throw new TypeError("Selector must not be empty");"string"!=typeof n\|\|e!==t&&!u(e)?n instanceof Element&&(r=[n]):r=e.querySelectorAll(n)}return Array.prototype.slice.call(r)}function c(n,e,t){return e.filter((function(e){var r=u(e)&&e.matches(n);return r&&t&&t(e),r}))}function f(e,t){var o=t.add,u=t.remove,i=[];r(e,"has")&&r(e,"get").trim().split(n).forEach((function(n){i.indexOf(n)<0&&n!==u&&i.push(n)})),o&&i.push(o);var c=i.join(" "

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7805
Entropy (8bit):	4.971498929339856
Encrypted:	false
SSDEEP:	48:YJEuVa3LoknEzV2ZZbFo3AEYVNVxiEL5V6TVoAGhSoCEh2jV619Fo1l8q3EbxVg9:+EVBEYlEKWELy+CEU4grEbJurEq9p
MD5:	B62F1F44DF0BB04D52ADE4AC860B3139
SHA1:	0383CB421FC441CDC8E5E3FB642B17A6EA6C33D9
SHA-256:	0084F5ADB730EF42B4E544A1CE12CD44EB2E5E017187C62024C66E2B48F0F863
SHA-512:	02186B49B972A0AF8F69ECE7CF433296D91F0C11A706EF9E6055A692EF266377CA91EB04ED9EE7A47E800C1603A6C3D532795FAADD6C5B6E9640FE060D1A365D
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/en/sitewide_alert/load
Preview:	{"sitewideAlerts":[{"uuid":"0bf1e034-c658-4be4-a971-9e4b6b68fc0f","dismissible":true,"dismissalIgnoreBefore":0,"styleClass":"alert-blue","showOnPages":["\/en\/test-page"],"negateShowOnPages":false,"renderedAlert":"\u003Cdiv class=\u0022sitewide-alert alert alert-blue\u0022 data-uuid=\u00220bf1e034-c658-4be4-a971-9e4b6b68fc0f\u0022\u003E\n \u003Cdiv class=\u0022container theme--alert-template\u0022\u003E\n \u003Cdiv\u003E\n \u003Cspan\u003E\n \u003Cdiv class=\u0022sitewide-alert__message\u0022\u003E\u003Cp class=\u0022mb-0\u0022\u003EThis is a test of the promo banner on Purolator.com on a test page, nothing else to see here. \u003Ca class=\u0022btn-variant-3 btn\u0022 href=\u0022\/en\/home\u0022 data-entity-type=\u0022node\u0022 data-entity-uuid=\u0022264f6cea-fc66-407b-97e7-78b844c1ce76\u0022 data-entity-substitution=\u0022canonical\u0022 title=\u0022Home\u0022\u003EClick here\u003C\/a\u003E\u003C\/p\u003E\u003C\/div\u003E\n \u003C\/span\u003E \u003Cbu

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.789931298900708
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHWrXVxL5fH4JHjWRQMBWHjV:YGKY6ZBAJ70MT6ZBAWz/5fYJHjWRZBAB
MD5:	3DF156A06B2C14B8CAF30045AF3BA634
SHA1:	A56CB5DF5B8DA70D6F2ECB7FA621FF9DE454BB90
SHA-256:	ABC7ED5944D211EAC003E38EB61FC5A60E83A590B1E12D60BACB29CA69F78A30
SHA-512:	A53890C54016BEB5ADFDDC052D04A58EA9A4A1F7220BB8CEF473E282A18F5C49A96B0F98847ACB612B89EC00CCC664EBC97D71B2682FBDDE647141711E39D0F2
Malicious:	false
Reputation:	low
URL:	"https://tags.srv.stackadapt.com/saq_pxl?uid=pqtuA6772BJLS3IPc6D-RQ,%20qCa8YLMEWX0Q4X5lgYDF6Q&is_js=true&landing_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&t=Track%20a%20Package%20or%20Shipment%20%7C%20Purolator&tip=UEz8gC6aLzZ0XjEClX7upqXQNhavB7_6utODP1m4ZqY&host=https%3A%2F%2Fwww.purolator.com&l_src=&l_src_d=&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s&sa-user-id-v2=s%253AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc&sa-user-id=s%253A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE"
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["YMzX7A0cgoMfht2i7PsLEb"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1642
Entropy (8bit):	7.825552121311043
Encrypted:	false
SSDEEP:	24:oNVKgcwbM34icLAd5oehL6n1jv/JRpKIg4LH2fFlS+Wqm/NGnpbp7H7PW5dDZMTP:oNMgNM3BGyTL2/nBLWNlWtEnUaT0U
MD5:	295E04CC4B99728AF23978C96761FCF9
SHA1:	6473593630D987E40ED02BE00CD5719F886DFB48
SHA-256:	8F16304615F6482D04DC05935ED80E8F04969F994BA05BACA470912896E80972
SHA-512:	7F16A48AE7267A9E99BEC6800E81AAE1C78056FA3A07C2EA7C19FDBBF7DFE21EBE4AAB7D5965D29F15DC540219D62C3C1365C32142FA51CE1E6335BC672A6D33
Malicious:	false
Reputation:	low
Preview:	RIFFb...WEBPVP8X........V..;..ALPH......h.!Y1.m.m.m.m.m.fDf......$.5.s...j.<..-d..i..Q..l5v.U...xe...\|\L...G...:.qsxOmI..c.r...=...Og..". a#.........L..:.....t.9S.T.M.kjzt......@z..)@..s5.Qk.....k.m..8.o<...B.S+R.~..h.faK.W.D..T...B..4......G..S.T~L....qNCp...4....>2.+.4...C..$&vz..p.IZ.{jAwOy>.CT....8i....:..a.\+.Q..Rg&>.T...eJ...p.I..4........>.u..A....pm..uF.+CPi.S.yt...i.:e.....M...%.\|.g..G...]....:s.A...`5........z..3.AYg.Y}.H..~..Y...VZ...=)W......JM...."..j...Y.i)#K{....m....Mc.8.AYg.ne>U.^=.F* ...:.H..V..B.^..b[...s.y..t......[.Jd.......f..1.AYg'9.{..G4..;Y.F....>...:........w^.J...9DUO.....4.....N<......z....c...n.".9e.....\....0...\..).hkV..w;..i..:...... wu.F...e\|.\|k..L%..9....j#>FT..S.....}.09..u.}../L;L.y...u.d...=.=.2._m..P.L.Ni...#......`......z...9.VP8 $........*W.<.>1..B.!!...H ....8..A~5...1I:......>.}....n8...^................`?Q..z.~.u.z.~........g.O.....+.g.'X.[.N...3at...T1&.q.v.=.:. .J..~..p.....~.Q.I.....

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1057)
Category:	downloaded
Size (bytes):	1058
Entropy (8bit):	5.222098068088748
Encrypted:	false
SSDEEP:	24:4lL4aQNFCDTBIJm3s/v0klLZMsHwowkZFcqTc1hnn0GcX6ScKCv:4XQN7mynMsHwVWFcqTc1hnn0NXiv
MD5:	0A881449E78A55AF745EDBA35E31D922
SHA1:	37EE4D0586F8095173079FCEE26A7117C95B01FC
SHA-256:	774A1465598246FAB7D99FBAFE218C04CFAB9BD0EAB97ABC694640942CA2CBAB
SHA-512:	F2013ADECA33502D8FBC7AE0CB1AE18A2D94F67037505DFEBF05CE337BBB41F0263C80B2AE89253F98C16E53C6652AEB5D8DBE9A69308CA4C06560CB84C2F8EA
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/es6-object-assign@1.1.0/dist/object-assign-auto.min.js
Preview:	!function r(e,t,n){function o(u,f){if(!t[u]){if(!e[u]){var c="function"==typeof require&&require;if(!f&&c)return c(u,!0);if(i)return i(u,!0);var a=new Error("Cannot find module '"+u+"'");throw a.code="MODULE_NOT_FOUND",a}var l=t[u]={exports:{}};e[u][0].call(l.exports,function(r){var t=e[u][1][r];return o(t?t:r)},l,l.exports,r,e,t,n)}return t[u].exports}for(var i="function"==typeof require&&require,u=0;u<n.length;u++)o(n[u]);return o}({1:[function(r,e,t){"use strict";r("./index").polyfill()},{"./index":2}],2:[function(r,e,t){"use strict";function n(r,e){if(void 0===r\|\|null===r)throw new TypeError("Cannot convert first argument to object");for(var t=Object(r),n=1;n<arguments.length;n++){var o=arguments[n];if(void 0!==o&&null!==o)for(var i=Object.keys(Object(o)),u=0,f=i.length;u<f;u++){var c=i[u],a=Object.getOwnPropertyDescriptor(o,c);void 0!==a&&a.enumerable&&(t[c]=o[c])}}return t}function o(){Object.assign\|\|Object.defineProperty(Object,"assign",{enumerable:!1,configurable:!0,writable:!0

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2538
Entropy (8bit):	7.893827425262821
Encrypted:	false
SSDEEP:	48:5P4t/poDwtYYWqU+RzwzxXbLCJq8quFhZ3JGdzD3o5K2ig1MhSvfZG:rDwKrqlRQbYBs5D3oI23aSXk
MD5:	090ACE433B65792BF872BD905A910807
SHA1:	8365798DD63518D343B73043D24240C08771713F
SHA-256:	63903DEAF110A044B3269A9F829926C1E7CACC01639691022174AEFF62F5412E
SHA-512:	177E8002059F777FBCA9B125293954D3355D9E859FEA8577BA1CB4306CD978D8F5F8BE7BD9535FD35C9ED59D24B5EBC5F894C0878AD21F66F6BC5B6BEECD5441
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-tracker-banner-image-phone-location.png?itok=GXOYW421
Preview:	RIFF....WEBPVP8X........j..y..ALPH......Sm{U..$D.."!....X..$ ......]...[\|L.X..s.D...{...:..^..+..K....k..:..\|.. ?......U.g%.<......N........B._I.3m._.#.B(.M._I...Q.$O_..t....{......z..F......0.....v.H.f....~j.]Ai..C.6...P...M..[...&K..K..$.}..P,....h..IR.F..6[m...#.T.6...;.!...l+.,e......P....b..V%i.!..I.N..6.....e.A.m.I'.m.zUbH.8.Z..j.R(..&I.b..v.2[.$[/..lK0.V;..l.T......oHR.........h.../t........._E..........-S4.8l..jYR.9..t.@/V$M......`..I....,V$%.&.m...&I.:p.l[(.`.fY+.$I..)..u`H.-...@2.....K.v....a.f[$..I...0..H..$..bi.[,.$%.C.....ha$`.7[L.@5Me.a.."O..E...s.......P.J...F.j......A.\|...9..V.m...........m]1.....H...0~...\|y..w..Wu=._.<.=...a.z~>.R.....z.[...:.[..VP8 &....&...k.z.>1..B.!!...l .........9....7-......i.Y#..G...~W}.........._..Og..?.=.z..%.......o.;.g..L.......i...`.E.U.......Y.> 9.r....^c4.....}..T..v.......M..$...3...e>/....q.......;O....%.n..k1.$.`$m'..?.T.-U.......\._+.....hD...+..~..H8..O..U....8......m..6S:.%...@wq.N.F..R..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21057
Entropy (8bit):	4.685774283501183
Encrypted:	false
SSDEEP:	384:Z5cxj/U6RKSKfu5133jKsdvp6ZBoUJ1er3Fk2yFp97TXIMDNIADXPiMEtn:Z5ULRKSKG5133jKaALfEtn
MD5:	9F1FD3E4D2B79B105DBB8C8694D4410B
SHA1:	11F7E2380A645215F0107FE59ABB882EE273CA9B
SHA-256:	2CCB66ECEB05E6D15CA71A6605EC4E75DBB7D25F97CFE15409204FA2F7E212DF
SHA-512:	C78CCC7DE2310675623CC0C98BD7FCA1F30F17307990E29A872990F1D22FF7D6F07039A1B417B1DC354A814421045B35C484EABB5BE77D6F5F73B66DEF89F627
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/drupal.js?v=10.3.1
Preview:	/*. @file. * Defines the Drupal JavaScript API.. /../. A jQuery object, typically the return value from a `$(selector)` call.. . Holds an HTMLElement or a collection of HTMLElements.. . @typedef {object} jQuery. . @prop {number} length=0. * Number of elements contained in the jQuery object.. /../. Variable generated by Drupal that holds all translated strings from PHP.. . Content of this variable is automatically created by Drupal when using the. * Interface Translation module. It holds the translation of strings used on. * the page.. . This variable is used to pass data from the backend to the frontend. Data. * contained in `drupalSettings` is used during behavior initialization.. . @global. . @var {object} drupalTranslations. /../. Global Drupal object.. . All Drupal JavaScript APIs are contained in this namespace.. . @global. . @namespace. */.window.Drupal = { behaviors: {}, locale: {} };..// JavaScript should be made compatible with

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.012188403968661
Encrypted:	false
SSDEEP:	3:GnxqfRY:skq
MD5:	1BC93425CADA3C5733F297DE53350628
SHA1:	65D6A53BFF24D1839FC84D7E88FAEB05CEE83D47
SHA-256:	8A87C06E19C73DF0796BC2A042DEEAD45D789B234ED73024211527599E399867
SHA-512:	9E743D8B8DB901935FCE0FE1B07CF64A3E891CCC56D823240C363944712B1B6F9CA01A44F07DBED17E246682FE66C45D16650AB70ECEC01C23B721ADD0C257FA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkbeVToWQIoXhIFDTnR0GwSBQ0ezfGH?alt=proto
Preview:	ChIKBw050dBsGgAKBw0ezfGHGgA=

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-65SMPXQ279&gacid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=170407035
Preview:	<html></html>

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (21436)
Category:	dropped
Size (bytes):	22248
Entropy (8bit):	5.327841578112157
Encrypted:	false
SSDEEP:	384:qWNDWhDNyyu0sfL7mQYDbJF3C95D/EeD0ere0t4zveHcCMdNVb:qWNDW9NUfmQxrAeYerehzveHcCcj
MD5:	28F36AEAEF25C3A5AC2F420F43A31B2A
SHA1:	101BBACA291849AFCCD883ACCB24393BAAE90628
SHA-256:	A96005EA0DBACB4833411C5B2E917A29656BFA3D7540EA948D82183D10491409
SHA-512:	8B92A9E29E08C8931D0137F7A7099FBAA77ECC50D4B95B06AC47D07BE52415468DBF9DED9D1ECB483E4B33BDCD6CB6FEDEAA17AC535C67AD2047AC4041A6439D
Malicious:	false
Reputation:	low
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "jxMQUvIvFKBhEixX8jzw5w_rI4OGIzkTKZzDNg3MQb8". . var userIdCookieValue = "s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE". var userIdV2CookieValue = "s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc". var userIdV3CookieValue = "s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000. var accountID = ""..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,total_secs_passed:0,hidden:!1,host:encodeURIComponent(window.locat

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64275)
Category:	dropped
Size (bytes):	102203
Entropy (8bit):	5.337179727861248
Encrypted:	false
SSDEEP:	1536:JGBGzXnifBbKkadGBMjIcAHh8wYoTzayJFm:JGI7n6BbKkad9i8gA
MD5:	34DBB3704D6BE5E1F2F442368E7139A9
SHA1:	A0C1C62776A465616F3A78EE86CB1AEB3E92AC82
SHA-256:	9F2E080F1C25FF244599D2EF8DEAE4D2C99761E3CADA2F8ACECA25E503952100
SHA-512:	A56921C79DEA55A4813ED5C77BD8B9B8AE89375C61FC9B139F8030A94BD3C1FC0B626E1A46E2F67A0465DDECAF8B5EC337B2915621F8180D57021098E7D21B69
Malicious:	false
Reputation:	low
Preview:	//@1729112303023.var dataLayer=void 0!==dataLayer&&dataLayer\|\|[],app={tracker:{ui:{template:{},event:{}},status:{},config:{},init:{},service:{},util:{},data:{},model:{},mapUtil:{},queue:{summary:{}},analytics:{},timer:{authenticate:{},summary:{},detail:{},subscribe:{},resolve:{}}}};!function(u){app.tracker.analytics={summary:function(){var a={event:"search-summary","search-exceptions":null!=app.tracker.model.getSearchErrors()?app.tracker.model.getSearchErrors().length:0,"search-results":null!=app.tracker.model.getSearchResults()?app.tracker.model.getSearchResults().length:0,"query-duration":(app.tracker.timer.summary.end-app.tracker.timer.summary.start)/1e3};window.dataLayer.push(a)},error:function(){var a={event:"search-error","search-exceptions":null!=app.tracker.model.getSearchErrors()?app.tracker.model.getSearchErrors().length:0,"search-results":null!=app.tracker.model.getSearchResults()?app.tracker.model.getSearchResults().length:0};window.dataLayer.push(a)},detail:function(){var

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51937)
Category:	downloaded
Size (bytes):	467534
Entropy (8bit):	5.554510288880151
Encrypted:	false
SSDEEP:	3072:XwQu7qvSDyHnwizDGHETfy0o+n045CptcY0/H8+ARYrOS2WrDmuD0C8rT/tNX5tg:XwQzGHgfy0oMozWiSRd0C8rT/7Xfq9
MD5:	27F4B4D6A5C49FC531E56CFBB133B109
SHA1:	FD41A5CEE9496B3CEC32B6CEE96BFDFB329BB438
SHA-256:	0A5A415794250EDE2022FD011E2E2FD2BA284F77D003DB11DDDA138B77CA5B23
SHA-512:	0F956AA4B46DFA6040907ADA603707C7D40AC575496B5D42F1FC345F3393A1D35B7F2809CDBB169440EBA0796638DBFA9823F75ADA8B09960FB4C89045132FFE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WLL676
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"120",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"gtm.element.parentNode.parentNode.dataset.parentpin"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.elementClasses"

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (591)
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	4.796083480550535
Encrypted:	false
SSDEEP:	12:5mN/DFelH/O9ZF6/H/6/D+3GQR4ng2RW3LtfJzI5MIIvJuT:+8lHG9bIfy+3GQR4dRWb+zT
MD5:	350ADDF379339FB97F1BEF4F8CD83896
SHA1:	F5EE004A6376F37665783FAE10089C6A116C12C0
SHA-256:	701EA6DCFD26B2D61367AEAE7C618FFEAB6E2FF8E6B571907BCB9E7A929EAC9C
SHA-512:	00C8826EEE1917D15D60DBC829407160652C14878AC34DBD85DEE7B9902FACEF38F3B1D88C2301AD3694456AA6E222D44FADD5CB2173392F7D695CA0C8E67D22
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/plugin/blazy.dataset.min.js?sliq8r
Preview:	!function(i){"use strict";function o(t,n,a){return i.chain(t,function(e){i.isElm(e)&&i.each(i.toArray(n),function(t){var n,r="data-"+t;i.hasAttr(e,r)&&(n=i.attr(e,r),i.attr(e,t,n),a&&i.removeAttr(e,r))})})}function e(t,a,u,c){i.isUnd(c)&&(c=!0);return i.chain(t,function(t){var n,r,e;i.isElm(t)&&(n=t.parentNode,r=i.equal(n,"picture"),e=null,c?e=r?n:t:r&&(e=n),i.isElm(e)&&(e=e.getElementsByTagName("source"),a=a\|\|(r?"srcset":"src"),e.length&&o(e,a,u)))})}i.mapAttr=o,i.fn.mapAttr=function(t,n){return o(this,t,n)},i.mapSource=e,i.fn.mapSource=function(t,n,r){return e(this,t,n,r)}}(dBlazy);.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1989)
Category:	downloaded
Size (bytes):	81185
Entropy (8bit):	4.81182596644164
Encrypted:	false
SSDEEP:	1536:LriZHR7uwW7q+KAJPN+vrGyzFG99PjGmh3AUNkhcA49gSmGkzYYTfb7h4cl4HUAt:LriZHR7uwW7q+KAJPLvSqKrnCRS6VZYc
MD5:	B7A8EC9D525D2B968D7CBBAA356A02B2
SHA1:	062DDBB2F1D48C2D6C484C68F4FFB6449996A317
SHA-256:	54688EB20F8A142BF775D21AE34CF2DD467119392DF27D5EE6A00666E4DED8B1
SHA-512:	9C35BB83222DA68FDDAA80B5EDB06C56D199AB280EC4770CF5CBA8D7C274AFE3124AD8E65244AA16DE1B74D3C2111F86022620B136847E78D8192255A6EA07CA
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/en/shipping/tracker?pin=335008262560
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#">. <head>. <meta charset="utf-8" />.<noscript><style>form.antibot * :not(.antibot-message) { display: none !important; }</style>.</noscript><meta name="description" content="Whether it's one package or multiple shipments, track your orders all at once by entering your tracking number, PIN, or Reference here." />.<meta name="keywords" content="package, tracking number, track my order" />.<link rel="shortlink" href="https://www.purolator.com/en/node/96" />.<link rel="canonical" href="https://www.purolator.com/en/shipping/tracker" />.<meta name="rights" content="Copyright .{date:html_year] Purolator. All rights reserved." />.<meta property="og:site_name" content="Purolator" />.<meta property="og:url" content="https://www.purolator.com/en/shipping/tracker" />.<meta property="og:title" content="Tracker" />.<meta property="og:updated_time" content="2024-07-17T13:39:02-04:00" />.<meta property="article:publishe

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	20212
Entropy (8bit):	5.058069278932544
Encrypted:	false
SSDEEP:	384:iryt6VGHf16wZC7CdWnDwbzRoiQ065CvDDOoN+oRtwP:irwXf16CC79UbzvmAq
MD5:	544F5A015788F889A5AB3F3FD2116E62
SHA1:	F2C1AC577359689513002C84918A5B7CA5395530
SHA-256:	EF538615724A429C1A5296A070502D185FE648F956345C694DE6123F7D3F935C
SHA-512:	12D1271CC683CA63D3D7C3FD99EDBC014B78E620ABEBEB914AC9103149B7B2A05194107A0B59273C0ED5E4702F72F80CD572A77B2BA6E01ABF3D5E317E892BD0
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/js/labels.tracker.en.json?null
Preview:	{"search":{"header":"Track a Shipment","tooltip":"<div class='display: none'>put html here</div>","instructions":"Enter multiple PINs  or References separated by commas.","icon":{"path":"/app/tracker/img/tracker-icon.png","alt":"Track a Shipment"},"placeholder":{"single":"Enter a PIN or Reference","multi":"Enter one or more PINs/References"},"toggle":{"single":"Multiple PINs/References","multi":"Single PIN/Reference"},"button":"Track Now","recent":"Show Recently Tracked","clear":"Clear","freight":{"label":"Track a LTL Freight Shipment","url":"https://www.purolatorfreight.com/scripts/cgiip.exe/reftrace2.htm?seskey=&language=ENGLISH&nav=top"},"nopin":"Enter a Tracking Number / PIN or Reference.","toolong":"Searh is limited to {MAX} characters","contactus":" or <a href='/en/resources-and-support/help/contact-us.page?'>Contact Us</a>"},"poly":{"date":"yyyy-mm-dd"},"errors":{"puroInternationalLink":"https://purolator.ts2000.net/Login/QuickTrack/?SearchOn=TrackingNumber&SearchFor=","pur

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.be180668.js", last modified: Tue Oct 29 22:21:36 2024, from Unix, original size modulo 2^32 83598
Category:	downloaded
Size (bytes):	27513
Entropy (8bit):	7.992802741759857
Encrypted:	true
SSDEEP:	768:RsfAgqyshviKsrwseSv7MjVtkHArfdNZY:Gogqyshv/srwSMRNrfdNS
MD5:	C5CAE4182177CA41C1337703E080917B
SHA1:	8811B0C530515A96A9B14BA2A0FB56B2121CEB5F
SHA-256:	4DB45A417932A655C15B3F5B228E0BB941C833ED54CB64C6F020AF7764A52FB5
SHA-512:	646BA8C37943CAB399F0565CB5C5BC82CE754D3E21E35573773655E02ACE3674AC04A76E2F35359F08F82B063B3D36009877BD0DA983D15A6C771A6F858E7535
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.be180668.js
Preview:	....._!g..main.be180668.js..\.o......b%...8.,.h{3`.[;,.... Pl:..Py..47.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;;...)^.$..:<.]..&.D.>l...G.y.^.\|X......7kz...M....pN3....2./..d..%.l>_...b.`.._..e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX...__..~_....Td...._..]#..u.]../.X3kK......<.R.(..8....E...Nl`.{..D..,.<..S+.#XTO........."2ZB.g,....zM......(s-h....v...s.c q..5K9Y..-........2.\....f;.L.B.r3BJ..1d.o,..I.c.a1..T..$..6ly....w....r9..6.z...M....6\...;.y..._@.7.....S.'[.. ..........lz.;.....O....#......J..._...._..................\|4>.M.G.......q0.V./..`.R.Xe.]....o1.b'Y..f..au.E.....Y...._..U-L..H........J...Br..j>...V............((A.{UY..}`....U....".s....t@.W$P.-..K...ZiVf#...Z.v.`..4..=.......B~...2.......L.\.'.@...].pw.zq..^..(.'..3.........4)L.,....<-.UT^.).XD.x...e`ML..O..&T..r.......{.~.......-Q.!s...2g..20-D.F.L.Xn.].Q...f..RJ.ZI.lN.m......~u..v.7%.#....m.Pn.v$4....v..M........>gT...0....Y%.).6s;+......vA.v.d.Z...p...C....x..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	960
Entropy (8bit):	4.832863815501617
Encrypted:	false
SSDEEP:	24:4oZlawomRVAtxGl6DgLuNJGIHGVwX931jxKaljxsq1t:4oZIwr3AK6DgsJ7xlll9sct
MD5:	6739DD9D2E1C3205A4DE81E528AF3EE8
SHA1:	E4D571F4F9EC566A8385DB66F21EC6E35242C11D
SHA-256:	923935D813106205B31D3953B21E34A007F32758EC0C3D2BA6DD3DDA1F8CF6E9
SHA-512:	B868AAD5359D537A7C4C372D413CA221642D01BB50F52979B2C93DD788D917F895DE6C10125E8185FEE29364ADC2032B758A4AF1D8C4A6B92FC3825221F4ECD3
Malicious:	false
Reputation:	low
Preview:	// Allow other JavaScript libraries to use $..if (window.jQuery) {. jQuery.noConflict();.}..// Class indicating that JS is enabled; used for styling purpose..document.documentElement.className += ' js';..// JavaScript should be made compatible with libraries other than jQuery by.// wrapping it in an anonymous closure..(function (Drupal, drupalSettings) {. /*. Calls callback when document ready.. . @param {function} callback. * The function to be called on document ready.. */. const domReady = (callback) => {. const listener = () => {. callback();. document.removeEventListener('DOMContentLoaded', listener);. };. if (document.readyState !== 'loading') {. setTimeout(callback, 0);. } else {. document.addEventListener('DOMContentLoaded', listener);. }. };.. // Attach all behaviors.. domReady(() => {. Drupal.attachBehaviors(document, drupalSettings);. });.})(Drupal, window.drupalSettings);.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	21057
Entropy (8bit):	4.685774283501183
Encrypted:	false
SSDEEP:	384:Z5cxj/U6RKSKfu5133jKsdvp6ZBoUJ1er3Fk2yFp97TXIMDNIADXPiMEtn:Z5ULRKSKG5133jKaALfEtn
MD5:	9F1FD3E4D2B79B105DBB8C8694D4410B
SHA1:	11F7E2380A645215F0107FE59ABB882EE273CA9B
SHA-256:	2CCB66ECEB05E6D15CA71A6605EC4E75DBB7D25F97CFE15409204FA2F7E212DF
SHA-512:	C78CCC7DE2310675623CC0C98BD7FCA1F30F17307990E29A872990F1D22FF7D6F07039A1B417B1DC354A814421045B35C484EABB5BE77D6F5F73B66DEF89F627
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Defines the Drupal JavaScript API.. /../. A jQuery object, typically the return value from a `$(selector)` call.. . Holds an HTMLElement or a collection of HTMLElements.. . @typedef {object} jQuery. . @prop {number} length=0. * Number of elements contained in the jQuery object.. /../. Variable generated by Drupal that holds all translated strings from PHP.. . Content of this variable is automatically created by Drupal when using the. * Interface Translation module. It holds the translation of strings used on. * the page.. . This variable is used to pass data from the backend to the frontend. Data. * contained in `drupalSettings` is used during behavior initialization.. . @global. . @var {object} drupalTranslations. /../. Global Drupal object.. . All Drupal JavaScript APIs are contained in this namespace.. . @global. . @namespace. */.window.Drupal = { behaviors: {}, locale: {} };..// JavaScript should be made compatible with

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4304
Entropy (8bit):	7.945325918513198
Encrypted:	false
SSDEEP:	96:6emrmRQLFh1MEaepU6uBkTwEWeJQGiEqHFnPOkCMiW:MrpzLT0ERHqHFPNcW
MD5:	4B1F8A29613C547C138331369D6549BD
SHA1:	7B58837F651F100B4AC4C4AD5A4DCE73D11BE697
SHA-256:	768C7BA10C27486DEE76EE5D207B64901CB95DB8309D08C7C18D21CA01D7DFFB
SHA-512:	EE8BC4093EC7F8C2F2E547767AFECBB07D277993BA666259DBEF7E5A763AB6C71954A60D1A96EA7F3EB4115650EDE592FD6425A4C94B62743645F31209F35A28
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........S..ALPH.....p.m[d...B.!.0.!..B.!...B.......'"&.g]...;]......h...M\.r.mb.....#}b.l....H.@.X.(m.....7.x..........%...q...h.%..<<k.....8......T...e.'.N.:...i..>Um.j...VP8 .....D.....T.>1..C.!.......Z@5l.d..1.....?...d.K....._..h..z....W......b.........?..R..~'.g...........q.e..?...^......_....?......!......._@.....s..........S>..O........p.....J.....O.....{8..._...?......../...?.....?......%..o........i.{.!...D.#..&.1S}L....T..........4:l..-.=..-....#A.....s...~."G.{Hq..O...Gs..@...X.96.e...Q.K....3.&............a..Bj6.>...&..0....F/.z.....XA.`c..5...K".x......5t..[.H~.}.<..J..5...H./...;...E....G (d...".u.^...K..K.t.i.W..I<.x. ...]..OX..............u..1...m....<P.........rb.~..5.}]..,......v.+1V..tC....vg.U.L.E.#...]M.....5.-.4....L-..9)..5.....O.aW.r..l]"j../...x.uo...b..L$.en..{s...P..;...z....a.Z.....4MY.....ht............e....UA....o.Ah....&{...v.....p...+z...6....u...}. ovfk.=!......?......'-Q

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	766
Entropy (8bit):	7.623105820374657
Encrypted:	false
SSDEEP:	12:2ge07vE2j85kU1Z7EkvrunUw4UxawfETmz0IqLMY+CMB5ZKFKnvd58U/jT8G8pol:ze07lj85J1GkzunLHaSETmIyCm5ZKFK/
MD5:	5A95059334505D7D22C64E831E2623FA
SHA1:	D15F7DFAB6FE5FF918B075575D056376660494BB
SHA-256:	01B584C69BE4E8710927759FA26959DE8EA345653F8C1117512D9B21E0CBA98F
SHA-512:	D7A599DC24E2012AFD8CC59B69F883DF87DBE84E8B0E8CC9851B8EC3453897757EF0DBC7CD9E35167B4FB01716083B684B8CF159615E39DA33429DB30E66AECF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........0../..ALPH=....?@&m...0.....g.5.$)....7.=..D...8..;......iBn^.Vl.`.:.o...VP8 ....P....*1.0.>)..B...Uv...B[./.@.enK.W...s......._m>...h....).s.........W.....S...t_. d.{...E........\.Y..'V.i.8...eN.iD.m.~iQ..lX.3..:z0.E.`=....H.\|...@_..5.."......V.y..@.1...wR..svFffC..y.-2....%..^.m...J.....N.....4..r#6.....,.0......d.._.&.8?Z...^.<..)...~....z......... .....].....a.e....0.....aw..Y...I....r..........(e...u7.../-."]..L.nJ!..}F...m.V?..y_wm..3_.....&JS.. .....^.B7%...b.y..;.Y.... j......>..".x.a.........Mh9Q...zZ..:.>aZ.X)(..J.2..z3X...u..\.<....Hh......6....Y....9.Q...'T}.<...$i..6.i.o.-.G..s....^....).g.nKO..Z.\|.q~O.\|.s..q%~Q..q6Q.1E%F/.....A?........B......A..U......=..g...a9.k..P..Z>}>....E.$.r.....

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5695)
Category:	dropped
Size (bytes):	5956
Entropy (8bit):	5.157623603340941
Encrypted:	false
SSDEEP:	96:4s+kqsBWGuJHTwh7TajKS1oq0NZzeL/uxJz8kdSN9tK9M7:Z5FuJHTwh7TBS1xbL/8z+eK
MD5:	4D852126EABD230DD9D1E77EDD3128D8
SHA1:	CF4F200C271284D4D581544E8633997D70E76834
SHA-256:	CEC04FE7936FCE4F9E63FD026C4466F66DEDA2E5FA9E1B6AAC3BFBB18D787B04
SHA-512:	342E0CE8655A06F07F1E5F573926B9CCD0D357A6555E04AD02CE63259595F8B4C18BB5ECD6C53AC81A4D8030D303C4B5037757446CC290EFA4D01A8B5AD8DC9F
Malicious:	false
Reputation:	low
Preview:	/. stickybits - Stickybits is a lightweight alternative to `position: sticky` polyfills. @version v3.7.4. @link https://github.com/dollarshaveclub/stickybits#readme. @author Jeff Wainwright <yowainwright@gmail.com> (https://jeffry.in). @license MIT./.!function(t,s){"object"==typeof exports&&"undefined"!=typeof module?module.exports=s():"function"==typeof define&&define.amd?define(s):(t=t\|\|self).stickybits=s()}(this,function(){"use strict";function b(){return(b=Object.assign\|\|function(t){for(var s=1;s<arguments.length;s++){var e=arguments[s];for(var i in e)Object.prototype.hasOwnProperty.call(e,i)&&(t[i]=e[i])}return t}).apply(this,arguments)}var e=function(){function t(t,s){var e=this,i=void 0!==s?s:{};this.version="3.7.4",this.userAgent=window.navigator.userAgent\|\|"no `userAgent` provided by the browser",this.props={customStickyChangeNumber:i.customStickyChangeNumber\|\|null,noStyles:i.noStyles\|\|!1,stickyBitStickyOffset:i.stickyBitStickyOffset\|\|0,parentClass:i.parentClass\|\|"js-

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1452
Entropy (8bit):	7.842868045050108
Encrypted:	false
SSDEEP:	24:BGfo3KiXU5yUTqHiKy4yFJYz8LGvvfDNji2z/+MJdQau/a6NZJ/gkdYzIZeSju03:BGfo37Unu9y4YjioO/d8RkkdtkSy8mQ1
MD5:	02B55647B632C3197616C713651E0987
SHA1:	EE0932AE7489DD9750A53C9936770175B206251C
SHA-256:	1E5A77AE4B6260007276BFEF669420C6F06E0C9B593D9E36CC3690589A904390
SHA-512:	F2575F3968DF8C71103B1F2BA9CF0767BA3852C648E871AA94594053CEF3D320691757086AA996240F3DBB85CFEBFA20DE05C85B7FCF4246235E9E7C7562ABAB
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-instagram.png?itok=_EWgc0LP
Preview:	RIFF....WEBPVP8X........0../..ALPH......d.i.6.......+NJ.....;#.T"b...e.....).P...K.c.S.m...'fJB..5%...u...=..>.=..T.7.Z.B].^y...c.8(.....(.g.W.).%o....@.x........A..O..`D<.R!RC...."3PY:}.8e...F...VP8 .........1.0.>1..B.!!...H ....X.o[...}.)..~.n.....z..I.-...;.........'X....W.'..._../...w9.#.+.j......n...;s[....>D...U...p../...=..n.........".......-.....8...<#\.3.= ..c...-r.Aq.....`..b\|.5. ...d*S(.m...z...O .6k..d..s.~..:?....x..6o......A..9>._.C..6...pUX....~.5..";...,.3..=...Y.1..8{!....".J\|......h)h.G.b.#.(.<...._..q...S....`..P]U..<.0..r...=bVc<..!.c.w.f.q..u.F..M!A..0...\.>....+......a^;..P.-`..9.IF...8..h6...x].k..7T.(.DM[...OH.....~...s......E....x....v......-.F~9#..0....^........pn.e....6b.D......P....h...tm`g.n. ?0.B\|.1.@h...i............HA...>q..,..Z...]...v.[.....z................&8._.a.m..+H.!w\|w..`:.....S..a..yCQ$L..5.B...$.Pl...0,.5.;.....I.rh.#...)5s.;>..z0C....`..k....u..VY..;..e..3..mc........].Km.....<.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4719)
Category:	downloaded
Size (bytes):	4756
Entropy (8bit):	4.9906462355096055
Encrypted:	false
SSDEEP:	96:+0Ix4wGZxFzn+7XjiDUGseXeZx6Yph99luQEFyFB1:+Zx4wG/WiDfxXeuY/PluQE21
MD5:	776CD2AA24C90629CD35B3C31F2C8417
SHA1:	34684AFD9C44F9C6F219B1FEDEB24C33D65FE3F6
SHA-256:	1390D969ED761BD5B9C64D4A9DABD9AA6354D0934BABB99E3A31B28C1E2C1B17
SHA-512:	DC379E26059D67EA7181688DF34AEDFDABDD63984F879A31239732FED900FB6CC99932B466DD734B99DB7EF65164DF4EE13EF32B80A363DEAC40269AA78AF337
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/ssm.min.js?sliq8r
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.ssm=e()}(this,function(){"use strict";function t(t,e){t.forEach(function(t){return t(e)})}var e=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")},n=function(){function t(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,n,i){return n&&t(e.prototype,n),i&&t(e,i),e}}(),i=[],o=function(){},s=function(){function s(t){e(this,s),this.id=t.id\|\|Math.random().toString(36).substr(2,9),this.query=t.query\|\|"all";if(this.options=Object.assign({},{onEnter:[],onLeave:[],onResize:[],onFirstRun:[]},t),"function"==typeof this.options.onEnter&&(this.options.onEnter=[this.options.onEnter]),"function"==typeof this.options.onLeave&&(this.options.onLeave=[this.options.onLeave]),"function"==typeof this.options.o

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	150
Entropy (8bit):	5.150425587906768
Encrypted:	false
SSDEEP:	3:YAnQWpW/YlHXAHnB/NJXMA2RcNHBHfHcgnZLUUSHVHJcKCZh3n:YAngYlHQHnZfcAJVxv/nxNS1Ur3n
MD5:	D736136A1A54CD6963467899ADF04689
SHA1:	E987E4C314BFADF85E035F37CEB4F5880BB34A41
SHA-256:	671F93B095341366BA84ADC24CB5C47414034DBF6D0E6C39443E62C99700B154
SHA-512:	BB330FCE3CFA259A53F7F2C4AC491E0F9CD91F98C6F0EB0AA424F65579895E433208B253268F67E75C16F89622DC12ED676467FAB64C15B935BAA4DA4C34498F
Malicious:	false
Reputation:	low
URL:	https://js.zi-scripts.com/unified/v1/master/getSubscriptions
Preview:	{"err":false,"subscriptions":{"ws":{"websiteId":"667c5926eed2acacb8dacc98"}},"_zitok":"9af2dbb6037be743b8c11730465882","_vtok":"MTczLjI1NC4yNTAuODI="}

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	536
Entropy (8bit):	4.688885430564937
Encrypted:	false
SSDEEP:	12:2BeEEc+wrnVAJNqcRpgdHLAyv/mi3iO+KX7ht:2VEWqJYgpnyHmdOr7
MD5:	06EEFF75AD791A5D51A5953476A67F1F
SHA1:	22FDD92AEA37F29196E3DF46400FDD613E4E411E
SHA-256:	6A43C82F917ACA0A30127B68932598E3F4E0E29350B448BDED42097288C0DBD3
SHA-512:	52A02911CA2DAD1C511DF1DB65B544C6271EE8F9CA571D4191A47DCAD51E0D2305908A20284BC661C820A1D3972297544808ECC25E371C92D7F6AC576AA5BC4F
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/google_tag/js/gtag.ajax.js?sliq8r
Preview:	(function (Drupal) {. /*. Command to attach data using jQuery's data API.. . @param {Drupal.Ajax} [ajax]. * {@link Drupal.Ajax} object created by {@link Drupal.ajax}.. * @param {object} response. * The response from the Ajax request.. * @param {string} response.event_name. * The event name. * @param {object} response.data. * The value of the event.. */. Drupal.AjaxCommands.prototype.gtagEvent = function (ajax, response) {. gtag('event', response.event_name, response.data);. };.})(Drupal);.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13586
Entropy (8bit):	7.9772005072982495
Encrypted:	false
SSDEEP:	384:7vVYokigQa7fDZyBN4PojMG51PSyaRaDHOEy:BYca7L4BCAM2Pjay8
MD5:	5F1315FFD12ED804AB6C3D0A5B023E6E
SHA1:	A4B9993BB2EAFAFDECC2493BB00ADC1FE5D20E94
SHA-256:	1693B7F26F978D742ABA409524E4C5A02CD920246F593F9FB7994CBF614AC548
SHA-512:	AE7E3B56C9AE6B4796DE69EF4309CFD55DBD263B900281B3C3387A3A3A0F044A894EC4970EEEFDC9890C738A5EA484F6F109D1A24F563AA61D1FD549BD039026
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/dev.purolator.com/sites/default/files/FSR-Certified_0.png
Preview:	RIFF.5..WEBPVP8X..............ALPH............=.....XWU.U..5h....Z.F;]m...#.)8b...jm......E.P+Z.....kp...q...p.#.s..8.F....^.Q...b^..?l...i.$J..v..I...>.{...V..H...o....o}.C...O..<\|j....,..H..lO...t..~...^k.I..S?$......9.w......A...2.R&L.h4Q..(....QQQ.F3ab.!++K...x....n[.8.o.F....{.7.......r..YZU.R...s9N....5.`....qi^.7.T....\.?Z........B.J....s.N.K)..........CX.7go<WVn.X.S.jU8O...W.ui..xzy.I/6...E......+.!+u.Z........4......o...5}#...O.\.V....sJ.6.....Ox1....W.^."..S._..jt.....ZS...K...4....(..(X..1O.Q..i7i.GB.N.E.o.&..w...k-.O2.,Y.%G.s.ZW...%...:...BU~.H...j].Py0.o@...../...Q..s]..OnU.h;:.+Y:E8...:....=...F.?=l).x.=..4...../.\|...8AE.NN.R.8uL.?+H...,.G.U...].7..v..b.A.sT.U,..o..`?..sSN....6..}..U?'\|....p.=..,7.?.2.q.O.lN.{.3:....:...V..-.w.3.;}[...N.w.....P'~...%..9Mn.....-..gi8........}..[. ..y('..u.b^. yQ.~.. ..mg..'.Q.z}J}...}x.G.d....5.9.v.P.$_.k..\|I...O.H..u7f...gR..H..Xyj.oh..y.G.hT.i....sz.O.R..Y...y..U..'.x..+3........

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8440
Entropy (8bit):	4.795769728223221
Encrypted:	false
SSDEEP:	192:z7tkf/YiGiKejrkNTuC8NFWZaG4z3VLK2Wk+CiEbjkQghywnEGvEiQWzohlb:+f/Y8VKdkZib3xm
MD5:	4B09E1586A4E7643390213FE640AD121
SHA1:	51DB26C5AC723DBA0E8E02B605D0325D9DC79C97
SHA-256:	463FAAD63E59F653F8367CA1BD38629A240EBD4F2165C313E660933ACC322B04
SHA-512:	FCCEA963659F870B92EF92D8CE446E0E64DD1C142BEED61981776F5B77DD81F80F7AB52BB5B89262358A1A85C1CE3627835C977E7E78D7C3BE76E39D39D532C7
Malicious:	false
Reputation:	low
URL:	https://100008210.collect.igodigital.com/collect.js
Preview:	if ("undefined" === typeof(_etmc)) {. var _etmc = [];.}..if (!Array.isArray) {. Array.isArray = function(arg) {. return Object.prototype.toString.call(arg) === '[object Array]';. };.}..var _etmc_temp = _etmc;.var _etmc = {.. debug: false,.. setup: function(array) {. var l = array.length;. for (var i = 0; i < l; i++) {. this.callFunc(array[i]);. }. },.. push: function(item) {. if (this.tracking_disabled) return;. this.callFunc(item);. },.. callFunc: function(array) {. func_name = array[0];. args = array.slice(1,3);. this[func_name](args);. },.. setOrgId: function(args) {. if(Array.isArray(args[0]) === true) {. this.org_id = args[0];. } else {. this.org_id = [ args[0] ];. }. },.. setUserInfo: function(args) {. var user_info = args[0];. if(this.user_info && this.user_info.email) {. user_info.email = this.user_info.email;. }. this.user_info = user_info;. },.. setFirstParty: function(args) {. this.first_pa

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	79271
Entropy (8bit):	5.334376834240747
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXhpwPCHM9ZVK01QqSYTZ02LKVsdmpyKcicx2:RIT7OXVs9ZVKBvYj8wKcHx2
MD5:	39DBCECAF7B9EDFF7C66112A9C92A103
SHA1:	008C902CB333D847CC6D02A61A6938EEE3C0DEF1
SHA-256:	5EC6CEC83BFC3ACCFB2878A08887540A74EF8A015A9FFE733961507532E580BC
SHA-512:	40E49FEBA784279A90EEA92B58CC44AD779E9969C1B756015583EE5417110E2A45DAC597414B76448A2B2E4FA82871BE17B3B86D68B9226ECB3D6E47E9D0F27C
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/728993374121108?v=2.9.175&r=stable&domain=www.purolator.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8219
Entropy (8bit):	4.688120544793996
Encrypted:	false
SSDEEP:	192:kGom6O2ZnApLNCNSuu2TIvm5YZVNpbNLuNt++C9DULb5y3PY0CRhMpv:khRA7yY5raHN/Ra1
MD5:	5CBC0BA1DFDE182C4697BF2B67901536
SHA1:	FAEF6BA9C210A3C6FE582AD5DFCA42831587FC50
SHA-256:	58EE289CC3B0E66D80A8860AB61C78B003B2794A2B01059F5E5A1D6DA47E7327
SHA-512:	374C053291774999F83B7F1E773BEE5F9E914CAAEDA53CC62D38DD3BF23F5BA8EB907DBA6DFC44423ADF8605B970F4EC5747EB2654B44C643672F823C37C6BBC
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/stacktable.js?sliq8r
Preview:	/*. stacktable.js. * Author & copyright (c) 2012: John Polacek. * CardTable by: Justin McNally (2015). * MIT license. . Page: http://johnpolacek.github.com/stacktable.js. * Repo: https://github.com/johnpolacek/stacktable.js/. . jQuery plugin for stacking tables on small screens. * Requires jQuery version 1.7 or above. . /.;(function($) {. $.fn.cardtable = function(options) {. var $tables = this,. defaults = {headIndex:0},. settings = $.extend({}, defaults, options),. headIndex;.. // checking the "headIndex" option presence... or defaults it to 0. if(options && options.headIndex). headIndex = options.headIndex;. else. headIndex = 0;.. return $tables.each(function() {. var $table = $(this);. if ($table.hasClass('stacktable')) {. return;. }. var table_css = $(this).prop('class');. var $stacktable = $('<div></div>');. if (typeof settings.myClass !== 'undefined') $stacktable.addClass(settings.myCl

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1830), with no line terminators
Category:	dropped
Size (bytes):	1830
Entropy (8bit):	5.031095557238114
Encrypted:	false
SSDEEP:	48:lhESAG6gv/lMMxVnIFNPwa1ny/Y/87WsC3QP:jE7GJ/vpC0YKP
MD5:	4B6D3C28597A87B540CD1CC4A951402C
SHA1:	798C12342EA36DAC50D387A33B0B1D9C1CF64AEA
SHA-256:	A4C4C16266AFBF15B07A0CEAC0998C9A66152EC437731896062F72ABF771CCD3
SHA-512:	6DCCE0ED90615D0F75695CCCD60B8D97D7F483C4BC8B46B924BAC5D1390FAAC5C8B981514817EE89F07C16CA80792F1B3E9BB00075523339801288287EFE88DF
Malicious:	false
Reputation:	low
Preview:	loadjs=function(){var h=function(){},o={},c={},f={};function u(e,n){if(e){var t=f[e];if(c[e]=n,t)for(;t.length;)t[0](e,n),t.splice(0,1)}}function l(e,n){e.call&&(e={success:e}),n.length?(e.error\|\|h)(n):(e.success\|\|h)(e)}function p(t,r,i,s){var o,e,u,n=document,c=i.async,f=(i.numRetries\|\|0)+1,l=i.before\|\|h,a=t.replace(/[\?\|#].*$/,""),d=t.replace(/^(css\|img\|module\|nomodule)!/,"");if(s=s\|\|0,/(^css!\|\.css$)/.test(a))(u=n.createElement("link")).rel="stylesheet",u.href=d,(o="hideFocus"in u)&&u.relList&&(o=0,u.rel="preload",u.as="style");else if(/(^img!\|\.(png\|gif\|jpg\|svg\|webp)$)/.test(a))(u=n.createElement("img")).src=d;else if((u=n.createElement("script")).src=d,u.async=void 0===c\|\|c,e="noModule"in u,/^module!/.test(a)){if(!e)return r(t,"l");u.type="module"}else if(/^nomodule!/.test(a)&&e)return r(t,"l");!(u.onload=u.onerror=u.onbeforeload=function(e){var n=e.type[0];if(o)try{u.sheet.cssText.length\|\|(n="e")}catch(e){18!=e.code&&(n="e")}if("e"==n){if((s+=1)<f)return p(t,r,i,s)}else if("prelo

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3033), with no line terminators
Category:	downloaded
Size (bytes):	3033
Entropy (8bit):	5.342898515889974
Encrypted:	false
SSDEEP:	48:0GbbfVpvv1ER/0bcpNPNxlVE2ABKXnkHlI5UzO8quNVijmJ5TUsQav:0GbbdIBbaI5UzOjuDLssQav
MD5:	49F07C7B66B772A9A2726B4F9C099DA0
SHA1:	5BC702C1EC4686CBA6471E0E7103B5339BBA292B
SHA-256:	5E012094238896006387DB3927C8BEC2C7B0A01B41044EB44FC0F620E18C9A12
SHA-512:	3BD2C8D79CA702069BA0C5F3DB831CC28FC6C78FD49E31C99AE4131448DC11952A3DFC680264768ED54D5BEB414D673EA076068648F31402791CAB74375C54A4
Malicious:	false
Reputation:	low
URL:	https://ws.zoominfo.com/pixel/667c5926eed2acacb8dacc98/?iszitag=true
Preview:	if(!window?.ZILogs) { window.ZILogs = { ws: {} } } (function(ctx){!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},window[p].fn=function(){if(navigator&&navigator.sendBeacon&&window.sessionStorage&&Blob){var e=Math.ceil(30),i=Math.floor(54);const v=5Math.floor(Math.random()(i-e)+e);var t,n,s,o=m+"/pixel/collect",i=(window[p].v=I,window[p].secs=window[p].secs\|\|0,window[p].intrvlGap=5,sessionStorage.getItem(p+"SessionId")?t=sessionStorage.getItem(p+"SessionId"):(t=g,sessionStorage.setItem(p+"SessionId",t)),sessionStorage.getItem(p+"Session"));function d(e,i){var t=new XMLHttpRequest,n=sessionStorage.getItem("unifiedScriptVerified");t.open("POST",e),t.setRequestHeader("Content-type","application/json; charset=UTF-8"),t.setRequestHeader("x-ws-collect-type","xhr"),t.setRequestHeader("requestFromZITag

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	940
Entropy (8bit):	7.665644569817755
Encrypted:	false
SSDEEP:	24:wt+MXpT0lxWrjvpewvmUC6FHtggj9vQajBjVS4RQuHg9t:yD0lxQocfvggxvPji4y9t
MD5:	AC17FD6F6B966010A8ABC60DAB53773D
SHA1:	B83FB2790FB62E0E4984134B204A8BA2E0496DCD
SHA-256:	8CB79605DA88D5A07E61593C743AE7FBE2AA42F69E3C2C67C5E3001F99BE2247
SHA-512:	AAF26BD8AC929A9E991D798B5D42D860447854060D344A725DB1A7538AF13F60AD4B559AA5A7D943DBFCA1D61B3431E7DEEC5DA66C56A646DDADC6BD1D750E83
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........!..ALPH......+m...q....E;..N.n.!gpwwww..............".E/ "&..hmj..s.{.W.6#.S..n....j..w..........U`p.^....,..Q.T...JG..\.U..^m.Jg..8s..@..`.C#.qZ{.8..&H.Qm+0w04.z..6MC.C..Q.\|^.im.Kig#.VW..5Y.....:.7..^..\.O.pS.f4.S..`..Z_.. .. ...&!....j.x..!..n..[.4$.L.q..c.;j... ...$..G.....t>$5..4..\|.$......u,...A....."@0..~,..z0...0C]L...th..T]......O.s..2..mu.....R.ON.~.W?...P.C....O...?pJ{.`.....g....Vu.@.s...(.:....S..f..Y.O...3M.n:......Uss..5...Q...\..V:9ztr.....[..._..P./.>......~c........i....VP8 ....0....* .".>1..B.!.V.....[.'L.........h.....`9[.P=........[\|..'.....G....w.7...W.G.._.....8j......~.q.+/-...?.l.0p.........6../...>..F..........6.#0....s........B.T,.X.?..9Io].t..g..6..=.Q....W.J..{.6....@b..W..l"h/8..cv.. a.Yi.=x....d..r..ZV..m.hp.d.>m. ....H.6.~.n.......8..V..e.....d8z.,..}W.b75[.;.@..~$)l...Q......G.Gp.71e..7...L'.g........A.].=.E....0...IJ..l...

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	6.9396670413198285
Encrypted:	false
SSDEEP:	6:ak5ZklEWnahRXnVtsY5f3a+QwGR15Fy4fFW1eeWbMsjmC44cMzlWRDN5t/:vE9nahRXMY53QwGRLFNfFWUdbVmCJFWT
MD5:	DC6371E7F75249692103383820237D1B
SHA1:	BE4D1A8D4C2F8303C862E3C83579EEB3E11550CB
SHA-256:	5B0E90EF2837ED4D98A53A8669CE653B5923153C35BF485C978E493A4A5AE891
SHA-512:	F07308B2E3746893D9E1BFD06293110A31891C0C3C799DE0E35347D5880022A3C70932231041083B2864ADE985D64C461421340637C2F29E6DE4B9AAC23B82D5
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-location.png
Preview:	RIFF...WEBPVP8X..............ALPH{....w . $8.?.!".?..m[...."!...H.....Q..".WS..ft.T........c.t-JnE...K~.........3w...."D...Y.......@&1b3m...#.!.L\....\|...VP8 .............>1..B.!!... ....;....O...>...oP..........$..............2.....^.4......w.]..j.1.9.Js.-...5o..Xy..w..>)...2.H{.@.c.W?\....

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1488
Entropy (8bit):	4.492329513037864
Encrypted:	false
SSDEEP:	24:fC5rBHccrTVsZaDj4OpRdXf+d+7oT+n4aEjG3yMgq6FU/Qc4O:fCvlBsZaDtfdx7oT+x38q6W/Qc/
MD5:	408B3E82F72D4C9C910CECC336C7F1F0
SHA1:	A74E97521ADF2B37D2B4419E843C654043EF5E36
SHA-256:	08917CE03BF43E31F728F6AA830CD2F8D252E39A8F6D769578F07B500C3EB87F
SHA-512:	2088B4F9D9953E4F0B27467933925946CFD8EC21FCFAE5C89213F8FAE92D82DFC10E5689C61BD7B8D87E7031FFD8DA3FDB51C9E9221E1E8988B3BA1E7B8D19CC
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/debounce.js?v=10.3.1
Preview:	/*. @file. * Adapted from underscore.js with the addition Drupal namespace.. /../. Limits the invocations of a function in a given time frame.. . The debounce function wrapper should be used sparingly. One clear use case. * is limiting the invocation of a callback attached to the window resize event.. . Before using the debounce function wrapper, consider first whether the. * callback could be attached to an event that fires less frequently or if the. * function can be written in such a way that it is only invoked under specific. * conditions.. . @param {function} func. * The function to be invoked.. * @param {number} wait. * The time period within which the callback function should only be. * invoked once. For example if the wait period is 250ms, then the callback. * will only be called at most 4 times per second.. * @param {boolean} immediate. * Whether we wait at the beginning or end to execute the function.. . @return {function}. * The debounced func

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17315
Entropy (8bit):	5.099913883189553
Encrypted:	false
SSDEEP:	384:pXmQjmQMoYXYF2mYvd04uJnsXNQ1R+HU6tsjR03:FnMoYXYF/+04KnsXNQ1R503
MD5:	DBF3BF410AD3EF9F7DB4054B052A3855
SHA1:	55073CD4DFDC21DA592E5A87CE4CD28B96669B02
SHA-256:	22CD563D30369D5B695FE68218BB4745406590B9AFCBAB2775A40C205CD7C4F1
SHA-512:	E514BFB9F7CFEE817C8B2D6537B5A2B5451ECC4AFD67A1F6D59366D48C753B088EDE9FB6D15BA3BF80BD2A4A7702A671C7AB886D28B15F74AE10239BDDE102A1
Malicious:	false
Reputation:	low
URL:	https://ixfd-api.bc0a.com/api/ixf/1.0.0/get_capsule/f00000000094873/1850664187?client=js_sdk&client_version=1.4.5&orig_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&base_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36
Preview:	{. "account_id": "f00000000094873", . "date_published": 1693376885345, . "key": "1850664187", . "is_universal_capsule_enabled": "true", . "capsule_version": "1.0.0.0", . "engine_version": "1.0.0.0", . "version": 2, . "date_created": 1693376885345, . "nodes": [. {. "feature_group": "_body_open", . "script_content": "\n function positionLinkBlock(targetContainer) {\n if (targetContainer != null) {\n var strLinkBlock = '<div class=\"be-container\"><div class=\"container\"><div class=\"be-related-link-container\"><div class=\"be-label\">Related Links</div><ul class=\"be-list\"><li class=\"be-list-item\"><a class=\"be-related-link\" href=\"https://www.purolator.com/en/support/faqs/shipping\">FAQ - Shipping</a></li><li class=\"be-list-item\"><a class=\"be-related-link\" href=\"https://www.purolator.com/en/business-solutions/technology-solutions/mobile-app-download\">The Purolator Mobile \u00ae App</a></li><li class=\"be-list-item\"><a class=\"be-rel

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.288909765557392
Encrypted:	false
SSDEEP:	3:HNlkaKth3vY:IbRA
MD5:	91FADBF4DFAA1A0F1C7CFAEC188C54A4
SHA1:	931B68CCAFF5966D5F68A1B2FE60072B1DE3ACF3
SHA-256:	BD48A7A9CB964EC699D43AC5065A42AB6436E3A8D72B23266FC30344233B8F0E
SHA-512:	9EBA56A25AD2CF1D457A3906AC5EC938067A7FF6002E002F25A5F65E551EF37976668BF48574BC3CD52965C03459E3E3862AE058FC03C014FF69961C5332A484
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAmZazSJq5zR4BIFDWSiKg0SEAnWpDr9FNC7fBIFDRbprAE=?alt=proto
Preview:	CgkKBw1koioNGgAKCQoHDRbprAEaAA==

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46324, version 1.0
Category:	downloaded
Size (bytes):	46324
Entropy (8bit):	7.994540550015696
Encrypted:	true
SSDEEP:	768:MYOJ/YriKnItsVFNe07R2W+X9gRGu+cBGgGz4IFUELapSAxfTtJ2uQda/IC19mRZ:MXVYriKIts9H7sW2UKZFUzBxZJLZe6yR
MD5:	CBD728BB0047C14298E97591AF1E7B9E
SHA1:	C831D0D9F24C160469E564FC0242156DF4FC2ADD
SHA-256:	F01B2926223B23BE2D6922BBA31A00AEFDEF41AD059B23AB81A6CF1EC59AE804
SHA-512:	9E3B2DCC15E62127E15349DF541EDACBF54B21BBE657DD6AC5F36F871D70E4680D1468E2DB891E900ABC5FCEE2CF94BA89E0DF601D15A5E2FF2634D198DD0DC5
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/fonts/OpenSans-Bold.woff2
Preview:	wOF2...............$..................................n.`.......`.....0..V..V..6.$.... ..:.....x[Hg..2.bb.]....6.....q.t.TZ....#.;..4......._...r..j..l.....&ww.L),...C....$....n.K...T..oG.P....TO.....L.L9YJ...N.E...+CIH.2l.^.r.k..+;..o@....M.G{.5?.b..5a...'..7.?HI.,J..h./p'....<....N.$V.v....g.d.}N.q..DSHf....}......vL.-.;P.M.......".......h.J..U....O.jM.I[kQR..e!.1w.!5\|UM........U..:9.e`.2(..Xq...?..o.Su....=o.P`. ...H.LN.P..UG:..^d.Oy...).A..V........a.4t...........>2. ..".......T..enj6...Z..../....6M..Q....M.j./B.. ..Op.D..F.....'.fs..u........_p..u.`.....d.).P.dFBA..B...S.\_-.x........9..... .F......x...W!.....>).....x..k......y{.....Mr.3.4......5...7z.W......3.i..u.l.^....y..+O.\........v...(.."=...(B..n...6....e.......XR..Z3...$.jJC..O....\|.8f.4.@'....m./L\sE.g.a.W......l.+.Y#t.5....B......R..?.j:..2[.#'i...'..#4..'h.p.2........3.fc-.....j..-Qb..l..(..8i..i......3...;eo...Q1&.o......[.D..\|..-..bI..a\ZZ..y\.....s.P..........m

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8650
Entropy (8bit):	7.972342746257268
Encrypted:	false
SSDEEP:	96:OLpIr8WljRz9fSjF3Qm5qZC44SAVLtE9jsXkDCcQL1OVdMR9A/gfYNtAqmC5SPoh:+irLnfiAmNgoLajbDCXqMSsC5QXnlKr
MD5:	C66A12CACAD31C032608CFABE9797B1A
SHA1:	E76750560AA71D22E82D6022BEB882BBF8A02B5E
SHA-256:	955AB7947A69A4A8949E645A9832940176328437EB351471C368F03CF43C59A3
SHA-512:	49C714D19A5009ED04A84F8D2BCBBBF58F2E0CC7455F3EEA8189ACDF663F71AEECD645E64CC94833CE789FA370BB0475172F590809654B3A6E05CD58D645BE2D
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-googleplay.png?itok=WiZy8Q41
Preview:	RIFF.!..WEBPVP8X........3.....ALPH.......0.$3uo......=g...j.m.....E..X.:,C..4u...B...~p....<c..G....9..B.,...04.\|.S..&.G.....q..Y.L).5..,...4.......c.F.y.eUz..+}Q.K.......[....:.\....p..9.9.9.9.9.9.9.9.9.\|...........-..5.eY......LEW:....I:2.KxH.RB.D.).<.R.v<...A.J9.'.6..d90...^o!\....VP8 . ..P....4...>1..C.!.......Y.\...w.../.............C.._<...........G...........C.O........j.@?..".^...............G.....?.o....@..oq...P.F..._....?.;q.c.w.O.w.N..5.....c.....;...O....h<...........>.....{..d..k...........O..Q/.}........G......c....}..........{..2...c.W....O......=....._.?....#......._.....s.?.K......s..?l...X......^}d.l.[{om......{om..../SO....f..VM..v.(&....m_.~..y...:......\|.;..b.fZ.p..Ag..J...!.G.$.v....Y.%...........Ns...r.o%.g-.....{G.kB'[.o.=uGd...8..c..D]".xX.'.Z...F.]....W..o.l....(%..L.Q!.i.........$J.6...F.A.p..U\.yN.%.g.l...V.X....._..,V..gJ>.JC&.hz...5t\|...MG...o.>.T..}#..(..e..F..mr..jcX..:..u'Ok. S7.5..~K..B;vwiNm.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 821x1260, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	21456
Entropy (8bit):	7.983624656424126
Encrypted:	false
SSDEEP:	384:7FgKJ0QEM0TWjJPcnpJtLrD61XYD2mOma6d6E3zLM6tV1ZUfI6WFXt6k6ZfVbiPU:qMETuILRSm5j4E35UWF96kA73oRttm
MD5:	2890DF73B0F01DDDC038CD69968B7133
SHA1:	9A341CBF09FB8530D6B59D59B23F894FAC812062
SHA-256:	10A41EC77BC17A89D7FFF4F3AA9EE47E7B521A0DDBA67ADE41649FFA028B8713
SHA-512:	39EC81AE19279F092FA014FBBDA6351535D70425010A6EA3B967D5B2C5B34D7561E42271D47077E53061B367F0DE89B073454D4A34D36BBDF70097D6F5EBCDC2
Malicious:	false
Reputation:	low
Preview:	RIFF.S..WEBPVP8 .S..05...5...>m2.I$"..".x...gn....5.M.@'..:x%_..o.......3.+..u.+.....~].O....~....7./.?....r.R.K...#.....O...?.z.................j...z.....................?..y..n.u>..fuW........_....n.X/....y....W...{..../...?....Z........_.<..]...W....{..A...-.....?...{\.....D\)Q~2/.EA{.....U..T_....Q~2/.EE.....K..Z...R..dT_....Q~2/.EF...S........."..dT_....Q...../.EE......."..dT_A.0..r.K$.....7.@......... ..c.\7p./WrF..........."..dT_.A.8....a....K...u....TR...x).Y..* ..f).%.aW..:.T......"..,..I=.......Y.,x)G\.P..c.J:.B./...Pv.(PW.G6..F..UH../.EE.O.e<.. ..........X..`,........'z..;...{.........,I...Ev.2D.Go$.Q~2/.D...J>ZlPey>.S.p.E.......n.....E.)VE....0u\...?...R..dT_/v....j.#.q...{...<.Pov......s....=........It=.s.2....g.....E.:.G.../.U.p.E....;_..y.8.r.@ ...I.)Y.0..A..\|..s...>SO.r...-p1Z..'..^.n.....Od.Y ...k..<j....pD.....A...'\|....D..".$.T0!.R..dT[.....<...3.5!...P.&.O....J..#.].....9.B...h..<..4........N...n..9.p.E.....H..

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5912)
Category:	downloaded
Size (bytes):	6054
Entropy (8bit):	5.185199933783455
Encrypted:	false
SSDEEP:	96:W2uXqpNCQ2Ae9SFwzWdsg5TrHXfq7rE9Qn4q9KdcTxt24v6TbVbcLKPzPyJFbBCK:8X2ne215PPCE9Qn3ewo5bKKObkK
MD5:	1AEF6948DBDD142CD728BA899BB23D87
SHA1:	4D70B69DE5798DB57FA30244C019698235954D86
SHA-256:	1E62A545E1180A257D1A77E1C55F355AE5EA309EA2E82244420609AF395746DC
SHA-512:	D7C8A67758FE5DFFC0DEED1652382E774C345A68428DFBFAC80C9F00FA9B290689F13957CA23C1F1CD7A58D69588FEFF46FCE211AD8AED4A39568D239B1ECBAB
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/assets/vendor/tabbable/index.umd.min.js?v=6.2.0
Preview:	/!. tabbable 6.2.0.* @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE.*/.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self,function(){var n=t.tabbable,o=t.tabbable={};e(o),o.noConflict=function(){return t.tabbable=n,o}}())}(this,(function(t){"use strict";var e=["input:not([inert])","select:not([inert])","textarea:not([inert])","a[href]:not([inert])","button:not([inert])","[tabindex]:not(slot):not([inert])","audio[controls]:not([inert])","video[controls]:not([inert])",'[contenteditable]:not([contenteditable="false"]):not([inert])',"details>summary:first-of-type:not([inert])","details:not([inert])"],n=e.join(","),o="undefined"==typeof Element,r=o?function(){}:Element.prototype.matches\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector,i=!o&&Element.prototype.getRootNode?function(t){var e;return n

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65028)
Category:	downloaded
Size (bytes):	329820
Entropy (8bit):	5.06724620636821
Encrypted:	false
SSDEEP:	3072:baCbTC193SYi0ENM6HN26yPx04YXGdFTyHjE:baCbW193SYi0ENM6HN26yPx0yFT9
MD5:	2C73F710503180F3F5AE851584FE2121
SHA1:	72233010CFDA0070A6BD1C1E733638A401F4CF90
SHA-256:	08FC522FF797F5FEB012CB47941D411644F712C13BA40E4C498A793ADBCBD2A8
SHA-512:	FB0C54689D274F9EF2B885CDFEDE7638FB75450700B64D94B344DD15DECFA610265B5A127F5151ABAFFC6330CFC278AC2587565A186C0532049125BCDF6A332A
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/sites/default/files/css/css_kI-d6qrKD5HPEJyYT88aWLKjK4K00UaRxseW1UoWB-U.css?delta=1&language=en&theme=purolator_theme&include=eJwtzUEOwyAMRNELoXIkZMJIcQUY2RM19PRdNMv_Nj92ECNXCSSXpneuZgy6rKeDuyOty60LzQtPDDx6mCM3v5b0l7zlTphU7oJR0fIhi2oz1S7f_V-EEh9tKNLhzDqVPw9FMuc
Preview:	/* @license GPL-2.0-or-later https://www.drupal.org/licensing/faq /..navbar .form-inline .form-actions{display:none}.toolbar-oriented .toolbar-bar{z-index:1200}.toolbar-horizontal .toolbar-menu.nav{float:left}fieldset.card legend{font-size:1rem}.form-check{margin-bottom:1rem}.form-checkboxes .form-check,.form-radios .form-check{margin-bottom:0}.forum__last-reply{width:20%}.forum-list__forum{width:60%}.js-text-format-wrapper .js-form-type-textarea{margin-bottom:0;}#drupal-off-canvas{box-sizing:initial}.@media print{,:after,:before{text-shadow:none!important;box-shadow:none!important}a:not(.btn){text-decoration:underline}abbr[title]:after{content:" (" attr(title) ")"}pre{white-space:pre-wrap!important}blockquote,pre{border:1px solid #d3d3d3;page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}h2,h3,p{orphans:3;widows:3}h2,h3{page-break-after:avoid}@page{size:a3}.container,body{min-width:992px!important}.navbar{display:none}.badge{border:1px solid #111

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9440
Entropy (8bit):	7.9678980912492285
Encrypted:	false
SSDEEP:	192:JWHA2JTpkLMU5/D9NIceuxhF+EQC+1ehvUqHWYzK4dhnX6vdder:JWn+D67V1Gv52YB3X6Vg
MD5:	90C44BABBC654052F7916A89503DDCCB
SHA1:	F570656249D624DEF397279D9E1B8B88363F79A6
SHA-256:	FED6214AE111E289E08053E216067726F1FDD38DCC6D9712B87EFCC81CDCF804
SHA-512:	A4EE6088C2D8D2B4B152BE5E88CB781DD9A8A70BE89AB9931D807A140FEC57A213708FAEEE0D75E4E32A0169EBA825557476798F4660E7FA1BB8A94C8424B332
Malicious:	false
Reputation:	low
Preview:	RIFF.$..WEBPVP8X........K..3..ALPH.........>...]$.H....5....d%#.q......<.V.J..q.....$Y+y..$+I.de$.c.qws.s.?....~......1....3..YW.\..3S.O..G...wM..e.&i.`.%C....3...3.}..ak.Y.._.{.$...kI{.."Ys..f.N..qZ..._.$.Sa...K..If&..:.(j..;....,....%.%.D\|s..\...0......;..F\.7e=b.......Q..b..$.D=..Q.V`.KL....^.Q..L.n.1\|..si...7..1y.Q.i.q...z....M`.....\|wi.C...d..r..'.[.U..a...\|.b..Q..k.7..V......O....&..`.(..Si..tW.....j..3....G...f.....r...h.h.PX.{....8...?m?..&_..(}.......M..^.K....q...J.*..1.P.^..[....._.(6..aE19b..\QBY....d..4.Z....V.}...1E..4..u.....^I.]..48o...YK...y">....%%..%....ZBI.E.O.....RR&.!.4..C..9...TS..N...L......)34.KQ....P./`..'.k.}J7.8..{LI.t........n.eQ..f\.7d.d.s..i..~Z.P/.l>..\|.,R2=...y..1....[....L..zi....um....=.]...../&..1yG...X....J..cL..v&..{-..s..cJ.l1.%=...9..x.].....q~..Kk.f...P.%='.....Wb.>.G.?.]:...E._).e.....2H..eQ?.?..%.....`KL.7brP.3.....d....Z...n.Y..j@.[..._..?.....%..mA2\|.@O.p.{...........va6;............I.....

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52360)
Category:	dropped
Size (bytes):	344002
Entropy (8bit):	5.417034116140363
Encrypted:	false
SSDEEP:	3072:8JV0gSqdzJ3IZoOkn+gs29IlIoL+kyqAfN+Th3dFTUOQeyePEuoZJ+4TnLXHmmA:8JV06+gs29UIoL+kFAfg9dFTU9e03A
MD5:	9E849DC9566F5E58E5725108FA04C8A1
SHA1:	F0B8C295D42DD19442D29F1A4BA564B37D38025B
SHA-256:	8838B00C4D65FB353A4FC115FB3D5EC4AC665DDDD47131DBCB41799E5CE6B25A
SHA-512:	0C8A6932163D1B9933FF5ED9D087CBA0B2E367DEF33AF3E0D15408A10DF8F448C1C9F038E28369A174330B4047640286DD330F5A8FA8B8AA1DD09BDEA69F45D6
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){t=function(){return e};var e={},r=Object.prototype,n=r.hasOwnProperty,o="function"==typeof Symbol?Symbol:{},i=o.iterator\|\|"@@iterator",a=o.asyncIterator\|\|"@@asyncIterator",c=o.toStringTag\|\|"@@toStringTag";function u(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{u({},"")}catch(t){u=function(t,e,r){return t[e]=r}}function l(t,e,r,n){var o=e&&e.prototype instanceof p?e:p,i=Object.create(o.prototype),a=new I(n\|\|[]);return i._invoke=function(t,e,r){var n="suspendedStart";return function(o,i){if("executing"===n)throw new Error("Generator is already running");if("completed"===n){if("throw"===o)throw i;return T()}for(r.method=o,r.arg=i;;){var a=r.delegate;if(a){var c=g(a,r);if(c){if(c===s)continue;return c}}if("next"===r.method)r.sent=r._sent=r.arg;else if("throw"===r.method){if("suspendedStart"===n)throw n="completed",r.arg;r.dispatchException(r.arg)}else"return"===r.method&&r.abrupt("return",r.arg);

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4204
Entropy (8bit):	4.678225790097852
Encrypted:	false
SSDEEP:	96:khvfoCWSxxVIw2cdp69FkZtovDfW/ci2eWs:ioCWS+w2FGWDfLiFWs
MD5:	4658076D66208931B9997E5F2FBD496B
SHA1:	41C0A2B7F78F05DC84DD5BD19B731AA89C21A6C1
SHA-256:	95918AEC0F6E6D0B39D7E4D7745A657BFD35710E630FD266B7A1C428727772E4
SHA-512:	F9E5B6F3087A907BF8F7C9A7C55AC1FF143896F3D09AD8D2277D844CCB593EA0DA0F8A4F18FB21147554BE2CD28C1115E8E8158E3D287590D4DF3B381C42BA4F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 23.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 188.419 26.169" style="enable-background:new 0 0 188.419 26.169;" xml:space="preserve">.<g>..<path style="fill:#EE3124;" d="M128.981,19.346c-0.141,0.328-0.33,0.653-0.566,0.947c-0.945,1.174-2.406,1.927-3.635,1.927...c-1.135,0-1.891-0.721-1.088-2.381c1.135-2.417,3.921-3.102,6.518-3.102L128.981,19.346z M132.665,6.523...c-3.259,0-6.187,0.883-7.792,1.566l-1.84,3.983c1.793-0.817,4.201-1.633,6.656-1.633c2.547,0,2.691,1.273,2.123,2.479l-0.189,0.329...c-5.903,0-11.522,2.219-13.834,7.146c-1.462,3.164-0.376,5.775,3.21,5.775c2.077,0,4.251-0.786,6.141-2.254h0.139l-0.565,1.858...h5.192c0.33-1.142,1.041-2.768,1.795-4.466l3.164-6.756C138.799,10.373,138.989,6.523,132.665,6.523"/>..<path style="fill:#EE3124;" d="M72.849,6.884l-5

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	426
Entropy (8bit):	4.087855532412712
Encrypted:	false
SSDEEP:	6:viNvXqoX0XB79i8eJOezXXhKvNsTX0XB79ghJOezbovN8K2GTagGT4Swqn:+XNgBU8eJh0NIgBihFqN8YTaDTxhn
MD5:	44FE19B82676CC49550804EF880E2E3E
SHA1:	81080CF8D708E2EAF4D3FD868331C2AEAD1EED6D
SHA-256:	6F0F2424553B90C57AF3B114FB382D57C7DEC7E10B49F8F81DA63E6F23B6446F
SHA-512:	BDFBAFD347C1BB8C392F96ADA793C9D7B3BC9C6659B15A740F68A6A47718AAE2F6550F6F43E892BE6A744ECBC4D9F46335DD9ED0B68C376C57649289D7B324EF
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/src/img/favicons/site.webmanifest
Preview:	{. "name": "",. "short_name": "",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/android-chrome-256x256.png",. "sizes": "256x256",. "type": "image/png". }. ],. "theme_color": "#ffffff",. "background_color": "#ffffff",. "display": "standalone".}.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	8219
Entropy (8bit):	4.688120544793996
Encrypted:	false
SSDEEP:	192:kGom6O2ZnApLNCNSuu2TIvm5YZVNpbNLuNt++C9DULb5y3PY0CRhMpv:khRA7yY5raHN/Ra1
MD5:	5CBC0BA1DFDE182C4697BF2B67901536
SHA1:	FAEF6BA9C210A3C6FE582AD5DFCA42831587FC50
SHA-256:	58EE289CC3B0E66D80A8860AB61C78B003B2794A2B01059F5E5A1D6DA47E7327
SHA-512:	374C053291774999F83B7F1E773BEE5F9E914CAAEDA53CC62D38DD3BF23F5BA8EB907DBA6DFC44423ADF8605B970F4EC5747EB2654B44C643672F823C37C6BBC
Malicious:	false
Reputation:	low
Preview:	/*. stacktable.js. * Author & copyright (c) 2012: John Polacek. * CardTable by: Justin McNally (2015). * MIT license. . Page: http://johnpolacek.github.com/stacktable.js. * Repo: https://github.com/johnpolacek/stacktable.js/. . jQuery plugin for stacking tables on small screens. * Requires jQuery version 1.7 or above. . /.;(function($) {. $.fn.cardtable = function(options) {. var $tables = this,. defaults = {headIndex:0},. settings = $.extend({}, defaults, options),. headIndex;.. // checking the "headIndex" option presence... or defaults it to 0. if(options && options.headIndex). headIndex = options.headIndex;. else. headIndex = 0;.. return $tables.each(function() {. var $table = $(this);. if ($table.hasClass('stacktable')) {. return;. }. var table_css = $(this).prop('class');. var $stacktable = $('<div></div>');. if (typeof settings.myClass !== 'undefined') $stacktable.addClass(settings.myCl

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4779), with no line terminators
Category:	dropped
Size (bytes):	4779
Entropy (8bit):	5.432039998261811
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALw8LMpn02MGkdtRre81pecbt:9++2y7CpR8yfMBrVwcbt
MD5:	A3612075AEA5509A1B689E591F9A0CCE
SHA1:	63A9BD9A7CE89018AFA7822C215B426487042297
SHA-256:	82750F27BE03D4B9E57A91DFA19180873DDBB22DD81ABA6854DD7B7EA08C1E9A
SHA-512:	E4671E2AC937A7292A1CA7C722E58819D420DE38B7A9A1F0C35104FBCFCE616D8A06965EF054BE41C6847E8276A8F7E2BC96117D14215A3AA058999598C8DA36
Malicious:	false
Reputation:	low
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261
Category:	downloaded
Size (bytes):	78196
Entropy (8bit):	7.997039463361104
Encrypted:	true
SSDEEP:	1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU
MD5:	E8A427E15CC502BEF99CFD722B37EA98
SHA1:	A9922842A120A7F1EACED667480C5E185A106D69
SHA-256:	D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF
SHA-512:	113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/icons/font-awesome/webfonts/fa-solid-900.woff2
Preview:	wOF2......1t..........1..K......................?FFTM....`..N.....h..B.6.$..0..4.. ..+...[.u..p.(..U.d..{-.n.Pn...._=V2.e..vp.~........U..1...=..B..b....mvS....w.C.+.$...(..MMI.iH}..O...4.7.s...Y.)......}..^...{^...R.z....f..h4dD7.:1...Cj..l.8M..T...]}.]?Z..v....g.yV...^..\.?.wM\|......Ws..yf%..PL.....~.z.w.S.uQw..........EY.!.........j.O.....c...>T\|....W...Zk...9.......XJ...../I`x.R....c.h..w...?tm..l...LQ......hMg...x...1.F...cU.b\|.3....v.Kr.f.H ..9 @....... ......'..j...Vq.:.Q..+....._..(...J.....~../..Y<."......GB..:..P.B...7q...K.{...F"..3....6?.C,..B..P.V.......C.C..\....+....a...X.z..Tzdn.P.M....li...l2);.!..wX..xh.o.u!.........O.......Ew.$b7X..8d..H...s...z#d..&...J.G...Q.M.....rV?.....&....#...t]........+..............v...$X.P............ h.z.{...../F.-Y..!.a.1...&.;.^^.U.U.E....!O......./+~.........Q.\|.n@.W..P.tc.l.--....]6..........u..[.SN....i....4-......"...fC...`........@.......l=..g...-..C8...B.X.........g.~..p.1%..x.A.X..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3263)
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	4.893887361177859
Encrypted:	false
SSDEEP:	48:Qd7sDlyuG0i6v69+NLUIUqNXwd/qqsqUqPqXXutI1w/pEAN73QcHlWaUJ4L9Sxmt:QdmwXf9+ZUbJKHUk8DR62
MD5:	C18FFADC073E8599827EE46B04D05400
SHA1:	31A9E3007BFE55C377788269D0C6B823B621C3A6
SHA-256:	45F0C218AB49DDF3816B73019EAB68139EDA90D46B3C5B8FC2481A1A3BF43729
SHA-512:	AD170AACF7A99865F954708B7DFACBF7B8E81A30FFA373743566EC8259E1EBE119674E6C5C492E885FAAC082A05ECE16C5800EB48607E2F05725C7F47971AFF7
Malicious:	false
Reputation:	low
Preview:	!function(c,n){"use strict";var t=Array.prototype.some,u="remove",h="width",l="height",e="after",r="before",i="begin",o="Top",s="Left",f="Height",a="scroll";function d(t,n,r){var i=this,e=c.isUnd(r),u=c.isObj(n),o=!u&&e;if(o&&c.isStr(n)){var s=c.toElm(t),f=[h,l,"top","right","bottom","left"],e=c.computeStyle(s,n),s=c.toInt(e,0);return-1===f.indexOf(n)?e:s}return c.chain(t,function(e){if(!c.isElm(e))return o?"":i;function t(t,n){c.isFun(t)&&(t=t()),(c.contains(n,"-")\|\|c.isVar(n))&&(n=c.camelCase(n)),e.style[n]=c.isStr(t)?t:t+"px"}u?c.each(n,t):c.isNull(r)?c.each(c.toArray(n),function(t){e.style.removeProperty(t)}):c.isStr(n)&&t(r,n)})}function m(t){t=c.rect(t);return{top:(t.top\|\|0)+n.body[a+o],left:(t.left\|\|0)+n.body[a+s]}}function p(t,n){return d(t,h,n)}function g(t,n){return d(t,l,n)}function v(t,n,e){var r,i=0;return c.isElm(t)&&(i=t["offset"+e],n&&(r=c.computeStyle(t),t=function(t){return c.toInt(r["margin"+t],0)},i+=e===f?t(o)+t("Bottom"):t(s)+t("Right"))),i}function y(t,n){return

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41090)
Category:	downloaded
Size (bytes):	59458
Entropy (8bit):	4.9462583493077386
Encrypted:	false
SSDEEP:	1536:lAhbwlzALEKdit4eeDxDeIqaRQQSj4emmel:lAhbwlzALEKdit4eeDxDeIqaRQQSj4em
MD5:	D45FDE8E1DD8129930E76FC5F5533449
SHA1:	F354F8795289C320E3DD892ED0EC8D664645D7F2
SHA-256:	27FE1CA6FD8770BFFB1BDB3A252ACEBDFCF9BEC29A3CAF35E5E4C054A10D4D68
SHA-512:	714A9ECFFCF66586F3618CBC7D07F83866B41ECF9FD5E6EBA1831B090F75F4060CF9991C8AAD291C3643C2B31A7A5F6AB44601BC9F508B7EBEA00F556FBA6204
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/css/app.tracker-drupal.css?v=1693107538556
Preview:	/@1720812964673/.section[data-apps="tracker"] .forms-container{margin:0;padding-bottom:1rem}section[data-apps="tracker"] .forms-container .forms-contents{display:flex;justify-content:flex-end;width:100%}section[data-apps="tracker"] .forms-container .forms-contents .list-group{border:none;margin-top:0;padding:0}section[data-apps="tracker"] .forms-container .forms-contents .list-group .list-group-item{padding:0;padding-left:1.75rem;border:none;background:none}section[data-apps="tracker"] .forms-container .forms-contents .list-group .list-group-item a{text-decoration:none;color:#404040;font-size:.71719rem;cursor:pointer}section[data-apps="tracker"] #search-help h4,section[data-apps="tracker"] #error-modal h4,section[data-apps="tracker"] #search-toggle h4{color:#001996;font-size:1.03594rem;font-family:"Open Sans", sans-serif}section[data-apps="tracker"] #search-help p,section[data-apps="tracker"] #error-modal p,section[data-apps="tracker"] #search-toggle p{font-size:.79688rem;font-family

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1023)
Category:	downloaded
Size (bytes):	1024
Entropy (8bit):	4.958859561972113
Encrypted:	false
SSDEEP:	12:tXC081Vj06XASvXbRPBvVPperKruL2RGM1VsN2VlD6F9Rl12RoEwA+GSke44HJzE:jKFHLVPpKj2GMg9RTgwA+we44HJziFz
MD5:	CE42004730DF56C76A237F746AB3C9F8
SHA1:	75C1E4C29B66D2C4D4F11EAEA14BF74E245E5127
SHA-256:	ADBB9069BA75217C2D6806842B68EFF94AAB36A541D929C95FD5D581EADC9D4D
SHA-512:	A0134AB6FCED410B27E4D3676D08C1B8C9C08BFBC53A198B41DB2623FA8403362ADE0068EC1C25889AEA872A6C2084DA9CEEA87634DA2987A7FA232872FF075D
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/base/blazy.base.min.js?sliq8r
Preview:	!function(e,r,i){"use strict";function u(t){return t.target\|\|t}function a(t,n){return e.hasClass(u(t),n)}e.debounce=function(t,n,i,e){return i?r.debounce(function(){t.call(i,n)},e\|\|201,!0):r.debounce.call(this,t)},e.matchMedia=function(t,n){return!!i.matchMedia&&(e.isUnd(n)&&(n="max"),i.matchMedia("("+n+"-device-width: "+t+")").matches)},e.isBg=function(t,n){return a(t,n&&n.bgClass\|\|"b-bg")},e.isBlur=function(t){return a(t,"b-blur")},e.isGrid=function(t){return e.isElm(e.closest(u(t),".grid"))},e.isHtml=function(t){return a(t,"b-html")},e.image={alt:function(t,n){var i=e.find(t,"img:not(.b-blur)"),i=e.attr(i,"alt");return n=n\|\|"Video preview",i\|\|(t=e.find(t,".media"),i=e.attr(t,"title")),i?r.checkPlain(i):r.t(n)},ratio:function(t){var n=e.toInt(t.width,640);return(e.toInt(t.height,360)/n100).toFixed(2)},scale:function(t,n,i,e){e=Math.min(i/t,e/n);return{width:te,height:n*e,ratio:e}},dimension:function(t,n){return{width:t,height:n}},hack:function(t,n){return{paddingBottom:t,height:n}}

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.560528582126087
Encrypted:	false
SSDEEP:	3:fFwNyhIowjnDDoR17GSdA:fFvifMkSq
MD5:	FBFA8080D54F629E046EA54C2D78F15A
SHA1:	F3FC2A93CE9B878E1E23C8850642268B930F98BB
SHA-256:	B2E49BBAB4B0FCCAF613CFB64496079AAD80565859BCEC03772C35C87D3E7CFB
SHA-512:	0601C0E661A14367DD5F1CDEB052EAE5918F7DBC4B4EFBBB8A1326B07C2F18FAA324EA4E0825A0FA0294B2C88CEAC45D3742230C1A82279A1E88115FDD612153
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.css
Preview:	:root {. --sa-uid: '0-bf38120c-b305-517b-693f-0446b22483d7';.}

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1452
Entropy (8bit):	7.842868045050108
Encrypted:	false
SSDEEP:	24:BGfo3KiXU5yUTqHiKy4yFJYz8LGvvfDNji2z/+MJdQau/a6NZJ/gkdYzIZeSju03:BGfo37Unu9y4YjioO/d8RkkdtkSy8mQ1
MD5:	02B55647B632C3197616C713651E0987
SHA1:	EE0932AE7489DD9750A53C9936770175B206251C
SHA-256:	1E5A77AE4B6260007276BFEF669420C6F06E0C9B593D9E36CC3690589A904390
SHA-512:	F2575F3968DF8C71103B1F2BA9CF0767BA3852C648E871AA94594053CEF3D320691757086AA996240F3DBB85CFEBFA20DE05C85B7FCF4246235E9E7C7562ABAB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........0../..ALPH......d.i.6.......+NJ.....;#.T"b...e.....).P...K.c.S.m...'fJB..5%...u...=..>.=..T.7.Z.B].^y...c.8(.....(.g.W.).%o....@.x........A..O..`D<.R!RC...."3PY:}.8e...F...VP8 .........1.0.>1..B.!!...H ....X.o[...}.)..~.n.....z..I.-...;.........'X....W.'..._../...w9.#.+.j......n...;s[....>D...U...p../...=..n.........".......-.....8...<#\.3.= ..c...-r.Aq.....`..b\|.5. ...d*S(.m...z...O .6k..d..s.~..:?....x..6o......A..9>._.C..6...pUX....~.5..";...,.3..=...Y.1..8{!....".J\|......h)h.G.b.#.(.<...._..q...S....`..P]U..<.0..r...=bVc<..!.c.w.f.q..u.F..M!A..0...\.>....+......a^;..P.-`..9.IF...8..h6...x].k..7T.(.DM[...OH.....~...s......E....x....v......-.F~9#..0....^........pn.e....6b.D......P....h...tm`g.n. ?0.B\|.1.@h...i............HA...>q..,..Z...]...v.[.....z................&8._.a.m..+H.!w\|w..`:.....S..a..yCQ$L..5.B...$.Pl...0,.5.;.....I.rh.#...)5s.;>..z0C....`..k....u..VY..;..e..3..mc........].Km.....<.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17315
Entropy (8bit):	5.099913883189553
Encrypted:	false
SSDEEP:	384:pXmQjmQMoYXYF2mYvd04uJnsXNQ1R+HU6tsjR03:FnMoYXYF/+04KnsXNQ1R503
MD5:	DBF3BF410AD3EF9F7DB4054B052A3855
SHA1:	55073CD4DFDC21DA592E5A87CE4CD28B96669B02
SHA-256:	22CD563D30369D5B695FE68218BB4745406590B9AFCBAB2775A40C205CD7C4F1
SHA-512:	E514BFB9F7CFEE817C8B2D6537B5A2B5451ECC4AFD67A1F6D59366D48C753B088EDE9FB6D15BA3BF80BD2A4A7702A671C7AB886D28B15F74AE10239BDDE102A1
Malicious:	false
Reputation:	low
Preview:	{. "account_id": "f00000000094873", . "date_published": 1693376885345, . "key": "1850664187", . "is_universal_capsule_enabled": "true", . "capsule_version": "1.0.0.0", . "engine_version": "1.0.0.0", . "version": 2, . "date_created": 1693376885345, . "nodes": [. {. "feature_group": "_body_open", . "script_content": "\n function positionLinkBlock(targetContainer) {\n if (targetContainer != null) {\n var strLinkBlock = '<div class=\"be-container\"><div class=\"container\"><div class=\"be-related-link-container\"><div class=\"be-label\">Related Links</div><ul class=\"be-list\"><li class=\"be-list-item\"><a class=\"be-related-link\" href=\"https://www.purolator.com/en/support/faqs/shipping\">FAQ - Shipping</a></li><li class=\"be-list-item\"><a class=\"be-related-link\" href=\"https://www.purolator.com/en/business-solutions/technology-solutions/mobile-app-download\">The Purolator Mobile \u00ae App</a></li><li class=\"be-list-item\"><a class=\"be-rel

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	766
Entropy (8bit):	7.623488430124489
Encrypted:	false
SSDEEP:	12:2oKWVvg5soD8jzRHffVUuvFJNLTAeMy68ASKmqEsIQ2B1I03ePTrLxvkBQbiF:9NW5sGC5fdvFvnAeMj8XqYPluPNvpbiF
MD5:	809252D6A16F144C3E119781939E544F
SHA1:	95E42D660E0187B297BE057429E1B3353492FC86
SHA-256:	EDF05D8671976E1CFA6DD04B215E1D3785FAFADC7938D68F892E0C7725FB32BA
SHA-512:	A992F80247D3E42A7106AEBC7A19BF5E9D23F18DEA480D6381951F5F89DA004F07372AC52BCB9C5B2A1E7C8D403C1062FDB15E8D835644F43BEB9263B86990F4
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2023-08/x3_0.png?itok=eYiAfA7G
Preview:	RIFF....WEBPVP8X........1..1..ALPH......bm...I..Dt..Cf.$.,.D"i&..H........\|,...p.EI..$y..?q..d.....'...n.I.n..O.e.H.@...%9..-rZd....Q......H......W.LC....)l.1..(.VP8 J...0....2.2.>1..C.!... ........?.rRz..Y..z%..\|.f3.+.3.#.........}.{..7...o...`........g....O...3...kqsv.=3c.)rU...m[4x....l..tMms..Z.. ..oW.......p....e.O.>b.....T...3...L+s.D....g.K.?.......*.N.W..7..A}..D.f.eS.~..y`...>.$g...G..?)R..y.+.lz.f..."Op......?@G.......{...D....3?.'...qcFq..{..P.7%Z....c..N..W9..K.V..TxN.....^=..f.M.u\|..=.~-m.O.>J.Y....~..;7E.\|.QC...f...J.wg]-...r.CK=..z.O...v.Z....U@...\|+....{....sG...mv.$'.:.qO.\|...&..61~K?.U.^?.o..(.= f..(.`G..5.O.~......pZ.>..?r..v....7..t.[x....Kh.>7c...........v........"QVb.F.T..`.mHVt{.8.+.n0...&{15.g.MHf.......

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (943)
Category:	downloaded
Size (bytes):	944
Entropy (8bit):	5.059774860978226
Encrypted:	false
SSDEEP:	24:pbP+NPBBaqzbN6rrHebsVb2ADcCKXwSDe:R+E0J6XzqMvKu
MD5:	1CD580A5A6B590276A304F3A259B4E71
SHA1:	B9A1A34D7EBDC79A94F460EEB6292335B4D85745
SHA-256:	C7FEA7A244AB5EF75669741CBACA5F5E46564579B06DFEE51DF9FBBCDD6444BB
SHA-512:	ADE01DC3D9AF002AF9BB2BDBA031AE6B827E87A98DE89B9C06BE0A5DFCAACABC36EC318280FD66EF57AAAF7A466E8BE45900A9F86758431B220DCA670B93540B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/plugin/blazy.sanitizer.min.js?sliq8r
Preview:	!function(i,s){"use strict";function a(t,e,n){return t?("undefined"!=typeof DOMPurify?(r=DOMPurify.sanitize(t,e),r=i.isObj(e)&&e.RETURN_DOM?(n=!0,r):c(r)):function r(t){t=t.children;i.each(t,function(t){var n,e;n=t,e=i.nodeMapAttr(n.attributes),i.each(e,function(t,e){return!!o(e,t)&&void n.removeAttribute(e)}),r(t)})}(r=c(t)),n?r.childNodes:r.innerHTML):"";var r}function o(t,e){t=t.toLowerCase(),e=e.replace(/\s+/g,"").toLowerCase();return!(!["src","href","xlink:href"].includes(t)\|\|!e.includes("script:")&&!e.includes("data:text/html"))\|\|t.startsWith("on")}function c(t){return(new DOMParser).parseFromString(t,"text/html").body\|\|s.createElement("body")}i.create=function(t,e,n){var r=s.createElement(t);return(i.isStr(e)\|\|i.isObj(e))&&(i.isStr(e)?r.className=e:i.attr(r,e)),n&&(n=n.trim(),r.innerHTML=a(n),"template"===t&&(r=r.content.firstChild\|\|r)),r},i.sanitizer={isDangerous:o,sanitize:a,toNode:c},i.sanitize=a}(dBlazy,this.document);.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	750
Entropy (8bit):	7.619296174355934
Encrypted:	false
SSDEEP:	12:3WZnrGhYbu3pgZBFc0KvsK4WeUQH00U7JhEcA38eRnIl0jyot7IRyfkcstzSiJoL:3QrxP/wmWeUQU0U7JhE9bxDWDZGpN
MD5:	1F793F7CF7877BCE5566CB5446093EFC
SHA1:	EF83C8F4773452CFF1EF42F97E2520E14E4F1120
SHA-256:	211D20A0304F7D172DA5B2D4DDC7303D65FBF2C8F040493448D0FDE551079BD0
SHA-512:	6F74C60FC2F42656B1C9320319F267320FC63B38B658F676AFB358F0C4F9C6B4F877CBA7F628470542FCF5864BB271DEDCC1C49D5ECCA5A0D0C3066F826D5054
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-login.png
Preview:	RIFF....WEBPVP8X..............ALPH.....p].V.....\|K9XB...R+..0.\+...n.6..{..O.0o2...i.H.<.....Z.L..Q.\.....Q...b]...tI.{.....X.@....;.w..)%b..%G.....x..<....x..q?...2.. .Paa...t...@.....M....W..}.m..;..VP8 ........... .>1..C.!!... ....N.B8..?.?f....h.q2Q.....W..p..'..`.@.....@...I...._.o..e_.h.Y..5.G.9.nR.....$.....E.d>rf...[...o[...1N....<...8#..@.3.......'..<.W..w..u...M.t.......4F\....(.v{.-@r.#...w......).I.+....5...><o.'.s.j..$..l3..e}lG.)....v{...@.@e..kl.z..O.+....%49.x.ua8..........W_.....%...N.8.w.O/.e.G...5K...I....{7....Q&....Fq.9d.~......\!T.(..EJ.Da...\ .W..9...E.]r=rr..w....D..rU....W....;9.}.Qe....X...\|(.'.vR..@z..S7.{.)........e...4O.?.0Z...1..C.6v.M..Y.bO.?..U.v....3...__x/".9\fvs....L.`.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20232)
Category:	downloaded
Size (bytes):	20427
Entropy (8bit):	5.546985663655923
Encrypted:	false
SSDEEP:	384:qYMxsp2uk5wWpbIGVZyxYfJzK89AdN6Bq28f7Tv+u/2ccOU6DcGXEJm:dMxswuk5RbIYAxL89AT6Bq28f7L+uuXW
MD5:	391DD673BF3B0837320A35AA7A940BF2
SHA1:	C8B355CAD4BDB9A08900F49E34217BACE31A04CF
SHA-256:	2AEED5B3C05C979624808226BA200108245D3065417B983D135AB1346A9E6383
SHA-512:	94955F84670030C5B51AEF0C86E9859AD862F592FB4C3761108C0C03591F5124083F19E238ED26DAAE12EBAA58260C1CA5D0BCFB886A6C380DE665690B2719B6
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 5, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";const e=1e3,t=864e5;var n={NAME_MAX_LENGTH:256,EVENT_PARAMETER_MAX_VALUE_LENGTH:1e3,EVENT_NAME_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's name is longer than 256 characters.",EVENT_PARAMETER_NAME_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter name exceeds 256 characters.",EVENT_PARAMETER_VALUE_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter value exceeds 1000 characters.",EVENT_PARAMETER_KEY_EXCEEDED_MAX_LENGTH_WARNING:"Length of event's parameter key exceeds 256 characters.",AMZN_TOKEN_COOKIE_NAME:"aatToken",AMZN_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent",MT_LP_QUERY_PARAM:"aref",MTS_EVENT_ATTRIBUTE:"arefs",MEASUREMENT_TOKEN_COOKIE_NAME:"amznAref",MS_IN_SEC:e,MS_IN_HOUR:

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://nova.collect.igodigital.com/c2/100008210/track_page_view?payload=%7B%22title%22%3A%22Track%20a%20Package%20or%20Shipment%20%7C%20Purolator%22%2C%22url%22%3A%22https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560%22%2C%22referrer%22%3A%22%22%7D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5269
Entropy (8bit):	4.434834841651509
Encrypted:	false
SSDEEP:	96:OIKbKQDL14oTtGexH0CF+cSyzpgSarKvZ+6c6cvEG0Z:vKbK+L14ynxH0CF+crzpja2B+6cFvEJZ
MD5:	CA7102D2A0283824CE7861A0884CA0FC
SHA1:	B1F90D3266E0C06C6C8209BD46363B4C4856DCBA
SHA-256:	A7275DDF5A9E695C2767BCE654564447B45DB2561349AE0BD3967DE818F4AE90
SHA-512:	C4F6ED02B0FCDE0E96B0BC7D8D00747FC802946F40BD01AB13AF989753F923CC03090C73D33BF3FCD5280AD8C93692A3533CE55E350F6DFE8D647D5424408AF7
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/progress.js?v=10.3.1
Preview:	/*. @file. * Progress bar.. /..(function ($, Drupal) {. /. Theme function for the progress bar.. . @param {string} id. * The id for the progress bar.. . @return {string}. * The HTML for the progress bar.. /. Drupal.theme.progressBar = function (id) {. const escapedId = Drupal.checkPlain(id);. return (. `<div id="${escapedId}" class="progress" aria-live="polite">` +. '<div class="progress__label"> </div>' +. '<div class="progress__track"><div class="progress__bar"></div></div>' +. '<div class="progress__percentage"></div>' +. '<div class="progress__description"> </div>' +. '</div>'. );. };.. /. A progressbar object. Initialized with the given id. Must be inserted into. * the DOM afterwards through progressBar.element.. . Method is the function which will perform the HTTP request to get the. * progress bar state. Either "GET" or "POST".. . @example. * pb = new Drupal.Progress

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	306
Entropy (8bit):	6.9396670413198285
Encrypted:	false
SSDEEP:	6:ak5ZklEWnahRXnVtsY5f3a+QwGR15Fy4fFW1eeWbMsjmC44cMzlWRDN5t/:vE9nahRXMY53QwGRLFNfFWUdbVmCJFWT
MD5:	DC6371E7F75249692103383820237D1B
SHA1:	BE4D1A8D4C2F8303C862E3C83579EEB3E11550CB
SHA-256:	5B0E90EF2837ED4D98A53A8669CE653B5923153C35BF485C978E493A4A5AE891
SHA-512:	F07308B2E3746893D9E1BFD06293110A31891C0C3C799DE0E35347D5880022A3C70932231041083B2864ADE985D64C461421340637C2F29E6DE4B9AAC23B82D5
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8X..............ALPH{....w . $8.?.!".?..m[...."!...H.....Q..".WS..ft.T........c.t-JnE...K~.........3w...."D...Y.......@&1b3m...#.!.L\....\|...VP8 .............>1..B.!!... ....;....O...>...oP..........$..............2.....^.4......w.]..j.1.9.Js.-...5o..Xy..w..>)...2.H{.@.c.W?\....

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12283)
Category:	downloaded
Size (bytes):	393007
Entropy (8bit):	5.670915363037364
Encrypted:	false
SSDEEP:	6144:enti7PJOuRze6Lf63mod3WEIML6WX+pGTRA/LY9Fawb7TAgY1fY/I3dRmDWzhqcB:enti7PJOuRze6L3odIMLn2LYXawb7Etl
MD5:	A94D791CCC4DCC63D86CDFCBBAEDA621
SHA1:	B5D43CD4DA358DC358DDC7B3F17D5B5DE596F4F0
SHA-256:	DAB613CE872E51FDEB0766A07FD1547BA1D1E2E0A8A04067ACC5D9D05FD019A7
SHA-512:	B1475D10B739D40AF72EA95DF9B734C41AE7A4C48723B9AF83DCED1B65F12D455EA6720BBB55E8AB09C2493A27753D4634C8414F796F0C51E11A93601487E238
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyCeq_f3VTYUSsmbNRs2ykE-xujgO1xvQ0E&language=en&libraries=places&callback=app.tracker.event.cbGoogleMapsLoaded
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en\u0026","https://khms1.google.com/kh?v=989\u0026hl=en\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en\u0026","https://khms1.google.com/kh?v=163\u0026hl=en\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixels-pa.googleapis.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13586
Entropy (8bit):	7.9772005072982495
Encrypted:	false
SSDEEP:	384:7vVYokigQa7fDZyBN4PojMG51PSyaRaDHOEy:BYca7L4BCAM2Pjay8
MD5:	5F1315FFD12ED804AB6C3D0A5B023E6E
SHA1:	A4B9993BB2EAFAFDECC2493BB00ADC1FE5D20E94
SHA-256:	1693B7F26F978D742ABA409524E4C5A02CD920246F593F9FB7994CBF614AC548
SHA-512:	AE7E3B56C9AE6B4796DE69EF4309CFD55DBD263B900281B3C3387A3A3A0F044A894EC4970EEEFDC9890C738A5EA484F6F109D1A24F563AA61D1FD549BD039026
Malicious:	false
Reputation:	low
Preview:	RIFF.5..WEBPVP8X..............ALPH............=.....XWU.U..5h....Z.F;]m...#.)8b...jm......E.P+Z.....kp...q...p.#.s..8.F....^.Q...b^..?l...i.$J..v..I...>.{...V..H...o....o}.C...O..<\|j....,..H..lO...t..~...^k.I..S?$......9.w......A...2.R&L.h4Q..(....QQQ.F3ab.!++K...x....n[.8.o.F....{.7.......r..YZU.R...s9N....5.`....qi^.7.T....\.?Z........B.J....s.N.K)..........CX.7go<WVn.X.S.jU8O...W.ui..xzy.I/6...E......+.!+u.Z........4......o...5}#...O.\.V....sJ.6.....Ox1....W.^."..S._..jt.....ZS...K...4....(..(X..1O.Q..i7i.GB.N.E.o.&..w...k-.O2.,Y.%G.s.ZW...%...:...BU~.H...j].Py0.o@...../...Q..s]..OnU.h;:.+Y:E8...:....=...F.?=l).x.=..4...../.\|...8AE.NN.R.8uL.?+H...,.G.U...].7..v..b.A.sT.U,..o..`?..sSN....6..}..U?'\|....p.=..,7.?.2.q.O.lN.{.3:....:...V..-.w.3.;}[...N.w.....P'~...%..9Mn.....-..gi8........}..[. ..y('..u.b^. yQ.~.. ..mg..'.Q.z}J}...}x.G.d....5.9.v.P.$_.k..\|I...O.H..u7f...gR..H..Xyj.oh..y.G.hT.i....sz.O.R..Y...y..U..'.x..+3........

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64275)
Category:	downloaded
Size (bytes):	102203
Entropy (8bit):	5.337179727861248
Encrypted:	false
SSDEEP:	1536:JGBGzXnifBbKkadGBMjIcAHh8wYoTzayJFm:JGI7n6BbKkad9i8gA
MD5:	34DBB3704D6BE5E1F2F442368E7139A9
SHA1:	A0C1C62776A465616F3A78EE86CB1AEB3E92AC82
SHA-256:	9F2E080F1C25FF244599D2EF8DEAE4D2C99761E3CADA2F8ACECA25E503952100
SHA-512:	A56921C79DEA55A4813ED5C77BD8B9B8AE89375C61FC9B139F8030A94BD3C1FC0B626E1A46E2F67A0465DDECAF8B5EC337B2915621F8180D57021098E7D21B69
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/js/app.tracker-drupal.js?v=1729112303023
Preview:	//@1729112303023.var dataLayer=void 0!==dataLayer&&dataLayer\|\|[],app={tracker:{ui:{template:{},event:{}},status:{},config:{},init:{},service:{},util:{},data:{},model:{},mapUtil:{},queue:{summary:{}},analytics:{},timer:{authenticate:{},summary:{},detail:{},subscribe:{},resolve:{}}}};!function(u){app.tracker.analytics={summary:function(){var a={event:"search-summary","search-exceptions":null!=app.tracker.model.getSearchErrors()?app.tracker.model.getSearchErrors().length:0,"search-results":null!=app.tracker.model.getSearchResults()?app.tracker.model.getSearchResults().length:0,"query-duration":(app.tracker.timer.summary.end-app.tracker.timer.summary.start)/1e3};window.dataLayer.push(a)},error:function(){var a={event:"search-error","search-exceptions":null!=app.tracker.model.getSearchErrors()?app.tracker.model.getSearchErrors().length:0,"search-results":null!=app.tracker.model.getSearchResults()?app.tracker.model.getSearchResults().length:0};window.dataLayer.push(a)},detail:function(){var

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	7.665644569817755
Encrypted:	false
SSDEEP:	24:wt+MXpT0lxWrjvpewvmUC6FHtggj9vQajBjVS4RQuHg9t:yD0lxQocfvggxvPji4y9t
MD5:	AC17FD6F6B966010A8ABC60DAB53773D
SHA1:	B83FB2790FB62E0E4984134B204A8BA2E0496DCD
SHA-256:	8CB79605DA88D5A07E61593C743AE7FBE2AA42F69E3C2C67C5E3001F99BE2247
SHA-512:	AAF26BD8AC929A9E991D798B5D42D860447854060D344A725DB1A7538AF13F60AD4B559AA5A7D943DBFCA1D61B3431E7DEEC5DA66C56A646DDADC6BD1D750E83
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-track.png
Preview:	RIFF....WEBPVP8X...........!..ALPH......+m...q....E;..N.n.!gpwwww..............".E/ "&..hmj..s.{.W.6#.S..n....j..w..........U`p.^....,..Q.T...JG..\.U..^m.Jg..8s..@..`.C#.qZ{.8..&H.Qm+0w04.z..6MC.C..Q.\|^.im.Kig#.VW..5Y.....:.7..^..\.O.pS.f4.S..`..Z_.. .. ...&!....j.x..!..n..[.4$.L.q..c.;j... ...$..G.....t>$5..4..\|.$......u,...A....."@0..~,..z0...0C]L...th..T]......O.s..2..mu.....R.ON.~.W?...P.C....O...?pJ{.`.....g....Vu.@.s...(.:....S..f..Y.O...3M.n:......Uss..5...Q...\..V:9ztr.....[..._..P./.>......~c........i....VP8 ....0....* .".>1..B.!.V.....[.'L.........h.....`9[.P=........[\|..'.....G....w.7...W.G.._.....8j......~.q.+/-...?.l.0p.........6../...>..F..........6.#0....s........B.T,.X.?..9Io].t..g..6..=.Q....W.J..{.6....@b..W..l"h/8..cv.. a.Yi.=x....d..r..ZV..m.hp.d.>m. ....H.6.~.n.......8..V..e.....d8z.,..}W.b75[.;.@..~$)l...Q......G.Gp.71e..7...L'.g........A.].=.E....0...IJ..l...

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1101)
Category:	dropped
Size (bytes):	1102
Entropy (8bit):	4.900961898390107
Encrypted:	false
SSDEEP:	24:TL6j1zXkaMwoNo9GiI9hMiKTeMVfMqIzK8TfGDVs6GL:Tq+aoeQVKTeMVfPImJqL
MD5:	8CA9BAAFF95855EE5D3919153C4FC35C
SHA1:	016AC6970EB1F3A877E1E7057B9FB09FA16A70CB
SHA-256:	EFFC8DFDF5A84D54DE73D083EF12D1D7953B3859D897B85C75F5AFD2767BA3FD
SHA-512:	9D0CA056FB9DD254BA313954747A49ADA622C6464A5AAA19AB4E47F2DD752CB85FF14284176FD27965CE981FAB99FCAEF8DB9080389D32404183B9B7744D418D
Malicious:	false
Reputation:	low
Preview:	!function(o,u){"use strict";var c="data-once",f="jQuery"in u,a="remove",s="set",v=/[\11\12\14\15\40]+/;function i(e,n,r){return n.filter(function(n){var t=o.is(n,e);return t&&r&&r(n),t})}function d(n,t){return o.findAll(t,n)}function h(n){return"["+c+'~="'+n+'"]'}function l(n,t){var e=t.add,r=t.remove,i=[];o.hasAttr(n,c)&&(t=o.attr(n,c).trim().split(v),o.each(t,function(n){o.contains(i,n)\|\|n===r\|\|i.push(n)})),e&&!o.contains(i,e)&&i.push(e);e=i.join(" ");o._op(n,""===e?a:s,c,e.trim())}function m(t,n,e){return i(":not("+h(t)+")",d(n,e),function(n){l(n,{add:t})})}o.once=function(n,t,e,r){var i=[];return o.isStr(n)&&o.isUnd(r)?m(n,t,e):(o.isUnd(e)?0:(i=m(t,e,r)).length&&o.each(i,n),i)},o.filter=i,o.once.find\|\|(o.once.find=function(n,t){return d(n?h(n):"["+c+"]",t)},o.once.filter=function(n,t,e){return i(h(n),d(t,e))},o.once.remove=function(t,n,e,r){return i(h(t),d(n,e),function(n){l(n,{remove:t})})},o.once.removeSafely=function(n,t,e,r){var i=u.jQuery;return f&&i&&i.fn&&o.isFun(i.fn.remove

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3198
Entropy (8bit):	4.616720561892622
Encrypted:	false
SSDEEP:	48:lILSFWPW/1VAzIaThbL3xzzyf3pkNTpInJPPpm:CLSFWO/1VA8aNfB/yiWJPPpm
MD5:	FF6E3B56731660DEFE101E73763F20E8
SHA1:	D60EC1F3C61E309F223E1784C1F482C7731C8B01
SHA-256:	45EA6360DB2DA21687D298324747C537D8DD63E467B6787EC248C755C89752C7
SHA-512:	0188A32F367DBD5313FB4BE79460DE46767D765D092A520EB64C852F1F01C75C4F7D7C6FD33F49A0B8CC8A082DF153448BA5E1A1A40DE7D86055202389ABB572
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/custom/purolator_search/js/search_header.js?v=10.3.1
Preview:	(function($) {. 'use strict';. Drupal.behaviors.search_header = {. attach: function (context, settings) {. let searchHeaderForm = $('#general-search-header-form');. let searchFormHandler = $('.block--header-search-block .header-search-trigger');. let menuItem = $('.header-bottom .nav .nav-item .nav-link');.. // Toggle visibility of header search block. function toggleSearchBlock(e) {. searchHeaderForm.toggleClass('open show');. searchFormHandler.find('span').toggleClass('d-none');. searchFormHandler.attr('aria-expanded', function(index, attr){. return attr == 'false' ? 'true' : 'false';. });. searchFormHandler.attr('aria-label', function(index, attr){. return attr.indexOf('Open') != -1 ? attr.replace('Open', 'Close') : attr.replace('Close', 'Open');. });. }.. // Get click event outside search toggler or header search block.. function getOutsideClick(evt) {. if (searchHeaderFo

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1201
Entropy (8bit):	4.891861421261929
Encrypted:	false
SSDEEP:	24:MPeEjmj0sDxoUNFlUNriNAsUNiwtuSs8AFl6EdPGRWo2RDIZ7yklP:MPVyQsdo8Fl8rWAhR08A/6EdewoGitlP
MD5:	951F8699B1EC182A2C2FE696E90C9C63
SHA1:	53A17D53DD6FEEA4E611AA3079736348CF9B6976
SHA-256:	2FD68259225CF8504835792AA8E09F7626C6C41C61B9BAF984C69DCF104CAD7E
SHA-512:	151F5AF89C798FDD1E8961A4C2E8DED6C481EEE0EBDF4C02EA81CF0CD09181932309B7A79D3D562DCD40E4B0576508A2001E6AD1CDA72592E375906F87324998
Malicious:	false
Reputation:	low
Preview:	window.dataLayer = window.dataLayer \|\| [];.function gtag() {. dataLayer.push(arguments);.}.gtag('js', new Date());.gtag('set', 'developer_id.dMDhkMT', true);..(function (drupalSettings) {. const config = drupalSettings.gtag;.. if (config.consentMode === true) {. gtag('consent', 'default', {. ad_storage: 'denied',. analytics_storage: 'denied',. ad_user_data: 'denied',. ad_personalization: 'denied',. wait_for_update: 500,. });. }.. if (config.tagId.length !== 0) {. const script = document.createElement('script');. script.async = true;. script.src = `https://www.googletagmanager.com/gtag/js?id=${config.tagId}`;. script.type = 'text/javascript';. document.getElementsByTagName('head')[0].appendChild(script);. }.. const additionalConfigInfo = config.additionalConfigInfo \|\| [];. if (additionalConfigInfo.length === 0) {. gtag('config', config.tagId);. } else {. gtag('config', config.tagId, additionalConfigInfo);. }.. const otherIds

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5369), with no line terminators
Category:	downloaded
Size (bytes):	5369
Entropy (8bit):	5.064819709656671
Encrypted:	false
SSDEEP:	96:W0xrc6Raun/a/PEqKmGiVUC17skJ3KuwSmJ6JTHOHQWOH6Xt8f:W0P/a/PEhi17JC6JTHOHQWOH6Xmf
MD5:	D4CFF69B10171666B090393AEBD8EAA3
SHA1:	8988C2A1A7E12A5AA7B481297639E1FD48376547
SHA-256:	1E1EEDCC2E36825FE33D92B9F481A7926E7C1D116850C374103B560CD0CB1BA5
SHA-512:	89EC48A47195F0E7EDEF3F29F431A41196F8DF2DFF84FBBEA33DC508FBB9FF984070F08CB2854E50AD25BB224969F0EE01E1C02FAA7F6B58BE0AD2487F1A83E8
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/purolator_theme.script.js?v=10.3.1
Preview:	!function(t){var e={};function o(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=t,o.c=e,o.d=function(t,e,a){o.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var a=Object.create(null);if(o.r(a),Object.defineProperty(a,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)o.d(a,n,function(e){return t[e]}.bind(null,n));return a},o.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return o.d(e,"a",e),e},o.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},o.p="/",o(o.s=0)}([function(t,e,o){o(1),t.exports=o(2)},function(module,exports){!function($,Drupal,once){

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=3260330%2C4433876&time=1730465872903&url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1488
Entropy (8bit):	4.492329513037864
Encrypted:	false
SSDEEP:	24:fC5rBHccrTVsZaDj4OpRdXf+d+7oT+n4aEjG3yMgq6FU/Qc4O:fCvlBsZaDtfdx7oT+x38q6W/Qc/
MD5:	408B3E82F72D4C9C910CECC336C7F1F0
SHA1:	A74E97521ADF2B37D2B4419E843C654043EF5E36
SHA-256:	08917CE03BF43E31F728F6AA830CD2F8D252E39A8F6D769578F07B500C3EB87F
SHA-512:	2088B4F9D9953E4F0B27467933925946CFD8EC21FCFAE5C89213F8FAE92D82DFC10E5689C61BD7B8D87E7031FFD8DA3FDB51C9E9221E1E8988B3BA1E7B8D19CC
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Adapted from underscore.js with the addition Drupal namespace.. /../. Limits the invocations of a function in a given time frame.. . The debounce function wrapper should be used sparingly. One clear use case. * is limiting the invocation of a callback attached to the window resize event.. . Before using the debounce function wrapper, consider first whether the. * callback could be attached to an event that fires less frequently or if the. * function can be written in such a way that it is only invoked under specific. * conditions.. . @param {function} func. * The function to be invoked.. * @param {number} wait. * The time period within which the callback function should only be. * invoked once. For example if the wait period is 250ms, then the callback. * will only be called at most 4 times per second.. * @param {boolean} immediate. * Whether we wait at the beginning or end to execute the function.. . @return {function}. * The debounced func

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/assets/vendor/jquery/jquery.min.js?v=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2972
Entropy (8bit):	4.76053430551437
Encrypted:	false
SSDEEP:	48:nLNxbVh0vlOGMnrTuW2WOApkR3DFKsDXOR2ptSZb9YotWqWAHALEwLxJ8rc:L3bMvlOGMnWYlpkR3Z+R2pYZb9Y+WjA6
MD5:	A5A31C397A8932A51FC6054833DD9916
SHA1:	1979B4EED3DEE002914CB72A61A1F7168F9AB667
SHA-256:	77784F2AD16A64B675373AFDA3C7F81AF243B82426A0F6C42F427DE3B356295E
SHA-512:	A8AD56F8D2C9BD15EAD3B0092D3DD1A20CAB1557A8B242709F6D07B379F2E61A188F1FA505889B6DEE456BF45CA1999453B230180DC61BCE0FC2B1D306D4E851
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Attaches behaviors for the Clientside Validation jQuery module.. /.(function ($, Drupal, once, drupalSettings) {. 'use strict';.. if (typeof drupalSettings.cvJqueryValidateOptions === 'undefined') {. drupalSettings.cvJqueryValidateOptions = {};. }.. if (drupalSettings.clientside_validation_jquery.force_validate_on_blur) {. drupalSettings.cvJqueryValidateOptions.onfocusout = function (element) {. // "eager" validation. this.element(element);. };. }.. // Add messages with translations from backend.. $.extend($.validator.messages, drupalSettings.clientside_validation_jquery.messages);.. // Overwrite default URL validation method, accepting public/private urlscheme.. var _urlValidation = $.validator.methods.url;. $.validator.methods.url = function(value, element) {. return _urlValidation.call(this, value, element) \|\| /^(public\|private):\/\//.test(value);. }.. /. Attaches jQuery validate behavior to forms.. . @type {Drupal~beha

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10551)
Category:	dropped
Size (bytes):	10730
Entropy (8bit):	5.352436838231437
Encrypted:	false
SSDEEP:	192:WgSEXPZozhRGOhtMZGNU+H+7j3f9JI+REReqAVI3PnyF:rx/EhJtMZGdgI3PnK
MD5:	2A6DACDAA26AEDF49904AB9568C316A9
SHA1:	42DD1B1C0CFC4E98A037D6C6DD456D03EFAD3B03
SHA-256:	226DBE00A5F22C151E3D15D61256809EE737EE7E9E82C6B2A4D88064D315D6DF
SHA-512:	7854C12A4FFD33A1C63B05D97226FF95AA2059DE3FB7D0823B8B1F25844944783B55F51C31B748EB6D23AAE82F4E9DBFB3A69DAA7B2D0D230576C58FF303B1CD
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(a,b){'object'==typeof exports&&'undefined'!=typeof module?b(exports):'function'==typeof define&&define.amd?define(['exports'],b):b(a.PopperUtils={})})(this,function(a){'use strict';function b(a,b){if(1!==a.nodeType)return[];var c=a.ownerDocument.defaultView,d=c.getComputedStyle(a,null);return b?d[b]:d}function c(a){return'HTML'===a.nodeName?a:a.parentNode\|\|a.host}function d(a){if(!a)return document.body;switch(a.nodeName){case'HTML':case'BODY':return a.ownerDocument.body;case'#document':return a.body;}var e=b(a),f=e.overflow,g=e.overflowX,h=e.overflowY;return /(auto\|scroll\|overlay)/.test(f+h+g)?a:d(c(a))}function e(a){return 11===a?T:10===a?U:T\|\|U}function f(a){if(!a)return document.documentElement;for(var c=e(10)?document.body:null,d=a.offsetParent\|\|null;d===c&&a.nextElementSibling;)d=(a=a.nextElementSibling).offsetParent;var g=d&&d.nodeName

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3235)
Category:	dropped
Size (bytes):	3236
Entropy (8bit):	5.088604666201516
Encrypted:	false
SSDEEP:	96:vorXBAoTn0KaJxSr4pCVlgmoinOOJfkq6:vgX3bExSrVlgmDOO+
MD5:	B3F92A2BBEF8C0CBDB772ABDEF438B7B
SHA1:	BAB0C756728ACD2AD34664015ABECE3887043298
SHA-256:	EEE238D0BD2DEDE876B3DCF62E4D97CBAE4C57944D0726D9F6923E2B988374FE
SHA-512:	2A2E053560C2E1D7FF92D7CDCC6CE3958739611913CDD69D9C4740C12FE8D19D1A682B93EE26DB7536B250CD2B28F5FB31B97A5DD96B40AB92F346FFD589EAB6
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"use strict";var o="Blazy",s=t.dBlazy;s.isAmd?define([o,s,t],e):"object"==typeof exports?module.exports=e(o,s,t):t.Blazy=e(o,s,t)}(this,function(f,u,o){"use strict";var d,v,n=o.document,g="srcset",i={},r={},p={},a=u.viewport;return function(t){var s=this;s.name=f,s.options=i=u.extend(u._defaults,t\|\|{}),s.options.container=!!i.containerClass&&u.findAll(n,i.containerClass),s.destroyed=!0;t=s._util={};return i=s.options,d=i.src\|\|"data-src",v=1<u.pixelRatio(),a.init(i),s.windowData=function(){return u.isUnd(p.vp)?a.windowData(i,!0):p},s.revalidate=function(){e(s)},s.load=function(t,e){var o=s.options;t&&u.isUnd(t.length)?c(t,e,o):u.each(t,function(t){c(t,e,o)})},s.destroy=function(){var e=s._util;i.container&&u.each(i.container,function(t){u.off(t,"scroll."+f,e.validateT)}),u.off(o,"scroll."+f,e.validateT),u.off(o,"resize."+f,e.validateT),u.off(o,"resize."+f,e.saveViewportOffsetT),s.count=0,s.elms.length=0,s.destroyed=!0},t.validateT=u.throttle(function(){l(s)},i.validateDel

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6576)
Category:	downloaded
Size (bytes):	12010
Entropy (8bit):	5.8662276502172555
Encrypted:	false
SSDEEP:	192:O4kko3D3Sf/aRyK30klyyxgrRyK3xRi1CCuhiohVi6fT:OIaBEk1xEBMIbr
MD5:	9C3CC65916B16EDF6765F2967642942F
SHA1:	961AC644E57D06ABA33B9077B951792644793BF3
SHA-256:	D8FD3EC04F6F9917BBD3ABC34D076FA12412B3923C1B36840044B0E0BB06D303
SHA-512:	F214C5315F578397393FB396489BCFC5E313D4710F99DF176F81AE23B0DEF2D5E31B7E4AE25533DAD10878E4D38C88E6AB95E8C6F8E40E6EE317053C94250BA9
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/custom/purolator_widgets/js/virtual-assistant/chatbot.js?v=2.2
Preview:	//Variables for Virtual Assistant Pop up/DropIn UI setup.var dropinTitle;.var dropinSrc;.var param = '';.var appContainer = document.querySelector('section[data-apps="tracker"');..//Used for DropIn UI setup.var typeParamPin;.var typeParamCategory;.var typeParamCampaign;.const categoryTypes = [ "Address-Correction","tracking-general","file-a-claim","claimstatus","generalbilling","notifications","location","billing-invoice-inquiries","tech-support","international-inquiries","schedule-pickup","residential-schedule-pickup","sales" ];..//Hook to open Virtual Assistant pop up.//1. Function to check if browser is IE 11 or below.function isIE() {. var userAgentString = window.navigator.userAgent;. var msie = userAgentString.indexOf('MSIE ');. var trident = userAgentString.indexOf('Trident/');.. return (msie > 0 \|\| trident > 0);.}..//1a. Function to check if page language is french.function langCheck() {. if (document.documentElement.lang === "fr" \|\| window.location.pathname.indexOf('/fr')

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.be180668.js", last modified: Tue Oct 29 22:21:36 2024, from Unix, original size modulo 2^32 83598
Category:	dropped
Size (bytes):	27513
Entropy (8bit):	7.992802741759857
Encrypted:	true
SSDEEP:	768:RsfAgqyshviKsrwseSv7MjVtkHArfdNZY:Gogqyshv/srwSMRNrfdNS
MD5:	C5CAE4182177CA41C1337703E080917B
SHA1:	8811B0C530515A96A9B14BA2A0FB56B2121CEB5F
SHA-256:	4DB45A417932A655C15B3F5B228E0BB941C833ED54CB64C6F020AF7764A52FB5
SHA-512:	646BA8C37943CAB399F0565CB5C5BC82CE754D3E21E35573773655E02ACE3674AC04A76E2F35359F08F82B063B3D36009877BD0DA983D15A6C771A6F858E7535
Malicious:	false
Reputation:	low
Preview:	....._!g..main.be180668.js..\.o......b%...8.,.h{3`.[;,.... Pl:..Py..47.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;;...)^.$..:<.]..&.D.>l...G.y.^.\|X......7kz...M....pN3....2./..d..%.l>_...b.`.._..e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX...__..~_....Td...._..]#..u.]../.X3kK......<.R.(..8....E...Nl`.{..D..,.<..S+.#XTO........."2ZB.g,....zM......(s-h....v...s.c q..5K9Y..-........2.\....f;.L.B.r3BJ..1d.o,..I.c.a1..T..$..6ly....w....r9..6.z...M....6\...;.y..._@.7.....S.'[.. ..........lz.;.....O....#......J..._...._..................\|4>.M.G.......q0.V./..`.R.Xe.]....o1.b'Y..f..au.E.....Y...._..U-L..H........J...Br..j>...V............((A.{UY..}`....U....".s....t@.W$P.-..K...ZiVf#...Z.v.`..4..=.......B~...2.......L.\.'.@...].pw.zq..^..(.'..3.........4)L.,....<-.UT^.).XD.x...e`ML..O..&T..r.......{.~.......-Q.!s...2g..20-D.F.L.Xn.].Q...f..RJ.ZI.lN.m......~u..v.7%.#....m.Pn.v$4....v..M........>gT...0....Y%.).6s;+......vA.v.d.Z...p...C....x..

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1277)
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	5.060674328443428
Encrypted:	false
SSDEEP:	24:ekt6t/ZyyIGb1RmGPJR7tnJOLig+KGb1R8IRXiYqDVkn4KxBr:eyyIGbCGbtJOLEKGb1VDq3st
MD5:	CE982BA885BC71901074B4453BF3917A
SHA1:	1C44364024B0791A8363276225FB7D59955212E1
SHA-256:	1D137F9B816994FF3DD240EF04942EBF47C48131C32B0ACC640DB3065755D496
SHA-512:	DCB975832F9E7B61622C78ED3E03838CEAEE87E7CE7028ADDE2AF7B4A8B1EC7B4BFA3C00D345CEA0BB2DF9E21D775B1BB9B9119102575D8B88A591A53E1BB37B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/assets/vendor/once/once.min.js?v=1.0.1
Preview:	/! @drupal/once - v1.0.1 - 2021-06-12 /.var once=function(){"use strict";var n=/[\11\12\14\15\40]+/,e="data-once",t=document;function r(n,t,r){return n[t+"Attribute"](e,r)}function o(e){if("string"!=typeof e)throw new TypeError("once ID must be a string");if(""===e\|\|n.test(e))throw new RangeError("once ID must not be empty or contain spaces");return'[data-once~="'+e+'"]'}function u(n){if(!(n instanceof Element))throw new TypeError("The element must be an instance of Element");return!0}function i(n,e){void 0===e&&(e=t);var r=n;if(null===n)r=[];else{if(!n)throw new TypeError("Selector must not be empty");"string"!=typeof n\|\|e!==t&&!u(e)?n instanceof Element&&(r=[n]):r=e.querySelectorAll(n)}return Array.prototype.slice.call(r)}function c(n,e,t){return e.filter((function(e){var r=u(e)&&e.matches(n);return r&&t&&t(e),r}))}function f(e,t){var o=t.add,u=t.remove,i=[];r(e,"has")&&r(e,"get").trim().split(n).forEach((function(n){i.indexOf(n)<0&&n!==u&&i.push(n)})),o&&i.push(o);var c=i.join(" "

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 45660, version 1.0
Category:	downloaded
Size (bytes):	45660
Entropy (8bit):	7.994854720164219
Encrypted:	true
SSDEEP:	768:GUKzRixeDoxblUyrwjh1rIytXytR65xaib3lYR2aEc+FvsSYxKq4hPOdPUxxV2:GU8i/NuyeLTyQ5Tble+6gq4hPOdW2
MD5:	ADA2F2EDB5AA0F615593530D72BAD713
SHA1:	3D36A81B55BCC50A8BB9655774DB8EDC7858490B
SHA-256:	0E2F287C6CCFE8B134BDC690FD848C02C3D7CD8B7AFF0E69C96DEB4590E052CB
SHA-512:	A8E9ADEEAE03E7D76DDC7BE75A8001AED52E0C896AF27246D055E0EC5F978F83D3BF95AEF8D4BDC7BAECFB562C7094B7A4DA3E7A8F5510645CF3FEB65E0D5B6C
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/fonts/OpenSans-Light.woff2
Preview:	wOF2.......\..........................................n.`.......4........q..R..6.$.... ..h..[..:[{`...n.7.(......../`....<}m.&.up.. \|s......?;i.a...-6l..?d...8e..,#\....".....Pz.c.<56....3.x.?[..#..../.?...{Pd<Q.l.8S..8.@..Q.Yk.r....GZ.;........p....JqCW.....fM.........{%.FR..].w..........Q...3.2v.w.......Sw.\N... ..k.2.\|..~.ZX....$...v.0...<r.....(.....K3..Mn.vn...n..-.0..G..}.^..M....CVn..aJ.U`.z..Q.....G..jW..F`$....t.R).....v.S?.......y..!$a..c`.T.........2#...8."n.V......p~....gc....E..E..-3..8....Y...m.S.......10.V...DDD@...;..j3.\..H.v....M..m..N.Y..1._.>{.....T.&6.Q4.../.H.w...3{....Z.H.c";...>.F.a...R..[...%<E.3.g.@.X.o.S.d-.$/.G\....\|....es.=`G ..........r....K..u...s.t._.!]..S.f..~..}.$..W....Z...l...\|./..k../..(m.R]..gt..OK.hi..q!@.....$q.N..,....K...2....'.....p....Hg..j%.......E.4....}.6?`K.F...p.@...Ob.....o-..P.jC..6..l.M.%..,...l....[x. ...M.2M....[7.:...../...C..y.w.A.x._\4P..3A..y.%.i?2...tW..1.... ....S.$..Y..E.......}Y

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	704
Entropy (8bit):	7.574780485816773
Encrypted:	false
SSDEEP:	12:JWIbk89j5u3GEIgcTYjv0nkD0Npr9rO2hTlsm9jj+lZKkLJC9xCc8Ht:JisjkOTYjcnkI/h2+3CT
MD5:	B1543D5DEC40093B827F8568EBC0942E
SHA1:	797C589F34E85DA63C5CDF5541E52C0F48BA6215
SHA-256:	D0CB106DA2ED7EDDF40C18542D88549969F27AB60E6878509A42BFAE4D6F41B5
SHA-512:	63D470F893F736FF7CBA74E76AC08880576167B71B9A37CDE5259C74B62615B480DAE3C177C8E7B913DDEFC1858D20783106104B24CD21BC9C819BC2A9FB5343
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-facebook.png?itok=MfOAW2h7
Preview:	RIFF....WEBPVP8X........0../..ALPH.....p$..d$....Uq..Gl.6..O.VDL......M...ANi...6..:..N.".).M...0v... h#.W.[..f..@...y......"oBA.$)...t.....s...$.....P).J..z..6F.2."...BP!....l..........VP8 .........1.0.>-..B........bY...r.kWr...8.m....s..............'.c.W4.i...f..}.\|..%.g..W.-{..."....A..w.o1?.^...x-......X.h..&.T..A...P..S......w.P..WH....R...@.........P...V..W...js..}..M..V....w.G.XE.^=...8A.kW...../o......i.vW.Q.jO...b^b..{..jPUu......G.w.e\.\......`/..u..7.....E..../..4..6B2....R......o.......^f..b'....G..1..?..Q ~"_.A&,?Sw.a..\|.(.]:=m..$................w..b.N.W..6m\|.S.2j.-^_.$1.@P.... w...a!.....C..5..L....'?.R.t..^.y~......M...k9..^&...F...6(-..eiY.a...

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	8440
Entropy (8bit):	4.795769728223221
Encrypted:	false
SSDEEP:	192:z7tkf/YiGiKejrkNTuC8NFWZaG4z3VLK2Wk+CiEbjkQghywnEGvEiQWzohlb:+f/Y8VKdkZib3xm
MD5:	4B09E1586A4E7643390213FE640AD121
SHA1:	51DB26C5AC723DBA0E8E02B605D0325D9DC79C97
SHA-256:	463FAAD63E59F653F8367CA1BD38629A240EBD4F2165C313E660933ACC322B04
SHA-512:	FCCEA963659F870B92EF92D8CE446E0E64DD1C142BEED61981776F5B77DD81F80F7AB52BB5B89262358A1A85C1CE3627835C977E7E78D7C3BE76E39D39D532C7
Malicious:	false
Reputation:	low
Preview:	if ("undefined" === typeof(_etmc)) {. var _etmc = [];.}..if (!Array.isArray) {. Array.isArray = function(arg) {. return Object.prototype.toString.call(arg) === '[object Array]';. };.}..var _etmc_temp = _etmc;.var _etmc = {.. debug: false,.. setup: function(array) {. var l = array.length;. for (var i = 0; i < l; i++) {. this.callFunc(array[i]);. }. },.. push: function(item) {. if (this.tracking_disabled) return;. this.callFunc(item);. },.. callFunc: function(array) {. func_name = array[0];. args = array.slice(1,3);. this[func_name](args);. },.. setOrgId: function(args) {. if(Array.isArray(args[0]) === true) {. this.org_id = args[0];. } else {. this.org_id = [ args[0] ];. }. },.. setUserInfo: function(args) {. var user_info = args[0];. if(this.user_info && this.user_info.email) {. user_info.email = this.user_info.email;. }. this.user_info = user_info;. },.. setFirstParty: function(args) {. this.first_pa

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.6462918244996687
Encrypted:	false
SSDEEP:	96:jYWt6KTmkw7jUUUUUUUURhPhH7snMnEADbvG:jYM6Om9HUUUUUUUid7snMB/u
MD5:	BD708888B9EEC84930DF12949DE61F20
SHA1:	9D3B844FCC89F0324717AC6835DB10A09ED9E0D2
SHA-256:	90683685200A4B263107A7C3E3EB3FC80EEC7C8363521C2C71FBE888C8F749AB
SHA-512:	079D6656D3E1B0CD67CA2F4B7F33764E52E5D187EFEE9DC1B09CC6CB6AC90C9A6E811A6A44FE47185143B87375874562089A76F8B6530865DDF65834B6197D7B
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	813
Entropy (8bit):	4.694333686139638
Encrypted:	false
SSDEEP:	12:UikI/8fV7WoiFiH8AfHhakSQ7nzlYGbNaJrL72yn7x7O/8qdHR3xT:Tk0QV7WoiafHhrzzyGbNadDnM/8SF5
MD5:	3BA0E651A19D6D7642528577C09269A6
SHA1:	B9857453114C1779DE75DFB9A7D0F4CB6B6640E4
SHA-256:	1630795F03577BDE9942BD9E7294A9498F1450E8B02FF3455F9D5C040A4350A0
SHA-512:	E11E60FBEC732B55A9E2E65C6FD5C4479028462E062D790BE1D081F18A0E90495CFFD69A61CA662299135B2A1999D43A8112AB9B26D80D10EA93198F9839C077
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/custom/purolator_components/js/modal.js?v=1.1.1
Preview:	/*. @file. * Javasceipt to allow deeplinking to inside of components.. */.(function ($, Drupal) {. Drupal.behaviors.purolatorTheme = {. attach: function (context) {. $('a.modal-link').off('click').on('click',function(e) {. // Prevent default anchor behaviour. e.preventDefault();. // Determine modal to toggle, and make sure it exists on the page. var modalID = $(this).attr('href');. if ((typeof modalID === 'string' \|\| modalID instanceof String) && $(modalID).length) {. $(modalID).modal('toggle');. $(modalID). }. });.. $('.modal button.close').on('click',function(e) {. var modalID = $(this).closest('.modal').attr('id');. $('a[href="#' + modalID + '"]').first().focus();. });. }. };.})(jQuery, Drupal);.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4304
Entropy (8bit):	7.945325918513198
Encrypted:	false
SSDEEP:	96:6emrmRQLFh1MEaepU6uBkTwEWeJQGiEqHFnPOkCMiW:MrpzLT0ERHqHFPNcW
MD5:	4B1F8A29613C547C138331369D6549BD
SHA1:	7B58837F651F100B4AC4C4AD5A4DCE73D11BE697
SHA-256:	768C7BA10C27486DEE76EE5D207B64901CB95DB8309D08C7C18D21CA01D7DFFB
SHA-512:	EE8BC4093EC7F8C2F2E547767AFECBB07D277993BA666259DBEF7E5A763AB6C71954A60D1A96EA7F3EB4115650EDE592FD6425A4C94B62743645F31209F35A28
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-appstore.png?itok=lSjNWKGF
Preview:	RIFF....WEBPVP8X...........S..ALPH.....p.m[d...B.!.0.!..B.!...B.......'"&.g]...;]......h...M\.r.mb.....#}b.l....H.@.X.(m.....7.x..........%...q...h.%..<<k.....8......T...e.'.N.:...i..>Um.j...VP8 .....D.....T.>1..C.!.......Z@5l.d..1.....?...d.K....._..h..z....W......b.........?..R..~'.g...........q.e..?...^......_....?......!......._@.....s..........S>..O........p.....J.....O.....{8..._...?......../...?.....?......%..o........i.{.!...D.#..&.1S}L....T..........4:l..-.=..-....#A.....s...~."G.{Hq..O...Gs..@...X.96.e...Q.K....3.&............a..Bj6.>...&..0....F/.z.....XA.`c..5...K".x......5t..[.H~.}.<..J..5...H./...;...E....G (d...".u.^...K..K.t.i.W..I<.x. ...]..OX..............u..1...m....<P.........rb.~..5.}]..,......v.+1V..tC....vg.U.L.E.#...]M.....5.-.4....L-..9)..5.....O.aW.r..l]"j../...x.uo...b..L$.en..{s...P..;...z....a.Z.....4MY.....ht............e....UA....o.Ah....&{...v.....p...+z...6....u...}. ovfk.=!......?......'-Q

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	dropped
Size (bytes):	418463
Entropy (8bit):	5.636796366365926
Encrypted:	false
SSDEEP:	6144:D2GDFhLGLgB40ojAzWRSR9cM8rT/+2zUZ9Or24AvP:K8FhIc40oj68mYg
MD5:	535000972EE823603F5096A495F1B79E
SHA1:	0A775C6BF44414C91B7D1DD3A038658D5C3886C5
SHA-256:	49D4173F9A148A667962332EE90D84A853417B981F29FC06CF43CC6BDD76946F
SHA-512:	73873568CDC8356838B26F64B5A48A2BA8458A67B6A8083A8AA1BE51D20BFE562C5BAE05A2B3CA4F842871797CEAABDD10CDB62B1EEC117CFE1ADC5674520757
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":14,"vtp_value":true,"tag_id":9},{"function":"__ogt_ip_mark","priority":14,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":11},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":12}

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20989)
Category:	downloaded
Size (bytes):	21162
Entropy (8bit):	5.219703272963418
Encrypted:	false
SSDEEP:	384:kmQkLrwVOyzirV9nNbRGlB9D45HjiWZ8xpOxvRVgD75zBY5vImg3+zopL9TidOg4:vLsgyziJ/0D45sxpOxvYD73Y5v9zwL9F
MD5:	E21A6649041EF6F5F1BF43F11946621F
SHA1:	01BCAEF811210DE0EA58E55E47FBEFD77BE5C442
SHA-256:	7D3B9482D4FB3B6AEAA089B08EB84381B5D3294C32C71BA320C4482BB4DBB8D5
SHA-512:	10D373506802082BB1121092294E2AC7CF5695024A2AC9CE3E5D0A83F71B8FE906C3D9B736C667ECBBA5A340D73E284F1CF710F393A1614D051BF4EE21AC8D87
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/popper.js/dist/umd/popper.min.js?sliq8r
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=e.ownerDocument.defaultView,n=o.getComputedStyle(e,null);return t?n[t]:n}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll\|overlay)/.test(r+s+p)?e:n(o(e))}function r(e){return 11===e?pe:10===e?se:pe\|\|se}function p(e){if(!e)return document.documentElement;for(var o=r(10)?document.body:null,n=e.offsetParent\|\|null;n===o&&e.nextElementSibling;)n

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8446
Entropy (8bit):	4.543284608081913
Encrypted:	false
SSDEEP:	192:SJqwEGJSeqbpqh+xZFVV4y8zuI9UpjDC8mKgZ0ZjL5sy1bH9xF3U39EjdVx69:SJZEx7rrV/8qp/mrQjLt1Bn5Ve
MD5:	1E4426D764C1309842C3810174F0730D
SHA1:	F24845B622A78FCD44CEC229A84A3FEC23CA139A
SHA-256:	0A61DEC2FD3D6D4FB688C4D0500F5F6268147C6771F2FE9E095D1CD074CA56FD
SHA-512:	72F7C840DFD8C29F4882469431CE2F9400870055752227645954C44FD4A459AFF21111826EAC7FA9FFE844CB63C38996D27EE93702910D4732E9A83F09BDBB79
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/message.js?v=10.3.1
Preview:	/*. @file. * Message API.. /.((Drupal) => {. /. @typedef {class} Drupal.Message~messageDefinition. /.. /. Constructs a new instance of the Drupal.Message class.. . This provides a uniform interface for adding and removing messages to a. * specific location on the page.. . @param {HTMLElement} messageWrapper. * The zone where to add messages. If no element is provided an attempt is. * made to determine a default location.. . @return {Drupal.Message~messageDefinition}. * Class to add and remove messages.. /. Drupal.Message = class {. constructor(messageWrapper = null) {. if (!messageWrapper) {. this.messageWrapper = Drupal.Message.defaultWrapper();. } else {. this.messageWrapper = messageWrapper;. }. }.. /. Attempt to determine the default location for. * inserting JavaScript messages or create one if needed.. . @return {HTMLElement}. * The default destination fo

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	651
Entropy (8bit):	6.832130927024915
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfu:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenm
MD5:	8F379B3BCFD88DBA5D4528E6643F4A3E
SHA1:	2B769990E64D5946586489B56117698D79BE50D0
SHA-256:	F94FA06FA426C608A0CB184782CB19C91C0C9B3B71A3D28159F149DD4EEB1C89
SHA-512:	B738968E9258416B7F9EA0B6CA0CB693F843ACAC0E00F136AAE8A5507487D9F2D176DE15D28DE4CF7834C0CC9A78B308A6ABDFBC740E911E30DBA37AFBD5C878
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..8....Q{i?.F.$....R

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	downloaded
Size (bytes):	20092789
Entropy (8bit):	5.843097713670132
Encrypted:	false
SSDEEP:	49152:ty9ATXOz2ZZpMU4+sis3TV1Lczl/ElbHg/TlTI6XdwUtrghKpZsBKWUzbZxgYqKD:L/ZTI4dwUtp4cD
MD5:	D6B93CD2BF29131B4B03DBAD02778E72
SHA1:	A3C8013597CB764C3AE6F35B400030EACC753835
SHA-256:	1B877C316D313960B09F3CD7902B54EA6A261AFCCF5719D7F45259F76EE8EA05
SHA-512:	CF04499DCDDA23EE5B82ED4C0E4EB26435676112D4E2E3BF3A26734B7C83FA4EC2DE2B652D42E45ED80A851FBB4597A1BAA6D4A4B0F89711E54FFAAF7D48FD23
Malicious:	false
Reputation:	low
URL:	https://prod.virtualchatpurolator.com/broker.js
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4305
Entropy (8bit):	4.565502257431684
Encrypted:	false
SSDEEP:	96:+WZMdOYZ7xmSW0mPyhx2soRRoy44lZKDMnAUn4TouX:+UGdxmuiyhYsCyyhiDOAy486
MD5:	355F4F1CEB77743CA3D22BD365A10D2B
SHA1:	3D339F12D7097AA04CBD4AD71528DEDAF7A39EB3
SHA-256:	E4F48E1F5558252EBA1D25BE60A35A35A024390CF4970E0652B9E654F9E0302B
SHA-512:	C2E79CE0BDE097173666F6A2B84D2E9E318CB7B93DEA2DE875056E9E3FD49843415260AF9B48E52B444543042680F53104C49A47268D8BCAF0BAD2DBC0548496
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/core/misc/announce.js?v=10.3.1
Preview:	/*. @file. * Adds an HTML element and method to trigger audio UAs to read system messages.. . Use {@link Drupal.announce} to indicate to screen reader users that an. * element on the page has changed state. For instance, if clicking a link. * loads 10 more items into a list, one might announce the change like this.. . @example. * $('#search-list'). * .on('itemInsert', function (event, data) {. * // Insert the new items.. * $(data.container.el).append(data.items.el);. * // Announce the change to the page contents.. * Drupal.announce(Drupal.t('@count items added to @container',. * {'@count': data.items.length, '@container': data.container.title}. * ));. * });. /..(function (Drupal, debounce) {. let liveElement;. const announcements = [];.. /. Builds a div element with the aria-live attribute and add it to the DOM.. . @type {Drupal~behavior}. . @prop {Drupal~behaviorAttach} attach. * Attaches the behavior for drupalAnnounc

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	202
Entropy (8bit):	4.821619540607761
Encrypted:	false
SSDEEP:	6:URLmXYQyeVEI8DQtd7H3JcLE1wXFVIxtt:URytfVnldr5cLE1oIxT
MD5:	326180705B86FE808F5D354F077C476E
SHA1:	998E5E9DE06ACCBCCB46362906763A7DD35E5865
SHA-256:	F5260B0D408CC0BB87079F4F8438D5D6E8FD5A994F546411699FE956D09887E6
SHA-512:	3ECDA459F66D8ECB2CC5E5E5A6A9AFB46C27D785B3002E391AA72F6C6B47A476053A80A91C0D506099845E49D826ADF6CC4DE043A6247808248239680EA25B8B
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Helper js for back to top button.. */.(function ($, Drupal) {. $('.mod-toTop').click(function() {. $('body,html').animate({. scrollTop: 0. }, 500);. });.})(jQuery, Drupal);.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9500), with no line terminators
Category:	downloaded
Size (bytes):	9500
Entropy (8bit):	5.361838920270885
Encrypted:	false
SSDEEP:	192:j85B3yJdCE9r1dPZiDVGTtxRNs9lWzCWDFELiIh77fL4KL4vTfNhB:jawdC2BdPeOUDWzCOFELiIh77UzbVhB
MD5:	B2877DA906A3216C4F3FC4030B205E54
SHA1:	F7A612259BB345C70A1CAC073527E39DD5D8A0B7
SHA-256:	E779904E434D50E426E79DFAC680CDB8A04564E67121C257974278A02979E407
SHA-512:	428880BD5D5F63AF2E6A9354A6A500249E2A9EC96E5D3B995AEB9A467DBC075B255ACFFDB48A1A265273CFDFD25EBAB308D3B765BCCAD1C8BFF508947C19B866
Malicious:	false
Reputation:	low
URL:	https://js.zi-scripts.com/zi-tag.js
Preview:	if(!window.zitag){window.zitag={}}window.ZILogs={ziScript:{info:"",err:"",scriptsLoaded:[]},chat:{},ws:{},sch:{},fc:{}};window.zitag.SCHEDULE_BACKEND_URL=window.ZITagEnv==="dev"?"https://schedule-staging.zoominfo.com/zischedule.js":"https://schedule.zoominfo.com/zischedule.js";window.zitag.FORMCOMPLETE_BACKEND_URL=window.ZITagEnv==="dev"?"https://ws-assets-staging.zoominfo.com/formcomplete.js":"https://ws-assets.zoominfo.com/formcomplete.js";window.zitag.ZI_TAG_BACKEND_URL=window.ZITagEnv==="dev"?"https://js-staging.zi-scripts.com/unified/v1/master/":"https://js.zi-scripts.com/unified/v1/master/";window.zitag.ZI_WS_BACKEND_URL=window.ZITagEnv==="dev"?"https://wss.zoominfo.com/pixel/":"https://ws.zoominfo.com/pixel/";window.zitag.isScheduleScriptAlreadyLoaded=()=>{if(window.zischedule)return true;else return false};window.zitag.isChatScriptAlreadyLoaded=()=>{if(window.insentCompanyDomain&&window.insentProjectName&&window.insentProjectKey)return true;else return false};window.zitag.isFor

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.925410635240724
Encrypted:	false
SSDEEP:	3:YAPRe1Kyn:YAPU
MD5:	E14FDCEC0992A480EC965CE10C0E45E6
SHA1:	AD26C5CB7FAAEC70B9C38836410164FDD0CB143A
SHA-256:	E2D4644E397E8A723F389E039DC8D0659F61B965963C59B90BED4A1D0FB9EB4F
SHA-512:	DD3F19920D7E8570B9D480C83FED051F89BBCE4F3EDB542533AFE9B48DB0517DF180E8BA778FB5B4CC9D93128B879CC0C4432D45693920BBB368C6CA91D78787
Malicious:	false
Reputation:	low
Preview:	{"error":"Failed to authenticate"}

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45977)
Category:	dropped
Size (bytes):	46019
Entropy (8bit):	5.5501327522339565
Encrypted:	false
SSDEEP:	768:4MI+sTQGNoFmXRN1KI2rtdhL8Gdw16RF5mbipcdiogVzVC5jsLY3:4MxrV81yF5mWRZC54a
MD5:	6B66C11D3782BCBEB7CA43A0388F0476
SHA1:	4C6C40B034660A853E79BAF82A71F9B83D439423
SHA-256:	3CF6399610E67A5D8018849263E1AFC4948105BEB4AE1A0C6D1AD2AA28493D23
SHA-512:	9B34312F7285106C06B0F80E2F5E7B35565EA89E1E65D322E952A21280C1D98056FADDF37E8AD80D5B649A0084DD4B8548A18C44438DAB76925DBDA79EAA8F84
Malicious:	false
Reputation:	low
Preview:	window.BEIXF=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e["default"]}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31941), with CRLF line terminators
Category:	dropped
Size (bytes):	33700
Entropy (8bit):	5.295197188866842
Encrypted:	false
SSDEEP:	768:NT5eRZmli2Tu6VbPnUedGdOV5UDBEqNDAdcJop3lQnNcD0+kVYQknFow/Q8:NThlLTuEPnU8hODFYlQw0+kVrknFvI8
MD5:	F5514B1CE3D12A9D2D3407F159AC9FCD
SHA1:	E08BA864EF8590046D93719BDBA872601D6E9FB6
SHA-256:	C129F5956BC8E9C3A2838069E9A3FF50AD7A540A077B42934B2C5D7C902F4EFC
SHA-512:	759A2C5069D16DCAD2870F99ECE4EE78E9081FADFBBCE477C75BACAC6AEC88DD474DCD7C3AD6B13A75C529517974B6ABD85AB0A4E52E5F5C1BA1B38AB59E0C86
Malicious:	false
Reputation:	low
Preview:	/!.. Datepicker for Bootstrap v1.9.0 (https://github.com/uxsolutions/bootstrap-datepicker).. .. Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0).. */....!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):a("object"==typeof exports?require("jquery"):jQuery)}(function(a,b){function c(){return new Date(Date.UTC.apply(Date,arguments))}function d(){var a=new Date;return c(a.getFullYear(),a.getMonth(),a.getDate())}function e(a,b){return a.getUTCFullYear()===b.getUTCFullYear()&&a.getUTCMonth()===b.getUTCMonth()&&a.getUTCDate()===b.getUTCDate()}function f(c,d){return function(){return d!==b&&a.fn.datepicker.deprecated(d),this[c].apply(this,arguments)}}function g(a){return a&&!isNaN(a.getTime())}function h(b,c){function d(a,b){return b.toLowerCase()}var e,f=a(b).data(),g={},h=new RegExp("^"+c.toLowerCase()+"([A-Z])");c=new RegExp("^"+c.toLowerCase());for(var i in f)c.test(i)&&(e=i.replace(h,d),g[e]=f[i]);return g}function i(b){var c=

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10551)
Category:	downloaded
Size (bytes):	10730
Entropy (8bit):	5.352436838231437
Encrypted:	false
SSDEEP:	192:WgSEXPZozhRGOhtMZGNU+H+7j3f9JI+REReqAVI3PnyF:rx/EhJtMZGdgI3PnK
MD5:	2A6DACDAA26AEDF49904AB9568C316A9
SHA1:	42DD1B1C0CFC4E98A037D6C6DD456D03EFAD3B03
SHA-256:	226DBE00A5F22C151E3D15D61256809EE737EE7E9E82C6B2A4D88064D315D6DF
SHA-512:	7854C12A4FFD33A1C63B05D97226FF95AA2059DE3FB7D0823B8B1F25844944783B55F51C31B748EB6D23AAE82F4E9DBFB3A69DAA7B2D0D230576C58FF303B1CD
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/js/popper.js/dist/umd/popper-utils.min.js?sliq8r
Preview:	/. Copyright (C) Federico Zivolo 2019. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(a,b){'object'==typeof exports&&'undefined'!=typeof module?b(exports):'function'==typeof define&&define.amd?define(['exports'],b):b(a.PopperUtils={})})(this,function(a){'use strict';function b(a,b){if(1!==a.nodeType)return[];var c=a.ownerDocument.defaultView,d=c.getComputedStyle(a,null);return b?d[b]:d}function c(a){return'HTML'===a.nodeName?a:a.parentNode\|\|a.host}function d(a){if(!a)return document.body;switch(a.nodeName){case'HTML':case'BODY':return a.ownerDocument.body;case'#document':return a.body;}var e=b(a),f=e.overflow,g=e.overflowX,h=e.overflowY;return /(auto\|scroll\|overlay)/.test(f+h+g)?a:d(c(a))}function e(a){return 11===a?T:10===a?U:T\|\|U}function f(a){if(!a)return document.documentElement;for(var c=e(10)?document.body:null,d=a.offsetParent\|\|null;d===c&&a.nextElementSibling;)d=(a=a.nextElementSibling).offsetParent;var g=d&&d.nodeName

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	19171
Entropy (8bit):	4.786369915129333
Encrypted:	false
SSDEEP:	96:R343ZuO3Q1S5KNFzJvXaBGzLCgOycpiyR2b1z/aZ8mrXZZD0FXmclEJXZZD0FXmu:RI3ZrV5KN0pVgE3QP9BHg1IT
MD5:	671EBBB61E4F44F13B60351737AFAA02
SHA1:	247323E9A55CA8E2FD322BAE21C268C6CC818873
SHA-256:	22AF2A1B5CB6AA8FC2B5911F66F4F1BF749D1C2BF7BEB88BD3B8297FA0D855A9
SHA-512:	38515AAB723D81D889E769C426CAE462752DF4A8BCB47CB301440AB324CB51791D36AADD2A9509448ABB8CC63BD1103D69FB147D8E1473555401ED9D2B85FE30
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/css/bootstrap-datepicker.standalone.css
Preview:	/!.. Datepicker for Bootstrap v1.9.0 (https://github.com/uxsolutions/bootstrap-datepicker).. .. Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0).. */.... .datepicker {.. padding: 4px;.. -webkit-border-radius: 4px;.. -moz-border-radius: 4px;.. border-radius: 4px;.. direction: ltr;.. }.. .datepicker-inline {.. width: 220px;.. }.. .datepicker-rtl {.. direction: rtl;.. }.. .datepicker-rtl.dropdown-menu {.. left: auto;.. }.. .datepicker-rtl table tr td span {.. float: right;.. }.. .datepicker-dropdown {.. top: 0;.. left: 0;.. }.. .datepicker-dropdown:before {.. content: '';.. display: inline-block;.. border-left: 7px solid transparent;.. border-right: 7px solid transparent;.. border-bottom: 7px solid #999;.. border-top: 0;.. border-bottom-color: rgba(0, 0, 0, 0.2);.. position: absolute;.. }.. .datepicker-dropdown:after {.. content: '';.. display: inline-block;.. border-le

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8013), with no line terminators
Category:	downloaded
Size (bytes):	8013
Entropy (8bit):	5.76642467422486
Encrypted:	false
SSDEEP:	192:ggDVmfkBDn3MHySdjgaNzbliEuYu4Q5d19cw:R5mfkBDn3MHL1gaNzbli7p53X
MD5:	6951FA876D91657883C3936121A87019
SHA1:	89616508B358AF7AB858FFDD12180824AC7F7F62
SHA-256:	71F634EFEE2C9949BC0FD28FFD6F26904235B3F0CD3663FCB67BF4D15ED0E32C
SHA-512:	7E00311730149AE19B69CD55A861B15E3B40D2ED4F5615C7AF82D20BCFCB4C8C4540C56B1B15B6C4842A07D6F0AC709488E0B265C321156FD3970169E82A352E
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/22755d9a86c9/main.js?
Preview:	window._cf_chl_opt={cFPWv:'b'};~function(V,h,i,j,k,l,s,v){V=b,function(c,e,U,f,g){for(U=b,f=c();!![];)try{if(g=-parseInt(U(362))/1+-parseInt(U(403))/2+-parseInt(U(340))/3+parseInt(U(406))/4*(-parseInt(U(415))/5)+parseInt(U(382))/6+parseInt(U(354))/7+parseInt(U(413))/8,g===e)break;else f.push(f.shift())}catch(D){f.push(f.shift())}}(a,296601),h=this\|\|self,i=h[V(364)],j=function(W,e,f,g){return W=V,e=String[W(360)],f={'h':function(D){return null==D?'':f.g(D,6,function(E,X){return X=b,X(342)[X(359)](E)})},'g':function(D,E,F,Y,G,H,I,J,K,L,M,N,O,P,Q,R,S,T){if(Y=W,null==D)return'';for(H={},I={},J='',K=2,L=3,M=2,N=[],O=0,P=0,Q=0;Q<D[Y(419)];Q+=1)if(R=D[Y(359)](Q),Object[Y(421)][Y(336)][Y(366)](H,R)\|\|(H[R]=L++,I[R]=!0),S=J+R,Object[Y(421)][Y(336)][Y(366)](H,S))J=S;else{if(Object[Y(421)][Y(336)][Y(366)](I,J)){if(256>J[Y(368)](0)){for(G=0;G<M;O<<=1,P==E-1?(P=0,N[Y(328)](F(O)),O=0):P++,G++);for(T=J[Y(368)](0),G=0;8>G;O=1&T\|O<<1,E-1==P?(P=0,N[Y(328)](F(O)),O=0):P++,T>>=1,G++);}else{for(T=1,G=0;G<M;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45977)
Category:	downloaded
Size (bytes):	46019
Entropy (8bit):	5.5501327522339565
Encrypted:	false
SSDEEP:	768:4MI+sTQGNoFmXRN1KI2rtdhL8Gdw16RF5mbipcdiogVzVC5jsLY3:4MxrV81yF5mWRZC54a
MD5:	6B66C11D3782BCBEB7CA43A0388F0476
SHA1:	4C6C40B034660A853E79BAF82A71F9B83D439423
SHA-256:	3CF6399610E67A5D8018849263E1AFC4948105BEB4AE1A0C6D1AD2AA28493D23
SHA-512:	9B34312F7285106C06B0F80E2F5E7B35565EA89E1E65D322E952A21280C1D98056FADDF37E8AD80D5B649A0084DD4B8548A18C44438DAB76925DBDA79EAA8F84
Malicious:	false
Reputation:	low
URL:	https://cdn.bc0a.com/autopilot/f00000000094873/autopilot_sdk.js
Preview:	window.BEIXF=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e["default"]}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1201
Entropy (8bit):	4.891861421261929
Encrypted:	false
SSDEEP:	24:MPeEjmj0sDxoUNFlUNriNAsUNiwtuSs8AFl6EdPGRWo2RDIZ7yklP:MPVyQsdo8Fl8rWAhR08A/6EdewoGitlP
MD5:	951F8699B1EC182A2C2FE696E90C9C63
SHA1:	53A17D53DD6FEEA4E611AA3079736348CF9B6976
SHA-256:	2FD68259225CF8504835792AA8E09F7626C6C41C61B9BAF984C69DCF104CAD7E
SHA-512:	151F5AF89C798FDD1E8961A4C2E8DED6C481EEE0EBDF4C02EA81CF0CD09181932309B7A79D3D562DCD40E4B0576508A2001E6AD1CDA72592E375906F87324998
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/google_tag/js/gtag.js?sliq8r
Preview:	window.dataLayer = window.dataLayer \|\| [];.function gtag() {. dataLayer.push(arguments);.}.gtag('js', new Date());.gtag('set', 'developer_id.dMDhkMT', true);..(function (drupalSettings) {. const config = drupalSettings.gtag;.. if (config.consentMode === true) {. gtag('consent', 'default', {. ad_storage: 'denied',. analytics_storage: 'denied',. ad_user_data: 'denied',. ad_personalization: 'denied',. wait_for_update: 500,. });. }.. if (config.tagId.length !== 0) {. const script = document.createElement('script');. script.async = true;. script.src = `https://www.googletagmanager.com/gtag/js?id=${config.tagId}`;. script.type = 'text/javascript';. document.getElementsByTagName('head')[0].appendChild(script);. }.. const additionalConfigInfo = config.additionalConfigInfo \|\| [];. if (additionalConfigInfo.length === 0) {. gtag('config', config.tagId);. } else {. gtag('config', config.tagId, additionalConfigInfo);. }.. const otherIds

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19995)
Category:	downloaded
Size (bytes):	20014
Entropy (8bit):	4.775041898887536
Encrypted:	false
SSDEEP:	384:OHekQaVk3b/jctQYKVGbpT661unIWWRmwU/PtK:uekQaVk3b/jctQYKVGoQKtK
MD5:	34C9B8753FDD9FED2DD0FC93944E1083
SHA1:	64F77B5D9C23DEA9912D8CA3EF6DAADB956F5CC0
SHA-256:	173F5C418C616E5DB3AE2A54EEE3D6547D466A8D837D81600D8A4E59ACD99EF8
SHA-512:	63CEFA4EBB45324C447B8C8D341012E982D4C6B9FC237EEBBCE7F62CABC47795029F6979DD0C9F7EF21D3030578913ECF701B52C897587F957C8933F93CB2993
Malicious:	false
Reputation:	low
URL:	https://web.purolator.com/app/tracker/css/print-drupal.css
Preview:	/@1729112303023/.@media print{nav.navbar{position:absolute;width:0%;top:0;padding-bottom:.5rem}nav.navbar .header-top{box-shadow:none !important}nav.navbar .header-top .region--navbar-actions{display:none !important}div.content__footer{display:none}footer.page__footer{display:none}section[data-apps=tracker]{margin:70px}body{-webkit-print-color-adjust:exact;print-color-adjust:exact}@page{size:auto;margin:0}.region--content-suffix{display:none}.header-top{visibility:hidden;padding:0px !important;height:0 !important}.header-bottom{display:none !important}.header-top .region--navbar-branding .block a img{visibility:visible;position:fixed;top:3.3rem;left:8.3rem}div.brick--id--18046,div.brick--id--13681,div.brick--id--18076,div.brick--id--30141,div.brick--id--30146,div.brick--id--37021,div.brick--id--37196,div.brick--id--37351,div.brick--id--14341,div.brick--id--14336,div#chat{display:none !important}section[data-apps=tracker]{background-color:#fff}section[data-apps=tracker] .search-contai

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	195325
Entropy (8bit):	5.634628134309697
Encrypted:	false
SSDEEP:	3072:M/9VO6UDDp+DvE49MymfhYIr/l+W10Wjtijya62EaOGgX2HlbtQBJ25PgAYO9m0E:Y9VLUD4M49MDfhYG/ld10WUua62EaPg7
MD5:	F54C9060740C6FA2FAE1FA614D66AF32
SHA1:	ABF34C2F549FCCFD616C1C136A4F5DFF23033DAD
SHA-256:	BFD7735BA4BBCCDAFB1FD3C00D9182D5ED058E194A1C33A15C096091B5A2A630
SHA-512:	B4E38E4730CB1C2D4BB222F9DD5D2BA80F829DCC51A6A1500C8313E1486356E73CE4D5C60E54B57946802CBD5C2246CA4B5F77B13873A81C24937EF962A6A4B2
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zwa,$wa,bxa,dxa,QB,exa,fxa,hxa,SB,UB,ixa,VB,WB,jxa,ZB,lxa,cC,eC,fC,gC,hC,iC,kC,lC,mxa,mC,nxa,pC,rC,sC,tC,pxa,qxa,uC,rxa,xC,AC,BC,sxa,EC,vxa,FC,HC,IC,xxa,yxa,zxa,Bxa,OC,Dxa,PC,Fxa,QC,Hxa,Gxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,UC,cya,WC,dya,eya,fya,gya,hya,iya,jya,kya,lya,mya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,XC,Pya,Qya,Rya,Sya,Tya,Uya,Wya,ZC,$C,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,fza,gza,aD,hza,bD,iza,jza,kza,lza,mza,.nza,oza,cD,pza,dD,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Kza,Lza,Mza,Oza,fD,Pza,Qza,Rza,Sza,Tza,Uza,Yza,Zza,aAa,dAa,eAa,fAa,qD,gAa,rD,hAa,sD,iAa,jAa,BD,CD,lAa,ED,FD,GD,nAa,oAa,pAa,JD,KD,MD,ND,qAa,OD,QD,rAa,tAa,uAa,wAa,AAa,BAa,WD,FAa,JAa,KAa,LAa,ZD,MAa,OAa,PAa,QAa,RAa,bE,TAa,YAa,jE,aBa,$Aa,kE,bBa,mE,dBa,eBa,fBa,hBa,iBa,KE,kBa,LE,lBa,mBa,nBa,oBa,NE,q

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	244261
Entropy (8bit):	5.453901728691554
Encrypted:	false
SSDEEP:	3072:efLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713FN:efLeYc+PJxH8NNfFcrHurPK713z
MD5:	818B1FE2640571AF9DC68FD127B14F38
SHA1:	836DC599CD0462EB157119521EE84723BBB7551A
SHA-256:	B1B27D92DE22D509EBD21DE47D14975728928E881BD6C9D1695CC5D38F2942BD
SHA-512:	9F3F219787F765BF37C93B51321F3CCDFCAC8D9A6D5BCB9354423B8BA2BD6CA872C7A89B8AEEF762BF147AFFF0BC874A3ABF9C87B53C6D1B7D93F199BFC00B12
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10884)
Category:	downloaded
Size (bytes):	10885
Entropy (8bit):	5.104561276912211
Encrypted:	false
SSDEEP:	192:gV1WrRDJd2tiSubgiU+PMFhmd2XmO1UR80IIDNAbx1QpYDC:gcRb28S8MFhmViURjzZAbx1QpcC
MD5:	21F219C2952C83A938C3675D8E90353B
SHA1:	FD97243DA3B1C99D33788CF9EB95A6BA1091C5F9
SHA-256:	9DB273219B6A20C42B06E21A61889881F684F1EF93B72CB789BF27BB736C05E5
SHA-512:	B0A750DD409159A806379C5D16F28526D1DF3F2F73E44318E1F5CCA19215C281D8AFD91D61AE28C2BEA2E418D48E8FD4B3E0ADCDAB2C3BD5D62FA1AAAB7676AE
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/dblazy.min.js?sliq8r
Preview:	!function(l,o){"use strict";var r,e,u=Object.assign,t=Array.prototype,i=Object.prototype,c=i.toString,n=t.splice,a=t.some,f="undefined"!=typeof Symbol&&Symbol,s="jQuery"in l,d="cash"in l,p="add",h="remove",m="has",v="get",y="set",g="width",b="clientWidth",w="scroll",E="iterator",S="Observer",C="EventListener",N="body",x="html",O=/-([a-z])/g,z=/^--/,A=l.localStorage,I={},j=Math.pow(2,53)-1,L=(M.prototype.init=function(n,t){t=new M(n,t);return Q(n)?(n.idblazy\|\|(n.idblazy=t),n.idblazy):t},M);function M(n,t){if(this.name="dblazy",n){if(D(n))return n;var e=n;if(Y(n)){if(!(e=Sn(kn(t,n),n)).length)return}else if(V(n))return this.ready(n);!e.nodeType&&e!==l\|\|(e=[e]);for(var r=this.length=e.length,i=0;i<r;i++)this[i]=e[i]}}function T(n){var t=this,e=(t=D(t)?t:r(t)).length;return V(n)&&(e&&1!==e?t.each(n):n(t[0],0)),t}function R(n,t){function e(){return setTimeout(n,t\|\|0,r)}return"loading"!==o.readyState?e():o.addEventListener("DOMContentLoaded",e),this}function k(n){var t="[object "+n+"]";retur

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2972
Entropy (8bit):	4.76053430551437
Encrypted:	false
SSDEEP:	48:nLNxbVh0vlOGMnrTuW2WOApkR3DFKsDXOR2ptSZb9YotWqWAHALEwLxJ8rc:L3bMvlOGMnWYlpkR3Z+R2pYZb9Y+WjA6
MD5:	A5A31C397A8932A51FC6054833DD9916
SHA1:	1979B4EED3DEE002914CB72A61A1F7168F9AB667
SHA-256:	77784F2AD16A64B675373AFDA3C7F81AF243B82426A0F6C42F427DE3B356295E
SHA-512:	A8AD56F8D2C9BD15EAD3B0092D3DD1A20CAB1557A8B242709F6D07B379F2E61A188F1FA505889B6DEE456BF45CA1999453B230180DC61BCE0FC2B1D306D4E851
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/clientside_validation/clientside_validation_jquery/js/cv.jquery.validate.js?sliq8r
Preview:	/*. @file. * Attaches behaviors for the Clientside Validation jQuery module.. /.(function ($, Drupal, once, drupalSettings) {. 'use strict';.. if (typeof drupalSettings.cvJqueryValidateOptions === 'undefined') {. drupalSettings.cvJqueryValidateOptions = {};. }.. if (drupalSettings.clientside_validation_jquery.force_validate_on_blur) {. drupalSettings.cvJqueryValidateOptions.onfocusout = function (element) {. // "eager" validation. this.element(element);. };. }.. // Add messages with translations from backend.. $.extend($.validator.messages, drupalSettings.clientside_validation_jquery.messages);.. // Overwrite default URL validation method, accepting public/private urlscheme.. var _urlValidation = $.validator.methods.url;. $.validator.methods.url = function(value, element) {. return _urlValidation.call(this, value, element) \|\| /^(public\|private):\/\//.test(value);. }.. /. Attaches jQuery validate behavior to forms.. . @type {Drupal~beha

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	4.821619540607761
Encrypted:	false
SSDEEP:	6:URLmXYQyeVEI8DQtd7H3JcLE1wXFVIxtt:URytfVnldr5cLE1oIxT
MD5:	326180705B86FE808F5D354F077C476E
SHA1:	998E5E9DE06ACCBCCB46362906763A7DD35E5865
SHA-256:	F5260B0D408CC0BB87079F4F8438D5D6E8FD5A994F546411699FE956D09887E6
SHA-512:	3ECDA459F66D8ECB2CC5E5E5A6A9AFB46C27D785B3002E391AA72F6C6B47A476053A80A91C0D506099845E49D826ADF6CC4DE043A6247808248239680EA25B8B
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/custom/purolator_components/js/back_to_top.js?v=10.3.1
Preview:	/*. @file. * Helper js for back to top button.. */.(function ($, Drupal) {. $('.mod-toTop').click(function() {. $('body,html').animate({. scrollTop: 0. }, 500);. });.})(jQuery, Drupal);.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	690
Entropy (8bit):	7.530890103900892
Encrypted:	false
SSDEEP:	12:EP4kRV0LoouwLhF7FHixdjcnM1hWisvec7zOXRBJNNHLUd5b7frzRTajnZyDIK:EQkRuUouAhxQTcYhWl7XOXjNHwd5XzJx
MD5:	9CC01F73DF36D5664A4BB1113EFB559B
SHA1:	1CFDB55646D359965569CAD459D3A59922004BEA
SHA-256:	C0F0E7C692CF9B53DC16DB2E01DD1838938D25A6BA9F0DAEDCA000F924F1948F
SHA-512:	92091D654DEA76DAB81C7CF6FEFDCACC872D977B7785F2D7C3BD9109C7B01770917A054762E0CEFDB220FD8C3540587AD56A8F1A89702AD4E359B83021381FE3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........!..!..ALPH......b....>.M.L....8pm.<R]..Kt.2.H...y.......U......W."...Y.N`0+.c.T.Y.MXV...:y.$CX.cC...QG.qz.8E..}GW7.}6M..c8EX..$..&..x<:.&H....V..........x..;....Y..)7.).}}.zw.C)..`d5..H.@t9.U..R...z.Cz...&...VP8 .........".".>1..B.!.u.....Z./.P_.........7\|......@..?...{..+.f...@.h.!.;.........d@jY.F\|h%.T.~..x ,.....A..xn. .....q..._..E.A.v.....,.G.....fuDtvW.o.!......;=.......aT.O..T3.{...ex...{..-,&..M...q...r.L..c>3.....G..gun.Q.F........:`vm.._.<.9.I_.T._?.-]*9U...?....R.<...$Z...^...;BZ.[.Kc._.Z.OA....@.....w.."........>?.Bg..t..].D.74.F ."c..._.t.?.2.Z.H}.{..{.X.\|.gz....... .N-......>".....)..;..2.....gDt+?..B....?....

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 34, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3747
Entropy (8bit):	7.9136997975209145
Encrypted:	false
SSDEEP:	48:TocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODl1f1uQH3HkrH:TZ/I09Da01l+gmkyTt6Hk8nTlB1dKfJ
MD5:	AEC31A713847C2DD8B14CEF426BC7345
SHA1:	2C802529EF86D55BE11B3F3C9C90BB526BB2F5CD
SHA-256:	9A9967666B7989EB7C71F8DB7304D483AC1D4A94269C1A3988056A050B903E7D
SHA-512:	AEEED161D21B19D24FD7BEC8DA28CCD85F940A94A0B00A085E582ABE822E4C0909668C569221320C4B77D2F9771B4DA5CA14B2C61BC67E3D94A1F22319594652
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...".....>.......pHYs...%...%.IR$....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.purolator.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4719)
Category:	dropped
Size (bytes):	4756
Entropy (8bit):	4.9906462355096055
Encrypted:	false
SSDEEP:	96:+0Ix4wGZxFzn+7XjiDUGseXeZx6Yph99luQEFyFB1:+Zx4wG/WiDfxXeuY/PluQE21
MD5:	776CD2AA24C90629CD35B3C31F2C8417
SHA1:	34684AFD9C44F9C6F219B1FEDEB24C33D65FE3F6
SHA-256:	1390D969ED761BD5B9C64D4A9DABD9AA6354D0934BABB99E3A31B28C1E2C1B17
SHA-512:	DC379E26059D67EA7181688DF34AEDFDABDD63984F879A31239732FED900FB6CC99932B466DD734B99DB7EF65164DF4EE13EF32B80A363DEAC40269AA78AF337
Malicious:	false
Reputation:	low
Preview:	!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):t.ssm=e()}(this,function(){"use strict";function t(t,e){t.forEach(function(t){return t(e)})}var e=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")},n=function(){function t(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}return function(e,n,i){return n&&t(e.prototype,n),i&&t(e,i),e}}(),i=[],o=function(){},s=function(){function s(t){e(this,s),this.id=t.id\|\|Math.random().toString(36).substr(2,9),this.query=t.query\|\|"all";if(this.options=Object.assign({},{onEnter:[],onLeave:[],onResize:[],onFirstRun:[]},t),"function"==typeof this.options.onEnter&&(this.options.onEnter=[this.options.onEnter]),"function"==typeof this.options.onLeave&&(this.options.onLeave=[this.options.onLeave]),"function"==typeof this.options.o

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5977
Entropy (8bit):	4.754914857744224
Encrypted:	false
SSDEEP:	96:O7FLdIiQtqbNNhkVQAoc1S4tiQmO6ixnatUmuQ2IevRnQGQvCH6EC71l1hVtjy0P:cPIiQoZ3kVQAoco4tiQ0i0tUmuQDevRQ
MD5:	57EE94AE7F048FEFB8D68911BF1BFB2F
SHA1:	A33F9BC5A3AE22242B590A0E73D715A4FF3C75DC
SHA-256:	535C90DDE53E22E15114000AD7ECE06A96FFB83EC1D1A588E8B14A93FA5F6870
SHA-512:	725E29817FC907D6F774D167CF9F42EFC6F48127D46C9992825A4C8456716F96AE1C414DDC13D576AAB4940A5AC9C3657598D2ED62D232F813D1F8A5E5747ACB
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/sitewide_alert/js/init.js?v=10.3.1
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.*/.(function (Drupal, drupalSettings, once) {. const sitewideAlertsSelector = '[data-sitewide-alert]';. const shouldShowOnThisPage = (pages = [], negate = true) => {. if (pages.length === 0) {. return true;. }. let pagePathMatches = false;. const currentPath = window.location.pathname;. for (let i = 0; i < pages.length; i++) {. const baseUrl = drupalSettings.path.baseUrl.slice(0, -1);. const page = baseUrl + pages[i];. if (page.charAt(page.length - 1) === '') {. if (currentPath.startsWith(page.substring(0, page.length - 1))) {. pagePathMatches = true;. break;. }. } else if (page === currentPath) {. pagePathMatches = true;. break;. }. }. return negate ? !pagePathMatches : pagePathMatches;. };. const alertWasDismissed = alert => {. if (!(`alert-dismis

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	7805
Entropy (8bit):	4.971498929339856
Encrypted:	false
SSDEEP:	48:YJEuVa3LoknEzV2ZZbFo3AEYVNVxiEL5V6TVoAGhSoCEh2jV619Fo1l8q3EbxVg9:+EVBEYlEKWELy+CEU4grEbJurEq9p
MD5:	B62F1F44DF0BB04D52ADE4AC860B3139
SHA1:	0383CB421FC441CDC8E5E3FB642B17A6EA6C33D9
SHA-256:	0084F5ADB730EF42B4E544A1CE12CD44EB2E5E017187C62024C66E2B48F0F863
SHA-512:	02186B49B972A0AF8F69ECE7CF433296D91F0C11A706EF9E6055A692EF266377CA91EB04ED9EE7A47E800C1603A6C3D532795FAADD6C5B6E9640FE060D1A365D
Malicious:	false
Reputation:	low
Preview:	{"sitewideAlerts":[{"uuid":"0bf1e034-c658-4be4-a971-9e4b6b68fc0f","dismissible":true,"dismissalIgnoreBefore":0,"styleClass":"alert-blue","showOnPages":["\/en\/test-page"],"negateShowOnPages":false,"renderedAlert":"\u003Cdiv class=\u0022sitewide-alert alert alert-blue\u0022 data-uuid=\u00220bf1e034-c658-4be4-a971-9e4b6b68fc0f\u0022\u003E\n \u003Cdiv class=\u0022container theme--alert-template\u0022\u003E\n \u003Cdiv\u003E\n \u003Cspan\u003E\n \u003Cdiv class=\u0022sitewide-alert__message\u0022\u003E\u003Cp class=\u0022mb-0\u0022\u003EThis is a test of the promo banner on Purolator.com on a test page, nothing else to see here. \u003Ca class=\u0022btn-variant-3 btn\u0022 href=\u0022\/en\/home\u0022 data-entity-type=\u0022node\u0022 data-entity-uuid=\u0022264f6cea-fc66-407b-97e7-78b844c1ce76\u0022 data-entity-substitution=\u0022canonical\u0022 title=\u0022Home\u0022\u003EClick here\u003C\/a\u003E\u003C\/p\u003E\u003C\/div\u003E\n \u003C\/span\u003E \u003Cbu

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10106)
Category:	dropped
Size (bytes):	273535
Entropy (8bit):	5.409294334917848
Encrypted:	false
SSDEEP:	6144:Y8S7cwziGx4WNgYCsGsRtcVFwE8AGknurzbprox/JMtMPtshK:Y8S7cwziGxmYAVFwE8ADnurzbprox/Jz
MD5:	C80C822A0297DD817361DB1ABE7EEDBE
SHA1:	11D77914252B4A43A0B344B1079B8B7E71B1EF09
SHA-256:	87969313EC0E62CA6DD87F362F5D80BE5D5850DF5CC92E40AEA16D405A80B9B0
SHA-512:	18C05753143D5770273BE0A19BFCCE79A822E363743165C7A2789185AED54678D4C289DA86B7A12857DD65ACA403783299A060CE84E9C4876C47414A8B5A3290
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Nia,Mia,Pia,Via,bja,cja,fja,Er,gja,Fr,hja,Gr,ija,Hr,Kr,Mr,kja,mja,lja,oja,pja,rja,us,tja,vja,wja,Fs,Aja,lt,Jja,Lja,Kja,Pja,Qja,Tja,Uja,Vja,Qt,Wt,$ja,Xt,$t,aka,au,bka,du,hka,pu,lka,qu,mka,nka,pka,rka,qka,tka,ska,oka,uka,vka,vu,wka,cla,gla,ila,kla,yla,Xla,$la,dma,ema,mma,nma,oma,pma,tma,rma,mx,nx,vma,wma,xma,yma,Ama,fw,gw,Bma,hla,ew,hw,Sia,Tia,lla,Uia,Zia,aja,Gma,Hma,Ima,Jma,Kma,ux,Wv,Nma,Oma,Pma,Rma,Ela,Wla,Pla,xja,zs;.Nia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Qg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Mia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Mia(f,a,d+1));e&&b.push(e);return b};Mia=function(a,b,c){a instanceof _.hh&&(a=a.Eg(b,+c));return Array.isArray(a)?Nia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.gc(a):a instanceof _.kc?_.rc(a):a};_.Nq=function(a){return!!a.handled};._.Oia=function(

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=85404e25-ec6a-425a-8e15-a871399e7ad2&event=PageView&ts=1730465871187&uuid=577fb623-22fc-4b29-a1aa-4ad63d483b22
Preview:	{}

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14380, version 1.0
Category:	downloaded
Size (bytes):	14380
Entropy (8bit):	7.9845370486959855
Encrypted:	false
SSDEEP:	384:V9e9MoSnw455BJzE0wBQSBUjJWpKlsyIyY8lQGSsrtAvHM:V9e0wK5BJVR9C6sKVlQcJ2M
MD5:	33543C5CC5D88F5695DD08C87D280DFD
SHA1:	600DB9374E47E4F73A59CCC0A99BCC42F4A3E02A
SHA-256:	9C50A96C859B9BEEA47B71740BD14E7F69A4DF586D015F47434037F8DEF53B52
SHA-512:	131AFCE4CECA8E606F46BA8BEDE1A7D84793C04AA507E09FB0D88F0FB5E49DFF61C70A739A279AF185C8C0D2F937761D4D70DC9069F3771EF7A13448E2D1230D
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/themes/custom/purolator_theme/assets/fonts/open-sans-v17-latin-regular.woff2
Preview:	wOF2......8,......j...7..............................t.`....."..4.....T..2..N..6.$.... ..Z..x.....\U.z.8...\|tQ...i...O.t.e.../"...[.W....~.KC?.D...<...a...3...Xay.Q..1..:.G_.<....$............If[...".UW......B...\|d$.'..b.E...@.=.N....gg.P.!e.$cfg..Uq...8..V:.q..a.s{........I.. "A.d....It..0.4>.........u...%.`Nu...FQN...\|...r...._{.a/..R.j..)..H.q...i....}z..k.pE:..f......JZ..a..b.+.......... .....G=....d.0.+...2....}E..dM\|_5...F..F..)lH.w.eo...,.-O.."E......%.qc.IP.I,i.oj.....w7..y......J..p.4...................x!.{...\.....S.Z.r...@...L3r..te...K..Cn..Y.. .)Yd.b..^..1..sv...l.o..Q..N@.H.}>...I...?E...N.3.'Sc.+.!r...x..j.2.pBT.(...`. .<?4>@...B..Gx..O..>7.q.[..i.pc}Y....._ogt.@...h;...&.c.^..2....@:.=....h..<..q.Q......^...l......xD.....p.\|..p\..j..\G..\|^.y.,n....\|.O.i>....O..'...........gq..5....g..c\|......?..s..0kg........o=.~..x.........(<.}..G..l.!..#..G......&e.wA.z.44...u....v.-....yYl....(..].z...8....5.:.V.....4.^.V...gN.:y.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	195325
Entropy (8bit):	5.634628134309697
Encrypted:	false
SSDEEP:	3072:M/9VO6UDDp+DvE49MymfhYIr/l+W10Wjtijya62EaOGgX2HlbtQBJ25PgAYO9m0E:Y9VLUD4M49MDfhYG/ld10WUua62EaPg7
MD5:	F54C9060740C6FA2FAE1FA614D66AF32
SHA1:	ABF34C2F549FCCFD616C1C136A4F5DFF23033DAD
SHA-256:	BFD7735BA4BBCCDAFB1FD3C00D9182D5ED058E194A1C33A15C096091B5A2A630
SHA-512:	B4E38E4730CB1C2D4BB222F9DD5D2BA80F829DCC51A6A1500C8313E1486356E73CE4D5C60E54B57946802CBD5C2246CA4B5F77B13873A81C24937EF962A6A4B2
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/11a/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zwa,$wa,bxa,dxa,QB,exa,fxa,hxa,SB,UB,ixa,VB,WB,jxa,ZB,lxa,cC,eC,fC,gC,hC,iC,kC,lC,mxa,mC,nxa,pC,rC,sC,tC,pxa,qxa,uC,rxa,xC,AC,BC,sxa,EC,vxa,FC,HC,IC,xxa,yxa,zxa,Bxa,OC,Dxa,PC,Fxa,QC,Hxa,Gxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,Zxa,$xa,UC,cya,WC,dya,eya,fya,gya,hya,iya,jya,kya,lya,mya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,XC,Pya,Qya,Rya,Sya,Tya,Uya,Wya,ZC,$C,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,fza,gza,aD,hza,bD,iza,jza,kza,lza,mza,.nza,oza,cD,pza,dD,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Kza,Lza,Mza,Oza,fD,Pza,Qza,Rza,Sza,Tza,Uza,Yza,Zza,aAa,dAa,eAa,fAa,qD,gAa,rD,hAa,sD,iAa,jAa,BD,CD,lAa,ED,FD,GD,nAa,oAa,pAa,JD,KD,MD,ND,qAa,OD,QD,rAa,tAa,uAa,wAa,AAa,BAa,WD,FAa,JAa,KAa,LAa,ZD,MAa,OAa,PAa,QAa,RAa,bE,TAa,YAa,jE,aBa,$Aa,kE,bBa,mE,dBa,eBa,fBa,hBa,iBa,KE,kBa,LE,lBa,mBa,nBa,oBa,NE,q

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text
Category:	dropped
Size (bytes):	20092789
Entropy (8bit):	5.843097713670132
Encrypted:	false
SSDEEP:	49152:ty9ATXOz2ZZpMU4+sis3TV1Lczl/ElbHg/TlTI6XdwUtrghKpZsBKWUzbZxgYqKD:L/ZTI4dwUtp4cD
MD5:	D6B93CD2BF29131B4B03DBAD02778E72
SHA1:	A3C8013597CB764C3AE6F35B400030EACC753835
SHA-256:	1B877C316D313960B09F3CD7902B54EA6A261AFCCF5719D7F45259F76EE8EA05
SHA-512:	CF04499DCDDA23EE5B82ED4C0E4EB26435676112D4E2E3BF3A26734B7C83FA4EC2DE2B652D42E45ED80A851FBB4597A1BAA6D4A4B0F89711E54FFAAF7D48FD23
Malicious:	false
Reputation:	low
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId]) {./**/ ...return installedModules[moduleId].exports;./**/ ..}./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...i: moduleId,./**/ ...l: false,./**/ ...exports: {}./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.l = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__webpack

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9440
Entropy (8bit):	7.9678980912492285
Encrypted:	false
SSDEEP:	192:JWHA2JTpkLMU5/D9NIceuxhF+EQC+1ehvUqHWYzK4dhnX6vdder:JWn+D67V1Gv52YB3X6Vg
MD5:	90C44BABBC654052F7916A89503DDCCB
SHA1:	F570656249D624DEF397279D9E1B8B88363F79A6
SHA-256:	FED6214AE111E289E08053E216067726F1FDD38DCC6D9712B87EFCC81CDCF804
SHA-512:	A4EE6088C2D8D2B4B152BE5E88CB781DD9A8A70BE89AB9931D807A140FEC57A213708FAEEE0D75E4E32A0169EBA825557476798F4660E7FA1BB8A94C8424B332
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/purolator_logo.png?itok=BZVqdFyF
Preview:	RIFF.$..WEBPVP8X........K..3..ALPH.........>...]$.H....5....d%#.q......<.V.J..q.....$Y+y..$+I.de$.c.qws.s.?....~......1....3..YW.\..3S.O..G...wM..e.&i.`.%C....3...3.}..ak.Y.._.{.$...kI{.."Ys..f.N..qZ..._.$.Sa...K..If&..:.(j..;....,....%.%.D\|s..\...0......;..F\.7e=b.......Q..b..$.D=..Q.V`.KL....^.Q..L.n.1\|..si...7..1y.Q.i.q...z....M`.....\|wi.C...d..r..'.[.U..a...\|.b..Q..k.7..V......O....&..`.(..Si..tW.....j..3....G...f.....r...h.h.PX.{....8...?m?..&_..(}.......M..^.K....q...J.*..1.P.^..[....._.(6..aE19b..\QBY....d..4.Z....V.}...1E..4..u.....^I.]..48o...YK...y">....%%..%....ZBI.E.O.....RR&.!.4..C..9...TS..N...L......)34.KQ....P./`..'.k.}J7.8..{LI.t........n.eQ..f\.7d.d.s..i..~Z.P/.l>..\|.,R2=...y..1....[....L..zi....um....=.]...../&..1yG...X....J..cL..v&..{-..s..cJ.l1.%=...9..x.].....q~..Kk.f...P.%='.....Wb.>.G.?.]:...E._).e.....2H..eQ?.?..%.....`KL.7brP.3.....d....Z...n.Y..j@.[..._..?.....%..mA2\|.@O.p.{...........va6;............I.....

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10884)
Category:	dropped
Size (bytes):	10885
Entropy (8bit):	5.104561276912211
Encrypted:	false
SSDEEP:	192:gV1WrRDJd2tiSubgiU+PMFhmd2XmO1UR80IIDNAbx1QpYDC:gcRb28S8MFhmViURjzZAbx1QpcC
MD5:	21F219C2952C83A938C3675D8E90353B
SHA1:	FD97243DA3B1C99D33788CF9EB95A6BA1091C5F9
SHA-256:	9DB273219B6A20C42B06E21A61889881F684F1EF93B72CB789BF27BB736C05E5
SHA-512:	B0A750DD409159A806379C5D16F28526D1DF3F2F73E44318E1F5CCA19215C281D8AFD91D61AE28C2BEA2E418D48E8FD4B3E0ADCDAB2C3BD5D62FA1AAAB7676AE
Malicious:	false
Reputation:	low
Preview:	!function(l,o){"use strict";var r,e,u=Object.assign,t=Array.prototype,i=Object.prototype,c=i.toString,n=t.splice,a=t.some,f="undefined"!=typeof Symbol&&Symbol,s="jQuery"in l,d="cash"in l,p="add",h="remove",m="has",v="get",y="set",g="width",b="clientWidth",w="scroll",E="iterator",S="Observer",C="EventListener",N="body",x="html",O=/-([a-z])/g,z=/^--/,A=l.localStorage,I={},j=Math.pow(2,53)-1,L=(M.prototype.init=function(n,t){t=new M(n,t);return Q(n)?(n.idblazy\|\|(n.idblazy=t),n.idblazy):t},M);function M(n,t){if(this.name="dblazy",n){if(D(n))return n;var e=n;if(Y(n)){if(!(e=Sn(kn(t,n),n)).length)return}else if(V(n))return this.ready(n);!e.nodeType&&e!==l\|\|(e=[e]);for(var r=this.length=e.length,i=0;i<r;i++)this[i]=e[i]}}function T(n){var t=this,e=(t=D(t)?t:r(t)).length;return V(n)&&(e&&1!==e?t.each(n):n(t[0],0)),t}function R(n,t){function e(){return setTimeout(n,t\|\|0,r)}return"loading"!==o.readyState?e():o.addEventListener("DOMContentLoaded",e),this}function k(n){var t="[object "+n+"]";retur

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	690
Entropy (8bit):	7.530890103900892
Encrypted:	false
SSDEEP:	12:EP4kRV0LoouwLhF7FHixdjcnM1hWisvec7zOXRBJNNHLUd5b7frzRTajnZyDIK:EQkRuUouAhxQTcYhWl7XOXjNHwd5XzJx
MD5:	9CC01F73DF36D5664A4BB1113EFB559B
SHA1:	1CFDB55646D359965569CAD459D3A59922004BEA
SHA-256:	C0F0E7C692CF9B53DC16DB2E01DD1838938D25A6BA9F0DAEDCA000F924F1948F
SHA-512:	92091D654DEA76DAB81C7CF6FEFDCACC872D977B7785F2D7C3BD9109C7B01770917A054762E0CEFDB220FD8C3540587AD56A8F1A89702AD4E359B83021381FE3
Malicious:	false
Reputation:	low
URL:	https://marvel-b1-cdn.bc0a.com/f00000000094873/www.purolator.com/modules/custom/purolator_widgets/img/liveChat-open.png
Preview:	RIFF....WEBPVP8X........!..!..ALPH......b....>.M.L....8pm.<R]..Kt.2.H...y.......U......W."...Y.N`0+.c.T.Y.MXV...:y.$CX.cC...QG.qz.8E..}GW7.}6M..c8EX..$..&..x<:.&H....V..........x..;....Y..)7.).}}.zw.C)..`d5..H.@t9.U..R...z.Cz...&...VP8 .........".".>1..B.!.u.....Z./.P_.........7\|......@..?...{..+.f...@.h.!.;.........d@jY.F\|h%.T.~..x ,.....A..xn. .....q..._..E.A.v.....,.G.....fuDtvW.o.!......;=.......aT.O..T3.{...ex...{..-,&..M...q...r.L..c>3.....G..gun.Q.F........:`vm.._.<.9.I_.T._?.-]*9U...?....R.<...$Z...^...;BZ.[.Kc._.Z.OA....@.....w.."........>?.Bg..t..].D.74.F ."c..._.t.?.2.Z.H}.{..{.X.\|.gz....... .N-......>".....)..;..2.....gDt+?..B....?....

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3263)
Category:	downloaded
Size (bytes):	3264
Entropy (8bit):	4.893887361177859
Encrypted:	false
SSDEEP:	48:Qd7sDlyuG0i6v69+NLUIUqNXwd/qqsqUqPqXXutI1w/pEAN73QcHlWaUJ4L9Sxmt:QdmwXf9+ZUbJKHUk8DR62
MD5:	C18FFADC073E8599827EE46B04D05400
SHA1:	31A9E3007BFE55C377788269D0C6B823B621C3A6
SHA-256:	45F0C218AB49DDF3816B73019EAB68139EDA90D46B3C5B8FC2481A1A3BF43729
SHA-512:	AD170AACF7A99865F954708B7DFACBF7B8E81A30FFA373743566EC8259E1EBE119674E6C5C492E885FAAC082A05ECE16C5800EB48607E2F05725C7F47971AFF7
Malicious:	false
Reputation:	low
URL:	https://www.purolator.com/modules/contrib/blazy/js/plugin/blazy.dom.min.js?sliq8r
Preview:	!function(c,n){"use strict";var t=Array.prototype.some,u="remove",h="width",l="height",e="after",r="before",i="begin",o="Top",s="Left",f="Height",a="scroll";function d(t,n,r){var i=this,e=c.isUnd(r),u=c.isObj(n),o=!u&&e;if(o&&c.isStr(n)){var s=c.toElm(t),f=[h,l,"top","right","bottom","left"],e=c.computeStyle(s,n),s=c.toInt(e,0);return-1===f.indexOf(n)?e:s}return c.chain(t,function(e){if(!c.isElm(e))return o?"":i;function t(t,n){c.isFun(t)&&(t=t()),(c.contains(n,"-")\|\|c.isVar(n))&&(n=c.camelCase(n)),e.style[n]=c.isStr(t)?t:t+"px"}u?c.each(n,t):c.isNull(r)?c.each(c.toArray(n),function(t){e.style.removeProperty(t)}):c.isStr(n)&&t(r,n)})}function m(t){t=c.rect(t);return{top:(t.top\|\|0)+n.body[a+o],left:(t.left\|\|0)+n.body[a+s]}}function p(t,n){return d(t,h,n)}function g(t,n){return d(t,l,n)}function v(t,n,e){var r,i=0;return c.isElm(t)&&(i=t["offset"+e],n&&(r=c.computeStyle(t),t=function(t){return c.toInt(r["margin"+t],0)},i+=e===f?t(o)+t("Bottom"):t(s)+t("Right"))),i}function y(t,n){return

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	813
Entropy (8bit):	4.694333686139638
Encrypted:	false
SSDEEP:	12:UikI/8fV7WoiFiH8AfHhakSQ7nzlYGbNaJrL72yn7x7O/8qdHR3xT:Tk0QV7WoiafHhrzzyGbNadDnM/8SF5
MD5:	3BA0E651A19D6D7642528577C09269A6
SHA1:	B9857453114C1779DE75DFB9A7D0F4CB6B6640E4
SHA-256:	1630795F03577BDE9942BD9E7294A9498F1450E8B02FF3455F9D5C040A4350A0
SHA-512:	E11E60FBEC732B55A9E2E65C6FD5C4479028462E062D790BE1D081F18A0E90495CFFD69A61CA662299135B2A1999D43A8112AB9B26D80D10EA93198F9839C077
Malicious:	false
Reputation:	low
Preview:	/*. @file. * Javasceipt to allow deeplinking to inside of components.. */.(function ($, Drupal) {. Drupal.behaviors.purolatorTheme = {. attach: function (context) {. $('a.modal-link').off('click').on('click',function(e) {. // Prevent default anchor behaviour. e.preventDefault();. // Determine modal to toggle, and make sure it exists on the page. var modalID = $(this).attr('href');. if ((typeof modalID === 'string' \|\| modalID instanceof String) && $(modalID).length) {. $(modalID).modal('toggle');. $(modalID). }. });.. $('.modal button.close').on('click',function(e) {. var modalID = $(this).closest('.modal').attr('id');. $('a[href="#' + modalID + '"]').first().focus();. });. }. };.})(jQuery, Drupal);.

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5912)
Category:	dropped
Size (bytes):	6054
Entropy (8bit):	5.185199933783455
Encrypted:	false
SSDEEP:	96:W2uXqpNCQ2Ae9SFwzWdsg5TrHXfq7rE9Qn4q9KdcTxt24v6TbVbcLKPzPyJFbBCK:8X2ne215PPCE9Qn3ewo5bKKObkK
MD5:	1AEF6948DBDD142CD728BA899BB23D87
SHA1:	4D70B69DE5798DB57FA30244C019698235954D86
SHA-256:	1E62A545E1180A257D1A77E1C55F355AE5EA309EA2E82244420609AF395746DC
SHA-512:	D7C8A67758FE5DFFC0DEED1652382E774C345A68428DFBFAC80C9F00FA9B290689F13957CA23C1F1CD7A58D69588FEFF46FCE211AD8AED4A39568D239B1ECBAB
Malicious:	false
Reputation:	low
Preview:	/!. tabbable 6.2.0.* @license MIT, https://github.com/focus-trap/tabbable/blob/master/LICENSE.*/.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self,function(){var n=t.tabbable,o=t.tabbable={};e(o),o.noConflict=function(){return t.tabbable=n,o}}())}(this,(function(t){"use strict";var e=["input:not([inert])","select:not([inert])","textarea:not([inert])","a[href]:not([inert])","button:not([inert])","[tabindex]:not(slot):not([inert])","audio[controls]:not([inert])","video[controls]:not([inert])",'[contenteditable]:not([contenteditable="false"]):not([inert])',"details>summary:first-of-type:not([inert])","details:not([inert])"],n=e.join(","),o="undefined"==typeof Element,r=o?function(){}:Element.prototype.matches\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector,i=!o&&Element.prototype.getRootNode?function(t){var e;return n

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	20212
Entropy (8bit):	5.058069278932544
Encrypted:	false
SSDEEP:	384:iryt6VGHf16wZC7CdWnDwbzRoiQ065CvDDOoN+oRtwP:irwXf16CC79UbzvmAq
MD5:	544F5A015788F889A5AB3F3FD2116E62
SHA1:	F2C1AC577359689513002C84918A5B7CA5395530
SHA-256:	EF538615724A429C1A5296A070502D185FE648F956345C694DE6123F7D3F935C
SHA-512:	12D1271CC683CA63D3D7C3FD99EDBC014B78E620ABEBEB914AC9103149B7B2A05194107A0B59273C0ED5E4702F72F80CD572A77B2BA6E01ABF3D5E317E892BD0
Malicious:	false
Reputation:	low
Preview:	{"search":{"header":"Track a Shipment","tooltip":"<div class='display: none'>put html here</div>","instructions":"Enter multiple PINs  or References separated by commas.","icon":{"path":"/app/tracker/img/tracker-icon.png","alt":"Track a Shipment"},"placeholder":{"single":"Enter a PIN or Reference","multi":"Enter one or more PINs/References"},"toggle":{"single":"Multiple PINs/References","multi":"Single PIN/Reference"},"button":"Track Now","recent":"Show Recently Tracked","clear":"Clear","freight":{"label":"Track a LTL Freight Shipment","url":"https://www.purolatorfreight.com/scripts/cgiip.exe/reftrace2.htm?seskey=&language=ENGLISH&nav=top"},"nopin":"Enter a Tracking Number / PIN or Reference.","toolong":"Searh is limited to {MAX} characters","contactus":" or <a href='/en/resources-and-support/help/contact-us.page?'>Contact Us</a>"},"poly":{"date":"yyyy-mm-dd"},"errors":{"puroInternationalLink":"https://purolator.ts2000.net/Login/QuickTrack/?SearchOn=TrackingNumber&SearchFor=","pur

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 13:57:31.163928032 CET	49677	443	192.168.2.7	20.50.201.200
Nov 1, 2024 13:57:31.585890055 CET	49671	443	192.168.2.7	204.79.197.203
Nov 1, 2024 13:57:31.914110899 CET	49677	443	192.168.2.7	20.50.201.200
Nov 1, 2024 13:57:32.692392111 CET	443	49702	104.98.116.138	192.168.2.7
Nov 1, 2024 13:57:32.692713022 CET	49702	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:33.195259094 CET	49674	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:33.195285082 CET	49675	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:33.304528952 CET	49672	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:33.413975954 CET	49677	443	192.168.2.7	20.50.201.200
Nov 1, 2024 13:57:36.398211002 CET	49677	443	192.168.2.7	20.50.201.200
Nov 1, 2024 13:57:39.153980970 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:39.154026031 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:39.154103041 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:39.155148029 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:39.155174017 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:39.902694941 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:39.902791977 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.082123041 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.082140923 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.082475901 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.092732906 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.139321089 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.341191053 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.341224909 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.341239929 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.341279984 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.341291904 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.341344118 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.342986107 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.343014002 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.343045950 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.343053102 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.343105078 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.460144043 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.460170984 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.460211992 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.460225105 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.460275888 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.461538076 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.461558104 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.461595058 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.461601019 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.461654902 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.463378906 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.463397980 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.463449001 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.463454962 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.463505030 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.465332031 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.465351105 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.465387106 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.465393066 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.465439081 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.579941034 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.579981089 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.580024958 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.580038071 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.580059052 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.580082893 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.581145048 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.581175089 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.581197977 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.581202984 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.581232071 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.582873106 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.582891941 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.582941055 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.582946062 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.582973003 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.582989931 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.583828926 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.583848000 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.583883047 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.583887100 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.583916903 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.583951950 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.585589886 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.585608006 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.585643053 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.585648060 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.585688114 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.586242914 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.586258888 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.586298943 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.586302042 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.586339951 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.587199926 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.587217093 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.587268114 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.587272882 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.587306023 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.698070049 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.698156118 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.698213100 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.698261023 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.698405027 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.698420048 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.698432922 CET	49703	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.698438883 CET	443	49703	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.810333967 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.810396910 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.810483932 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.814446926 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.814475060 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.817578077 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.817643881 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.817708015 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.818373919 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.818384886 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.823748112 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.823801041 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.823863983 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.826021910 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.826066971 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.826131105 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.829060078 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.829111099 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.829188108 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.829374075 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.829391956 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.829551935 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.829571962 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:40.830535889 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:40.830548048 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.241854906 CET	49671	443	192.168.2.7	204.79.197.203
Nov 1, 2024 13:57:41.594484091 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.595051050 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.595077991 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.595603943 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.595611095 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.595761061 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.596213102 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.596239090 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.596549988 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.596554995 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.601500988 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.601949930 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.601974010 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.602498055 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.602504015 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.602883101 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.603142977 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.603343964 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.603353977 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.603758097 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.603763103 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.604079962 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.604108095 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.604509115 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.604516029 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.727225065 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.727253914 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.727332115 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.727348089 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.727399111 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.727897882 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.727897882 CET	49712	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.727943897 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.727972984 CET	443	49712	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.731498003 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.731568098 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.731775999 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732019901 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.732067108 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.732126951 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732142925 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.732175112 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732192039 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.732217073 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.732237101 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732237101 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732316971 CET	49709	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.732331038 CET	443	49709	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.734564066 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735409021 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735455990 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735522985 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735523939 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735532999 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735575914 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735614061 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735711098 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735716105 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735769987 CET	49711	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735775948 CET	443	49711	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735933065 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735944986 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.735970974 CET	49713	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.735975981 CET	443	49713	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.736329079 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.736346960 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.736463070 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.736697912 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.736711979 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.739568949 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.739584923 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.739856958 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.740962982 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.741000891 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.741158962 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.741173029 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.741197109 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.741297960 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.741307020 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.742034912 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.742091894 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.742242098 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.742283106 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.742283106 CET	49710	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.742291927 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.742300034 CET	443	49710	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.744636059 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.744645119 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.744705915 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.745057106 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:41.745069981 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:41.825397968 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.825433016 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:41.825588942 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.825862885 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.825879097 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:41.826077938 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.826090097 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:41.826112986 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.826316118 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:41.826323032 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.353231907 CET	49677	443	192.168.2.7	20.50.201.200
Nov 1, 2024 13:57:42.464879036 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.467717886 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.467782974 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.468319893 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.468336105 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.473242998 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.473618984 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.473681927 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.474095106 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.474107027 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.476918936 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.477483988 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.477519989 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.477869034 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.477875948 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.480814934 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.481517076 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.481539011 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.481915951 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.481924057 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.483423948 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.484244108 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.484263897 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.484636068 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.484647036 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.599405050 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.599601984 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.599845886 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.599903107 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.599903107 CET	49716	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.599924088 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.599935055 CET	443	49716	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.603454113 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.603492975 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.603614092 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.603849888 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.603863955 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.634963989 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.635040045 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.635339022 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.635385990 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.635404110 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.635415077 CET	49717	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.635426998 CET	443	49717	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.635632992 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.635905981 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.636276960 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.636276960 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.636357069 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.636384964 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.636425018 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.636468887 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.636497974 CET	49714	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.636513948 CET	443	49714	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.637108088 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.637123108 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.637156963 CET	49715	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.637162924 CET	443	49715	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.639170885 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639199972 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.639509916 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639528990 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639544964 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.639616966 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639704943 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639719963 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.639846087 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.639859915 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.640301943 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.640341997 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.640443087 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.640602112 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.640619040 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.698292017 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.698632002 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.698642969 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.699702024 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.699770927 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.700953960 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.701009035 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.701276064 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.701282978 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.701586962 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.701874018 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.701931000 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.703027964 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.703099012 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.703514099 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.703577042 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.751622915 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.751640081 CET	443	49719	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.805697918 CET	49675	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:42.805747986 CET	49719	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.805794001 CET	49674	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:42.836313963 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.876157045 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.876235008 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.876293898 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.876827955 CET	49720	443	192.168.2.7	52.60.138.120
Nov 1, 2024 13:57:42.876844883 CET	443	49720	52.60.138.120	192.168.2.7
Nov 1, 2024 13:57:42.895296097 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.895586014 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.895643950 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.895699024 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.895720005 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.895741940 CET	49718	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.895747900 CET	443	49718	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.903474092 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.903503895 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.903867006 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.904086113 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:42.904103041 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:42.939816952 CET	49672	443	192.168.2.7	104.98.116.138
Nov 1, 2024 13:57:43.344150066 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.348793983 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.348812103 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.351099968 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.351104975 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.360677004 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.361469984 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.361501932 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.364378929 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.364386082 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.374145985 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.388226986 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.419183016 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.419219017 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.419693947 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.419699907 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.428955078 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.514086008 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.514167070 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.514224052 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.517016888 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.517081022 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.517235994 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.551238060 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.551332951 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.551387072 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.654087067 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.709383965 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.978682041 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.978702068 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.980041981 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.980047941 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.984915018 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.984941959 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.986093998 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.986107111 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.992894888 CET	49721	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.992913961 CET	443	49721	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.995753050 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.995779037 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:43.995794058 CET	49724	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:43.995800018 CET	443	49724	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.002424002 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.002444029 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.002461910 CET	49722	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.002466917 CET	443	49722	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.070308924 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.070336103 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.070395947 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.093298912 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.093349934 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.093477964 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.107610941 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.107680082 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.109905005 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.110025883 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.110126019 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.110755920 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.110773087 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.110946894 CET	49728	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.110953093 CET	443	49728	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.111912012 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.111968994 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.112041950 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.112193108 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.112219095 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.113679886 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.113681078 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.113701105 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.114236116 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.114279032 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.148525000 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.148555040 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.148571968 CET	49723	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.148578882 CET	443	49723	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.161267042 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.161303997 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.161448956 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.163979053 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.164000988 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.169651031 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.169693947 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.169756889 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.170207977 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.170221090 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.288662910 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:44.288686037 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:44.288748026 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:44.289846897 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:44.289863110 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:44.844842911 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.847744942 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.847795963 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.849582911 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.849600077 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.852660894 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.867394924 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.867413044 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.868901014 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.868906021 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.901365995 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.909672022 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.912749052 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.912794113 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.914093971 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.914921999 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.914942980 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.920887947 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.920908928 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.922199965 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.922205925 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.923866034 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.923886061 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.925220013 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.925225019 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.975559950 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.975653887 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.975713968 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.989968061 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.990000010 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.990020990 CET	49731	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:44.990031004 CET	443	49731	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.995250940 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.995421886 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:44.995534897 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.009917021 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.009928942 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.009944916 CET	49730	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.009951115 CET	443	49730	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.038198948 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.038233995 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.038300991 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.046314001 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.046406984 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.046487093 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.047087908 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.047100067 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.048638105 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.049283028 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.049336910 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.050144911 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.050167084 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.050179958 CET	49729	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.050185919 CET	443	49729	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.051691055 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.052664995 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.052758932 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.053057909 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.053057909 CET	49732	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.053080082 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.053101063 CET	443	49732	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.055236101 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.055339098 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.055397987 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.060547113 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.060561895 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.061019897 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.061038971 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.061049938 CET	49733	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.061055899 CET	443	49733	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.069279909 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.069299936 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.069349051 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.069947004 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.069956064 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.071718931 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.071753979 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.071844101 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.076423883 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.076437950 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.076776981 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.076809883 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.076881886 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.077044964 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.077054977 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.368257999 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:45.368302107 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:45.368359089 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:45.370960951 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:45.370974064 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:45.371757984 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:45.372082949 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:45.372092962 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:45.373106956 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:45.373162985 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:45.549992085 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:45.550138950 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:45.595843077 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:45.595870018 CET	443	49734	142.250.185.196	192.168.2.7
Nov 1, 2024 13:57:45.637677908 CET	49734	443	192.168.2.7	142.250.185.196
Nov 1, 2024 13:57:45.651156902 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:45.651184082 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:45.651690006 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:45.651690006 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:45.651712894 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:45.773602009 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.782809973 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.782825947 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.783751011 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.783755064 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.795552969 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.797425032 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.797436953 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.798861980 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.798867941 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.804445028 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.808821917 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.808840036 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.810095072 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.810103893 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.818670988 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.818780899 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.819430113 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.819442987 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.820441961 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.820446968 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.823563099 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.823580980 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.825175047 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.825179100 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.909270048 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.909328938 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.909409046 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.909706116 CET	49736	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.909719944 CET	443	49736	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.919121027 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.919167995 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.919326067 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.919616938 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.919632912 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.936733007 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.936943054 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.936997890 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.937150955 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.937164068 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.937177896 CET	49737	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.937182903 CET	443	49737	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.940872908 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.940900087 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.940967083 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.941440105 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.941450119 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.951495886 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.951751947 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.951844931 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.952018976 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.952023029 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.952038050 CET	49739	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.952042103 CET	443	49739	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.952191114 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.952630997 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.952733994 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.953771114 CET	49740	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.953778028 CET	443	49740	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.957638025 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.957648039 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.957999945 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.957999945 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.958014965 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.961159945 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.961196899 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:45.961337090 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.961689949 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:45.961703062 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.005122900 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.005605936 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.005712986 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.254129887 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.259093046 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:46.259180069 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:46.297188044 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.461622953 CET	49738	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.461638927 CET	443	49738	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.467334032 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.467348099 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.468611002 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.468667984 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.473573923 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.473661900 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.482238054 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.482249022 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.524178982 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.535706997 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:46.535738945 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:46.536066055 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:46.587333918 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:46.623974085 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624156952 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624197006 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624253988 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624284029 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624299049 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.624299049 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.624314070 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624345064 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.624397039 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624526024 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.624536037 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.624993086 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.625066996 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.625075102 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.646992922 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.647020102 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.647078991 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.659375906 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.661801100 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.661819935 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.662501097 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.662513971 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.663206100 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.663211107 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.680190086 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.690620899 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.692502975 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.699876070 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.730798006 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.741368055 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741427898 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741435051 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.741461992 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741499901 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.741588116 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741627932 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741660118 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.741667986 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741703987 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.741714001 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.741759062 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.742098093 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742141008 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742142916 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.742156982 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742202997 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.742238998 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742275953 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.742798090 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742851019 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742907047 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.742922068 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.742975950 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.743024111 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743068933 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743145943 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.743172884 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.743182898 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743196964 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.743240118 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.743793964 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743859053 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.743869066 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743911028 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.743947983 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.743954897 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.782125950 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.782202959 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.782215118 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.790128946 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.790401936 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.790450096 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.826931000 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.826944113 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.856904030 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.856970072 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.856985092 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.857116938 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.857152939 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.857166052 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.857697964 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.857853889 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.921993017 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.922063112 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.923376083 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.923391104 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.928634882 CET	49747	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:46.928661108 CET	443	49747	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:46.938700914 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.938723087 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.940126896 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.940134048 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.960891008 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.960916042 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.968449116 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.968466043 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.984322071 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.984359980 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:46.984378099 CET	49749	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:46.984384060 CET	443	49749	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.051156044 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.051291943 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.051342010 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.075290918 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.075376034 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.075423956 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.080367088 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.097934008 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.098292112 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.098340988 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.102200031 CET	49750	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.102231979 CET	443	49750	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.102950096 CET	60207	53	192.168.2.7	1.1.1.1
Nov 1, 2024 13:57:47.103100061 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.103116989 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.103130102 CET	49752	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.103135109 CET	443	49752	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.103439093 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.103456974 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.103467941 CET	49751	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.103477001 CET	443	49751	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.107321978 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.107355118 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.107423067 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.107779026 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.107791901 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.107927084 CET	53	60207	1.1.1.1	192.168.2.7
Nov 1, 2024 13:57:47.107985020 CET	60207	53	192.168.2.7	1.1.1.1
Nov 1, 2024 13:57:47.108155966 CET	60207	53	192.168.2.7	1.1.1.1
Nov 1, 2024 13:57:47.110133886 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.110152960 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.110228062 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.110404015 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.110414028 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.110898972 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.110908031 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.110960960 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.111594915 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.111607075 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.111783028 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.111790895 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.111836910 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.111994028 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.112004995 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.113121033 CET	53	60207	1.1.1.1	192.168.2.7
Nov 1, 2024 13:57:47.123339891 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.329626083 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.329704046 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.329751015 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.329843044 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.329843044 CET	49741	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.329860926 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.329869986 CET	443	49741	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.360346079 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.360400915 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.360467911 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.360754013 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:47.360774040 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:47.403093100 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.403708935 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.403728008 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.404319048 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.404324055 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.591660023 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:47.591697931 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:47.591823101 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:47.592128992 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:47.592142105 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:47.604125023 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.604228020 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.605010986 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.606985092 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.606985092 CET	49753	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.606992960 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.607001066 CET	443	49753	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.611922026 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.611932039 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.613065958 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.613579988 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.613589048 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.702071905 CET	53	60207	1.1.1.1	192.168.2.7
Nov 1, 2024 13:57:47.703043938 CET	60207	53	192.168.2.7	1.1.1.1
Nov 1, 2024 13:57:47.709100008 CET	53	60207	1.1.1.1	192.168.2.7
Nov 1, 2024 13:57:47.709172964 CET	60207	53	192.168.2.7	1.1.1.1
Nov 1, 2024 13:57:47.849538088 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.849797964 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.850279093 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.850295067 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.852260113 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.852264881 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.855068922 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.855094910 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.856071949 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.856077909 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.856528997 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.857646942 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.857657909 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.858916044 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.858922005 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.981708050 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.981987000 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.982040882 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.982399940 CET	60210	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.982423067 CET	443	60210	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.985867023 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.986001015 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.986118078 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.986641884 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.986651897 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.986665010 CET	60211	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.986670017 CET	443	60211	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.991398096 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.991471052 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.991667986 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.993058920 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.993086100 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.993180037 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.994040012 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.994066954 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.994139910 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.994379997 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.994400978 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.994411945 CET	60208	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.994419098 CET	443	60208	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.996387005 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.996407032 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.996721029 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.996732950 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.999330997 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.999351978 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:47.999654055 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.999907970 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:47.999917984 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.040416002 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.042787075 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.042799950 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.044018030 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.044022083 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.168876886 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.168988943 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.169051886 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.193397045 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.193411112 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.193455935 CET	60209	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.193461895 CET	443	60209	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.204315901 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.204356909 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.204524994 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.204974890 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.204991102 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.209444046 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.209969997 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.209986925 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.211020947 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.211085081 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.211997986 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.212068081 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.212472916 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.212485075 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.230566978 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.230642080 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.235807896 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.235826969 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.236083031 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.237854004 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.257250071 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.283322096 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.352277994 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352324963 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352372885 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.352389097 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352468014 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352499962 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352500916 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.352510929 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352538109 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.352550030 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.352591038 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.353014946 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.353055954 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.353413105 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.353471041 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.356096029 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.358534098 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.358544111 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.359478951 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.359483004 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.471968889 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472028017 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472064018 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472074032 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.472084999 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472125053 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.472145081 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472182989 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.472498894 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472536087 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.472623110 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472656965 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472676039 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.472681999 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.472704887 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.473391056 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473433971 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473478079 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.473481894 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473516941 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.473542929 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473581076 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.473586082 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473593950 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.473619938 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.474339962 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.474391937 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.474484921 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.474538088 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.474620104 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.474682093 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.476109028 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.476113081 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.484291077 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.484353065 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.484440088 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.513935089 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.514015913 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.514077902 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.516341925 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.524144888 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.564827919 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.564861059 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.573800087 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.573828936 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.573839903 CET	60219	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.573847055 CET	443	60219	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.591325045 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.591413975 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.591434956 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.591487885 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.591527939 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.591546059 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.591559887 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.591624975 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.591636896 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.592520952 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.592581034 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.604170084 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.604195118 CET	443	60214	35.201.125.192	192.168.2.7
Nov 1, 2024 13:57:48.604219913 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.604243994 CET	60214	443	192.168.2.7	35.201.125.192
Nov 1, 2024 13:57:48.610810041 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.610816956 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.610827923 CET	60213	443	192.168.2.7	184.28.90.27
Nov 1, 2024 13:57:48.610835075 CET	443	60213	184.28.90.27	192.168.2.7
Nov 1, 2024 13:57:48.616137028 CET	60238	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.616169930 CET	443	60238	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.616256952 CET	60238	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.616817951 CET	60238	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.616832018 CET	443	60238	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.744003057 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.744678974 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.744760036 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.745034933 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.745050907 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.761048079 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.761478901 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.761502028 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.762478113 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.762481928 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.763904095 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.764249086 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.764298916 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.764636040 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.764648914 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.873898029 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.873986959 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.874030113 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.874567986 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.874589920 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.874605894 CET	60231	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.874613047 CET	443	60231	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.883080006 CET	60240	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.883112907 CET	443	60240	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.883193970 CET	60240	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.889483929 CET	60240	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.889507055 CET	443	60240	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.893351078 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.893717051 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.893785000 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.893847942 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.893847942 CET	60230	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.893868923 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.893879890 CET	443	60230	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.897778988 CET	60241	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.897799969 CET	443	60241	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.897857904 CET	60241	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.898113012 CET	60241	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.898125887 CET	443	60241	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.898464918 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.899193048 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.899291039 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.899343014 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.899386883 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.899416924 CET	60229	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.899432898 CET	443	60229	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.901913881 CET	60242	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.901927948 CET	443	60242	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.902044058 CET	60242	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.902179956 CET	60242	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.902187109 CET	443	60242	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.949270010 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.949862957 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.949892998 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:48.950361013 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:48.950368881 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:49.092004061 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:49.092063904 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:49.092210054 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:49.092381001 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:49.092401028 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:49.092412949 CET	60232	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:49.092417955 CET	443	60232	13.107.246.45	192.168.2.7
Nov 1, 2024 13:57:49.095643044 CET	60243	443	192.168.2.7	13.107.246.45
Nov 1, 2024 13:57:49.095676899 CET	443	60243	13.107.246.45	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 13:57:41.796513081 CET	192.168.2.7	1.1.1.1	0x7f55	Standard query (0)	purolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:41.797019958 CET	192.168.2.7	1.1.1.1	0x7c26	Standard query (0)	purolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:42.880062103 CET	192.168.2.7	1.1.1.1	0x1e6e	Standard query (0)	www.purolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:42.880322933 CET	192.168.2.7	1.1.1.1	0x8283	Standard query (0)	www.purolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:44.275986910 CET	192.168.2.7	1.1.1.1	0x7230	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:44.279021978 CET	192.168.2.7	1.1.1.1	0xabb4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:45.640010118 CET	192.168.2.7	1.1.1.1	0xafce	Standard query (0)	cdn.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:45.641180992 CET	192.168.2.7	1.1.1.1	0x50fc	Standard query (0)	cdn.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:47.579725981 CET	192.168.2.7	1.1.1.1	0x3aa6	Standard query (0)	www.purolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:47.579998970 CET	192.168.2.7	1.1.1.1	0x2efb	Standard query (0)	www.purolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:47.581403017 CET	192.168.2.7	1.1.1.1	0xb2e2	Standard query (0)	cdn.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:47.581763983 CET	192.168.2.7	1.1.1.1	0x782	Standard query (0)	cdn.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:49.271545887 CET	192.168.2.7	1.1.1.1	0x8766	Standard query (0)	ixfd-api.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.271694899 CET	192.168.2.7	1.1.1.1	0xec80	Standard query (0)	ixfd-api.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:49.304197073 CET	192.168.2.7	1.1.1.1	0x8b6f	Standard query (0)	marvel-b1-cdn.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.304363966 CET	192.168.2.7	1.1.1.1	0x30d6	Standard query (0)	marvel-b1-cdn.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:49.310436010 CET	192.168.2.7	1.1.1.1	0x6af1	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.310729027 CET	192.168.2.7	1.1.1.1	0x687	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:49.311680079 CET	192.168.2.7	1.1.1.1	0x5ba4	Standard query (0)	web.purolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.312105894 CET	192.168.2.7	1.1.1.1	0xf703	Standard query (0)	web.purolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:49.320229053 CET	192.168.2.7	1.1.1.1	0x6906	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.320395947 CET	192.168.2.7	1.1.1.1	0x2776	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:50.112241030 CET	192.168.2.7	1.1.1.1	0x64c5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.112409115 CET	192.168.2.7	1.1.1.1	0x6f0d	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:50.202872038 CET	192.168.2.7	1.1.1.1	0xb9a7	Standard query (0)	ixfd-api.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.204809904 CET	192.168.2.7	1.1.1.1	0xd950	Standard query (0)	ixfd-api.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:50.264656067 CET	192.168.2.7	1.1.1.1	0x361c	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.264918089 CET	192.168.2.7	1.1.1.1	0x41a6	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:51.239069939 CET	192.168.2.7	1.1.1.1	0xfc82	Standard query (0)	marvel-b1-cdn.bc0a.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.239439964 CET	192.168.2.7	1.1.1.1	0x3795	Standard query (0)	marvel-b1-cdn.bc0a.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:51.478364944 CET	192.168.2.7	1.1.1.1	0x780f	Standard query (0)	web.purolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.478518963 CET	192.168.2.7	1.1.1.1	0xb654	Standard query (0)	web.purolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:52.114300013 CET	192.168.2.7	1.1.1.1	0x6d13	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.114892006 CET	192.168.2.7	1.1.1.1	0xb759	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:52.219408989 CET	192.168.2.7	1.1.1.1	0x542	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.219558001 CET	192.168.2.7	1.1.1.1	0x4279	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:52.220045090 CET	192.168.2.7	1.1.1.1	0x8dfa	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.220205069 CET	192.168.2.7	1.1.1.1	0x7809	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.821980000 CET	192.168.2.7	1.1.1.1	0x2db	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.822212934 CET	192.168.2.7	1.1.1.1	0x2dfd	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.822568893 CET	192.168.2.7	1.1.1.1	0xb46f	Standard query (0)	100008210.collect.igodigital.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.822787046 CET	192.168.2.7	1.1.1.1	0x58f7	Standard query (0)	100008210.collect.igodigital.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.823940039 CET	192.168.2.7	1.1.1.1	0xd0ce	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.824114084 CET	192.168.2.7	1.1.1.1	0xaaa	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.839265108 CET	192.168.2.7	1.1.1.1	0xcde9	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.839417934 CET	192.168.2.7	1.1.1.1	0x8f74	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.843981028 CET	192.168.2.7	1.1.1.1	0xd14f	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.844167948 CET	192.168.2.7	1.1.1.1	0xa0ef	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:53.856057882 CET	192.168.2.7	1.1.1.1	0x5024	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.856200933 CET	192.168.2.7	1.1.1.1	0x713d	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:54.031790972 CET	192.168.2.7	1.1.1.1	0xcc63	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.035103083 CET	192.168.2.7	1.1.1.1	0xb337	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:54.091836929 CET	192.168.2.7	1.1.1.1	0x51e	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.091996908 CET	192.168.2.7	1.1.1.1	0xb923	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:54.989382029 CET	192.168.2.7	1.1.1.1	0xdfff	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.990264893 CET	192.168.2.7	1.1.1.1	0x80f2	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:55.180857897 CET	192.168.2.7	1.1.1.1	0xe83d	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.181699991 CET	192.168.2.7	1.1.1.1	0xe37c	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:55.207176924 CET	192.168.2.7	1.1.1.1	0xb71d	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.207820892 CET	192.168.2.7	1.1.1.1	0xfa68	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:55.309907913 CET	192.168.2.7	1.1.1.1	0x6b7a	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.310281992 CET	192.168.2.7	1.1.1.1	0x639e	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:55.367546082 CET	192.168.2.7	1.1.1.1	0x419e	Standard query (0)	nova.collect.igodigital.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.367743015 CET	192.168.2.7	1.1.1.1	0xe3ae	Standard query (0)	nova.collect.igodigital.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:55.459197998 CET	192.168.2.7	1.1.1.1	0xda4e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.459438086 CET	192.168.2.7	1.1.1.1	0xbda3	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:56.436700106 CET	192.168.2.7	1.1.1.1	0x3e7a	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.436868906 CET	192.168.2.7	1.1.1.1	0x1c22	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:56.439984083 CET	192.168.2.7	1.1.1.1	0x4248	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.440392971 CET	192.168.2.7	1.1.1.1	0x4f68	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:56.442018986 CET	192.168.2.7	1.1.1.1	0x2333	Standard query (0)	100008210.collect.igodigital.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.442419052 CET	192.168.2.7	1.1.1.1	0x4a18	Standard query (0)	100008210.collect.igodigital.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.416112900 CET	192.168.2.7	1.1.1.1	0xdf69	Standard query (0)	analytics.tiktok.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.416548967 CET	192.168.2.7	1.1.1.1	0x6077	Standard query (0)	analytics.tiktok.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.417284012 CET	192.168.2.7	1.1.1.1	0xd5a2	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.417561054 CET	192.168.2.7	1.1.1.1	0x2056	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.419260025 CET	192.168.2.7	1.1.1.1	0xacaa	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.419681072 CET	192.168.2.7	1.1.1.1	0x5565	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.422035933 CET	192.168.2.7	1.1.1.1	0x5622	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.422481060 CET	192.168.2.7	1.1.1.1	0x7239	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.423340082 CET	192.168.2.7	1.1.1.1	0xe31f	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.423537016 CET	192.168.2.7	1.1.1.1	0x199b	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.427596092 CET	192.168.2.7	1.1.1.1	0xa29	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.427745104 CET	192.168.2.7	1.1.1.1	0x1bac	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.502239943 CET	192.168.2.7	1.1.1.1	0xab85	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.502388954 CET	192.168.2.7	1.1.1.1	0x8601	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:58.963634014 CET	192.168.2.7	1.1.1.1	0xd920	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.963803053 CET	192.168.2.7	1.1.1.1	0xf0ce	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:59.636082888 CET	192.168.2.7	1.1.1.1	0xe7eb	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.636082888 CET	192.168.2.7	1.1.1.1	0x6623	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:59.655724049 CET	192.168.2.7	1.1.1.1	0x5448	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.656034946 CET	192.168.2.7	1.1.1.1	0x90	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Nov 1, 2024 13:57:59.946054935 CET	192.168.2.7	1.1.1.1	0x9a54	Standard query (0)	js.zi-scripts.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.946264029 CET	192.168.2.7	1.1.1.1	0xc346	Standard query (0)	js.zi-scripts.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:59.949054956 CET	192.168.2.7	1.1.1.1	0xd8d8	Standard query (0)	prod.virtualchatpurolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.949192047 CET	192.168.2.7	1.1.1.1	0x6007	Standard query (0)	prod.virtualchatpurolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:57:59.950515985 CET	192.168.2.7	1.1.1.1	0xb594	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.951035023 CET	192.168.2.7	1.1.1.1	0x9557	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:00.013077974 CET	192.168.2.7	1.1.1.1	0x6ec2	Standard query (0)	prod.virtualchatpurolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.017194986 CET	192.168.2.7	1.1.1.1	0x3b49	Standard query (0)	prod.virtualchatpurolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:03.191524982 CET	192.168.2.7	1.1.1.1	0xc553	Standard query (0)	js.zi-scripts.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:03.192272902 CET	192.168.2.7	1.1.1.1	0xce39	Standard query (0)	js.zi-scripts.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:03.335599899 CET	192.168.2.7	1.1.1.1	0x8adf	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:03.335762024 CET	192.168.2.7	1.1.1.1	0xdd11	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:05.740066051 CET	192.168.2.7	1.1.1.1	0x6114	Standard query (0)	prod.virtualchatpurolator.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:05.740619898 CET	192.168.2.7	1.1.1.1	0x9e97	Standard query (0)	prod.virtualchatpurolator.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:06.958539009 CET	192.168.2.7	1.1.1.1	0x2774	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:06.959459066 CET	192.168.2.7	1.1.1.1	0x7078	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:56.017601013 CET	192.168.2.7	1.1.1.1	0xe959	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:56.017961979 CET	192.168.2.7	1.1.1.1	0xdbfe	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Nov 1, 2024 13:58:57.891263008 CET	192.168.2.7	1.1.1.1	0x9087	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:57.892353058 CET	192.168.2.7	1.1.1.1	0x180e	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 1, 2024 13:59:00.308514118 CET	192.168.2.7	1.1.1.1	0x8a3e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:59:00.308608055 CET	192.168.2.7	1.1.1.1	0x3adc	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 13:57:41.815069914 CET	1.1.1.1	192.168.2.7	0x7f55	No error (0)	purolator.com		52.60.138.120	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:42.888039112 CET	1.1.1.1	192.168.2.7	0x1e6e	No error (0)	www.purolator.com	www.purolator.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:42.903882980 CET	1.1.1.1	192.168.2.7	0x8283	No error (0)	www.purolator.com	www.purolator.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:44.282838106 CET	1.1.1.1	192.168.2.7	0x7230	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:44.285866022 CET	1.1.1.1	192.168.2.7	0xabb4	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 13:57:45.648464918 CET	1.1.1.1	192.168.2.7	0xafce	No error (0)	cdn.bc0a.com		35.201.125.192	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:47.586952925 CET	1.1.1.1	192.168.2.7	0x3aa6	No error (0)	www.purolator.com	www.purolator.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:47.588964939 CET	1.1.1.1	192.168.2.7	0xb2e2	No error (0)	cdn.bc0a.com		35.201.125.192	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:47.596077919 CET	1.1.1.1	192.168.2.7	0x2efb	No error (0)	www.purolator.com	www.purolator.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.281661987 CET	1.1.1.1	192.168.2.7	0x8766	No error (0)	ixfd-api.bc0a.com	ixf3-api.bc0a.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.281661987 CET	1.1.1.1	192.168.2.7	0x8766	No error (0)	ixf3-api.bc0a.com		35.244.153.179	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.282388926 CET	1.1.1.1	192.168.2.7	0xec80	No error (0)	ixfd-api.bc0a.com	ixf3-api.bc0a.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.314210892 CET	1.1.1.1	192.168.2.7	0x30d6	No error (0)	marvel-b1-cdn.bc0a.com	d2kupluu740cd3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323407888 CET	1.1.1.1	192.168.2.7	0x6af1	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323407888 CET	1.1.1.1	192.168.2.7	0x6af1	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323407888 CET	1.1.1.1	192.168.2.7	0x6af1	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323407888 CET	1.1.1.1	192.168.2.7	0x6af1	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323407888 CET	1.1.1.1	192.168.2.7	0x6af1	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.323777914 CET	1.1.1.1	192.168.2.7	0x687	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.325472116 CET	1.1.1.1	192.168.2.7	0x8b6f	No error (0)	marvel-b1-cdn.bc0a.com	d2kupluu740cd3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.325472116 CET	1.1.1.1	192.168.2.7	0x8b6f	No error (0)	d2kupluu740cd3.cloudfront.net		13.227.219.96	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.325472116 CET	1.1.1.1	192.168.2.7	0x8b6f	No error (0)	d2kupluu740cd3.cloudfront.net		13.227.219.119	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.325472116 CET	1.1.1.1	192.168.2.7	0x8b6f	No error (0)	d2kupluu740cd3.cloudfront.net		13.227.219.27	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.325472116 CET	1.1.1.1	192.168.2.7	0x8b6f	No error (0)	d2kupluu740cd3.cloudfront.net		13.227.219.44	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.327495098 CET	1.1.1.1	192.168.2.7	0x6906	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.327495098 CET	1.1.1.1	192.168.2.7	0x6906	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.327510118 CET	1.1.1.1	192.168.2.7	0x2776	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 1, 2024 13:57:49.335864067 CET	1.1.1.1	192.168.2.7	0x5ba4	No error (0)	web.purolator.com	d253r3uy4qzbcc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:49.335864067 CET	1.1.1.1	192.168.2.7	0x5ba4	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.87	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.335864067 CET	1.1.1.1	192.168.2.7	0x5ba4	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.13	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.335864067 CET	1.1.1.1	192.168.2.7	0x5ba4	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.113	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.335864067 CET	1.1.1.1	192.168.2.7	0x5ba4	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:49.343106031 CET	1.1.1.1	192.168.2.7	0xf703	No error (0)	web.purolator.com	d253r3uy4qzbcc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:50.119491100 CET	1.1.1.1	192.168.2.7	0x64c5	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:50.119491100 CET	1.1.1.1	192.168.2.7	0x64c5	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.119491100 CET	1.1.1.1	192.168.2.7	0x64c5	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.119491100 CET	1.1.1.1	192.168.2.7	0x64c5	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.119491100 CET	1.1.1.1	192.168.2.7	0x64c5	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.120115042 CET	1.1.1.1	192.168.2.7	0x6f0d	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:50.214394093 CET	1.1.1.1	192.168.2.7	0xb9a7	No error (0)	ixfd-api.bc0a.com	ixf3-api.bc0a.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:50.214394093 CET	1.1.1.1	192.168.2.7	0xb9a7	No error (0)	ixf3-api.bc0a.com		35.244.153.179	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.215044022 CET	1.1.1.1	192.168.2.7	0xd950	No error (0)	ixfd-api.bc0a.com	ixf3-api.bc0a.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:50.274097919 CET	1.1.1.1	192.168.2.7	0x361c	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.274097919 CET	1.1.1.1	192.168.2.7	0x361c	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:50.274382114 CET	1.1.1.1	192.168.2.7	0x41a6	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 1, 2024 13:57:51.249409914 CET	1.1.1.1	192.168.2.7	0x3795	No error (0)	marvel-b1-cdn.bc0a.com	d2kupluu740cd3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:51.256635904 CET	1.1.1.1	192.168.2.7	0xfc82	No error (0)	marvel-b1-cdn.bc0a.com	d2kupluu740cd3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:51.256635904 CET	1.1.1.1	192.168.2.7	0xfc82	No error (0)	d2kupluu740cd3.cloudfront.net		13.224.245.11	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.256635904 CET	1.1.1.1	192.168.2.7	0xfc82	No error (0)	d2kupluu740cd3.cloudfront.net		13.224.245.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.256635904 CET	1.1.1.1	192.168.2.7	0xfc82	No error (0)	d2kupluu740cd3.cloudfront.net		13.224.245.80	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.256635904 CET	1.1.1.1	192.168.2.7	0xfc82	No error (0)	d2kupluu740cd3.cloudfront.net		13.224.245.127	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.503992081 CET	1.1.1.1	192.168.2.7	0xb654	No error (0)	web.purolator.com	d253r3uy4qzbcc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:51.508622885 CET	1.1.1.1	192.168.2.7	0x780f	No error (0)	web.purolator.com	d253r3uy4qzbcc.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:51.508622885 CET	1.1.1.1	192.168.2.7	0x780f	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.113	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.508622885 CET	1.1.1.1	192.168.2.7	0x780f	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.67	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.508622885 CET	1.1.1.1	192.168.2.7	0x780f	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.13	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:51.508622885 CET	1.1.1.1	192.168.2.7	0x780f	No error (0)	d253r3uy4qzbcc.cloudfront.net		108.138.7.87	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.121709108 CET	1.1.1.1	192.168.2.7	0x6d13	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.122155905 CET	1.1.1.1	192.168.2.7	0xb759	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.226635933 CET	1.1.1.1	192.168.2.7	0x542	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:52.227170944 CET	1.1.1.1	192.168.2.7	0x4279	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:52.227170944 CET	1.1.1.1	192.168.2.7	0x4279	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:52.227336884 CET	1.1.1.1	192.168.2.7	0x7809	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:52.227350950 CET	1.1.1.1	192.168.2.7	0x8dfa	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.830534935 CET	1.1.1.1	192.168.2.7	0x2db	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.830534935 CET	1.1.1.1	192.168.2.7	0x2db	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.830549002 CET	1.1.1.1	192.168.2.7	0x2dfd	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.830549002 CET	1.1.1.1	192.168.2.7	0x2dfd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 1, 2024 13:57:53.830549002 CET	1.1.1.1	192.168.2.7	0x2dfd	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 1, 2024 13:57:53.832603931 CET	1.1.1.1	192.168.2.7	0xaaa	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.832603931 CET	1.1.1.1	192.168.2.7	0xaaa	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.833039045 CET	1.1.1.1	192.168.2.7	0xd0ce	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.833039045 CET	1.1.1.1	192.168.2.7	0xd0ce	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.847737074 CET	1.1.1.1	192.168.2.7	0xcde9	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.847737074 CET	1.1.1.1	192.168.2.7	0xcde9	No error (0)	d1ykf07e75w7ss.cloudfront.net		108.138.6.136	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.847748041 CET	1.1.1.1	192.168.2.7	0x8f74	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.851329088 CET	1.1.1.1	192.168.2.7	0xa0ef	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.851329088 CET	1.1.1.1	192.168.2.7	0xa0ef	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.851490974 CET	1.1.1.1	192.168.2.7	0xd14f	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.851490974 CET	1.1.1.1	192.168.2.7	0xd14f	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	100008210.collect.igodigital.com	nova.collect.igodigital.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		18.210.77.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		52.2.40.11	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.191.114	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		174.129.237.167	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.134.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.859181881 CET	1.1.1.1	192.168.2.7	0xb46f	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		44.206.202.179	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.861459017 CET	1.1.1.1	192.168.2.7	0x58f7	No error (0)	100008210.collect.igodigital.com	nova.collect.igodigital.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.861459017 CET	1.1.1.1	192.168.2.7	0x58f7	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:53.864278078 CET	1.1.1.1	192.168.2.7	0x5024	No error (0)	tags.srv.stackadapt.com		18.158.246.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:53.864278078 CET	1.1.1.1	192.168.2.7	0x5024	No error (0)	tags.srv.stackadapt.com		35.157.12.239	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.038907051 CET	1.1.1.1	192.168.2.7	0xcc63	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.038907051 CET	1.1.1.1	192.168.2.7	0xcc63	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.038907051 CET	1.1.1.1	192.168.2.7	0xcc63	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.038907051 CET	1.1.1.1	192.168.2.7	0xcc63	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.038907051 CET	1.1.1.1	192.168.2.7	0xcc63	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.042918921 CET	1.1.1.1	192.168.2.7	0xb337	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.099623919 CET	1.1.1.1	192.168.2.7	0x51e	No error (0)	td.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.998177052 CET	1.1.1.1	192.168.2.7	0xdfff	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:54.999608040 CET	1.1.1.1	192.168.2.7	0x80f2	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.999608040 CET	1.1.1.1	192.168.2.7	0x80f2	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.999608040 CET	1.1.1.1	192.168.2.7	0x80f2	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:54.999608040 CET	1.1.1.1	192.168.2.7	0x80f2	No error (0)	www.gslb.pinterest.net	api.pinterest.com.eip.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	dualstack.pinterest.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	dualstack.pinterest.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	dualstack.pinterest.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188708067 CET	1.1.1.1	192.168.2.7	0xe83d	No error (0)	dualstack.pinterest.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188946009 CET	1.1.1.1	192.168.2.7	0xe37c	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.188946009 CET	1.1.1.1	192.168.2.7	0xe37c	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.214812040 CET	1.1.1.1	192.168.2.7	0xfa68	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.214983940 CET	1.1.1.1	192.168.2.7	0xb71d	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.317456961 CET	1.1.1.1	192.168.2.7	0x6b7a	No error (0)	s.amazon-adsystem.com		98.82.154.76	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375478983 CET	1.1.1.1	192.168.2.7	0xe3ae	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		174.129.237.167	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		44.206.202.179	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		52.2.40.11	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		18.210.77.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.134.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.375911951 CET	1.1.1.1	192.168.2.7	0x419e	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.191.114	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.466515064 CET	1.1.1.1	192.168.2.7	0xda4e	No error (0)	stats.g.doubleclick.net		142.251.173.157	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.466515064 CET	1.1.1.1	192.168.2.7	0xda4e	No error (0)	stats.g.doubleclick.net		142.251.173.156	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.466515064 CET	1.1.1.1	192.168.2.7	0xda4e	No error (0)	stats.g.doubleclick.net		142.251.173.154	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:55.466515064 CET	1.1.1.1	192.168.2.7	0xda4e	No error (0)	stats.g.doubleclick.net		142.251.173.155	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.444861889 CET	1.1.1.1	192.168.2.7	0x3e7a	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.444861889 CET	1.1.1.1	192.168.2.7	0x3e7a	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.444979906 CET	1.1.1.1	192.168.2.7	0x1c22	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.444979906 CET	1.1.1.1	192.168.2.7	0x1c22	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.449636936 CET	1.1.1.1	192.168.2.7	0x4248	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.449636936 CET	1.1.1.1	192.168.2.7	0x4248	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.450283051 CET	1.1.1.1	192.168.2.7	0x4f68	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.450283051 CET	1.1.1.1	192.168.2.7	0x4f68	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	100008210.collect.igodigital.com	nova.collect.igodigital.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		52.2.40.11	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.191.114	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		44.206.202.179	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		34.197.134.74	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		18.210.77.166	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.479706049 CET	1.1.1.1	192.168.2.7	0x2333	No error (0)	nova-collector-1192479543.us-east-1.elb.amazonaws.com		174.129.237.167	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:56.483380079 CET	1.1.1.1	192.168.2.7	0x4a18	No error (0)	100008210.collect.igodigital.com	nova.collect.igodigital.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:56.483380079 CET	1.1.1.1	192.168.2.7	0x4a18	No error (0)	nova.collect.igodigital.com	nova-collector-1192479543.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.423768044 CET	1.1.1.1	192.168.2.7	0x6077	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.423768044 CET	1.1.1.1	192.168.2.7	0x6077	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.423944950 CET	1.1.1.1	192.168.2.7	0xdf69	No error (0)	analytics.tiktok.com	analytics.tiktok.com.ttdns2.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.423944950 CET	1.1.1.1	192.168.2.7	0xdf69	No error (0)	analytics.tiktok.com.ttdns2.com	analytics.tiktok.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.425621986 CET	1.1.1.1	192.168.2.7	0x2056	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.425646067 CET	1.1.1.1	192.168.2.7	0xd5a2	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.425646067 CET	1.1.1.1	192.168.2.7	0xd5a2	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.245.194.122	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.427530050 CET	1.1.1.1	192.168.2.7	0xacaa	No error (0)	tags.srv.stackadapt.com		35.157.12.239	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.427530050 CET	1.1.1.1	192.168.2.7	0xacaa	No error (0)	tags.srv.stackadapt.com		18.158.246.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.429982901 CET	1.1.1.1	192.168.2.7	0x5622	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.429982901 CET	1.1.1.1	192.168.2.7	0x5622	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.430269957 CET	1.1.1.1	192.168.2.7	0x7239	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.430269957 CET	1.1.1.1	192.168.2.7	0x7239	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 1, 2024 13:57:58.430269957 CET	1.1.1.1	192.168.2.7	0x7239	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431138039 CET	1.1.1.1	192.168.2.7	0xe31f	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431870937 CET	1.1.1.1	192.168.2.7	0x199b	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431870937 CET	1.1.1.1	192.168.2.7	0x199b	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.431870937 CET	1.1.1.1	192.168.2.7	0x199b	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.437009096 CET	1.1.1.1	192.168.2.7	0xa29	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.13	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.437009096 CET	1.1.1.1	192.168.2.7	0xa29	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.109	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.437009096 CET	1.1.1.1	192.168.2.7	0xa29	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.38	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.437009096 CET	1.1.1.1	192.168.2.7	0xa29	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.47	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.509502888 CET	1.1.1.1	192.168.2.7	0x8601	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.509951115 CET	1.1.1.1	192.168.2.7	0xab85	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:58.509951115 CET	1.1.1.1	192.168.2.7	0xab85	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:58.970592976 CET	1.1.1.1	192.168.2.7	0xd920	No error (0)	s.amazon-adsystem.com		98.82.158.241	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.643918037 CET	1.1.1.1	192.168.2.7	0x6623	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.643930912 CET	1.1.1.1	192.168.2.7	0xe7eb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.643930912 CET	1.1.1.1	192.168.2.7	0xe7eb	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.663366079 CET	1.1.1.1	192.168.2.7	0x5448	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.13	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.663366079 CET	1.1.1.1	192.168.2.7	0x5448	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.109	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.663366079 CET	1.1.1.1	192.168.2.7	0x5448	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.38	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.663366079 CET	1.1.1.1	192.168.2.7	0x5448	No error (0)	ara.paa-reporting-advertising.amazon		18.245.46.47	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.956084967 CET	1.1.1.1	192.168.2.7	0x9a54	No error (0)	js.zi-scripts.com		172.64.150.44	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.956084967 CET	1.1.1.1	192.168.2.7	0x9a54	No error (0)	js.zi-scripts.com		104.18.37.212	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.956095934 CET	1.1.1.1	192.168.2.7	0xc346	No error (0)	js.zi-scripts.com			65	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.959889889 CET	1.1.1.1	192.168.2.7	0xb594	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:57:59.960148096 CET	1.1.1.1	192.168.2.7	0x9557	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.960148096 CET	1.1.1.1	192.168.2.7	0x9557	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:57:59.960148096 CET	1.1.1.1	192.168.2.7	0x9557	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:58:00.028131962 CET	1.1.1.1	192.168.2.7	0x3b49	No error (0)	prod.virtualchatpurolator.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:00.050980091 CET	1.1.1.1	192.168.2.7	0x6ec2	No error (0)	prod.virtualchatpurolator.com		172.67.7.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.050980091 CET	1.1.1.1	192.168.2.7	0x6ec2	No error (0)	prod.virtualchatpurolator.com		104.22.50.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.050980091 CET	1.1.1.1	192.168.2.7	0x6ec2	No error (0)	prod.virtualchatpurolator.com		104.22.51.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.143251896 CET	1.1.1.1	192.168.2.7	0xd8d8	No error (0)	prod.virtualchatpurolator.com		104.22.51.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.143251896 CET	1.1.1.1	192.168.2.7	0xd8d8	No error (0)	prod.virtualchatpurolator.com		104.22.50.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.143251896 CET	1.1.1.1	192.168.2.7	0xd8d8	No error (0)	prod.virtualchatpurolator.com		172.67.7.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:00.148082018 CET	1.1.1.1	192.168.2.7	0x6007	No error (0)	prod.virtualchatpurolator.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:03.199615002 CET	1.1.1.1	192.168.2.7	0xce39	No error (0)	js.zi-scripts.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:03.200117111 CET	1.1.1.1	192.168.2.7	0xc553	No error (0)	js.zi-scripts.com		172.64.150.44	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:03.200117111 CET	1.1.1.1	192.168.2.7	0xc553	No error (0)	js.zi-scripts.com		104.18.37.212	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:03.342962980 CET	1.1.1.1	192.168.2.7	0xdd11	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:03.343703985 CET	1.1.1.1	192.168.2.7	0x8adf	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:03.343703985 CET	1.1.1.1	192.168.2.7	0x8adf	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:05.755726099 CET	1.1.1.1	192.168.2.7	0x6114	No error (0)	prod.virtualchatpurolator.com		172.67.7.123	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:05.755726099 CET	1.1.1.1	192.168.2.7	0x6114	No error (0)	prod.virtualchatpurolator.com		104.22.51.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:05.755726099 CET	1.1.1.1	192.168.2.7	0x6114	No error (0)	prod.virtualchatpurolator.com		104.22.50.151	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:05.776977062 CET	1.1.1.1	192.168.2.7	0x9e97	No error (0)	prod.virtualchatpurolator.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:06.966530085 CET	1.1.1.1	192.168.2.7	0x2774	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:06.966530085 CET	1.1.1.1	192.168.2.7	0x2774	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:06.966547966 CET	1.1.1.1	192.168.2.7	0x7078	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
Nov 1, 2024 13:58:11.425750017 CET	1.1.1.1	192.168.2.7	0xffb6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:11.425750017 CET	1.1.1.1	192.168.2.7	0xffb6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:56.025768995 CET	1.1.1.1	192.168.2.7	0xe959	No error (0)	tags.srv.stackadapt.com		18.158.246.206	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:56.025768995 CET	1.1.1.1	192.168.2.7	0xe959	No error (0)	tags.srv.stackadapt.com		35.157.12.239	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:57.898289919 CET	1.1.1.1	192.168.2.7	0x9087	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:58:57.898289919 CET	1.1.1.1	192.168.2.7	0x9087	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:57.898289919 CET	1.1.1.1	192.168.2.7	0x9087	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:57.898289919 CET	1.1.1.1	192.168.2.7	0x9087	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:58:57.898289919 CET	1.1.1.1	192.168.2.7	0x9087	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:59:00.315530062 CET	1.1.1.1	192.168.2.7	0x8a3e	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 13:59:00.315530062 CET	1.1.1.1	192.168.2.7	0x8a3e	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Nov 1, 2024 13:59:00.316170931 CET	1.1.1.1	192.168.2.7	0x3adc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.7	49703	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:40 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:40 UTC	494	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:40 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 30 Oct 2024 23:56:08 GMT ETag: "0x8DCF93E6CAB67A0" x-ms-request-id: cf7486c4-d01e-00ad-0e4c-2be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125740Z-159b85dff8fj6b6xhC1DFW8qdg00000003300000000000ws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:40 UTC	15890	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d Data Ascii: 0820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E=
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 Data Ascii: <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8"
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e Data Ascii: _False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e Data Ascii: 2" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Clean
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 Data Ascii: > </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 Data Ascii: <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-01 12:57:40 UTC	16384	IN	Data Raw: 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.7	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:41 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:41 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: be87860f-801e-0035-4708-2c752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125741Z-16ccfc49897rxrtbhC1DFWk40s00000000s0000000008926 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:41 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.7	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:41 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:41 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9f9811d-201e-0096-2924-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125741Z-176bd8f9bc5nnctdhC1DFWuuh800000000ng00000000edcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-01 12:57:41 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.7	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:41 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:41 UTC	538	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: a28262d6-f01e-0003-5708-2c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125741Z-16ccfc498974hjqwhC1DFW7uyn00000000gg000000003f2c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:41 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.7	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:41 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:41 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 20969678-a01e-006f-3ab0-2a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125741Z-159b85dff8fj6b6xhC1DFW8qdg00000002xg00000000901v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:41 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.7	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:41 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:41 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 134b0bf0-a01e-0098-2f2e-2c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125741Z-16ccfc49897d998fhC1DFWbah400000000g000000000fu13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:41 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.7	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1f907120-801e-0047-71ae-2b7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125742Z-16dc884887blxdnjhC1DFWpw2s00000000m0000000003x89 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:42 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.7	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3a74c86b-001e-008d-3e01-2cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125742Z-176bd8f9bc55csg5hC1DFW6yfn00000000rg000000009a95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-01 12:57:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.7	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125742Z-16ccfc49897cvhbphC1DFWt5d800000000u0000000001mn7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:42 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 12e859be-a01e-0098-7408-2c8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125742Z-16ccfc49897xnlwfhC1DFWz50s00000000q0000000007mmh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:42 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.7	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:42 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: ab6d44c0-401e-005b-6508-2c9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125742Z-16ccfc49897z4cgphC1DFWt0y400000000mg000000001amw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:42 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49720	52.60.138.120	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:42 UTC	683	OUT	GET /en/tracker?pin=335008262560 HTTP/1.1 Host: purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:42 UTC	421	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 01 Nov 2024 12:57:42 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 237 Connection: close X-Content-Type-Options: nosniff Location: https://www.purolator.com/en/tracker?pin=335008262560 Cache-Control: max-age=31536000 Expires: Sat, 01 Nov 2025 12:57:42 GMT X-Request-ID: v-e1fae5c2-9850-11ef-bef6-236351181e70 Age: 0 Via: varnish X-Cache: MISS
2024-11-01 12:57:42 UTC	237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 75 72 6f 6c 61 74 6f 72 2e 63 6f 6d 2f 65 6e 2f 74 72 61 63 6b 65 72 3f 70 69 6e 3d 33 33 35 30 30 38 32 36 32 35 36 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.purolator.com/en/tracker?pin=335008262560">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.7	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:43 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:43 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:43 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: e631ddcb-001e-0065-1f99-2a0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125743Z-159b85dff8fwqwmdhC1DFWy0a00000000130000000008y3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:43 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.7	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:43 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6d8432ff-e01e-001f-0608-2c1633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125743Z-16dc884887bb4p45hC1DFWv3z000000000mg00000000cdvp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.7	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:43 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:43 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:43 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 250fb995-801e-0078-4343-2bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125743Z-16dc884887bkpzdnhC1DFWbc3n00000000sg000000002cfs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:43 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.7	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:43 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: cf92f9cd-d01e-00ad-1a55-2be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-176bd8f9bc5hwksrhC1DFWf9wg00000000kg00000000506v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.7	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:43 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: d7649e4f-901e-0015-0208-2cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-16ccfc49897pchpfhC1DFW151000000000mg00000000fv88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.7	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:44 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:44 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 12fa9963-101e-000b-2608-2c5e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-16ccfc498972mdvzhC1DFWzrms00000000mg00000000894m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.7	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:44 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:44 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 8b96f0ab-501e-008c-5135-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-159b85dff8f46f6ghC1DFW1x1s00000001s0000000007vqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:44 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:44 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: f6a679f0-201e-0033-0608-2cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-16dc884887b6mtxqhC1DFW3mk000000000ng000000006e12 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:44 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 634471bf-901e-0016-1230-2cefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-16ccfc49897kh956hC1DFW2afc00000000tg000000003n0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:44 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:44 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3ed937ed-001e-0065-4608-2c0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125744Z-16ccfc49897cvhbphC1DFWt5d800000000s0000000008d9b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:45 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8644ae90-c01e-00a1-60bf-2b7e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125745Z-16ccfc498974624whC1DFWdg3800000000d0000000002q0m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:45 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:46 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:45 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: e5bf7d34-e01e-00aa-152e-2cceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125745Z-176bd8f9bc55l2dfhC1DFWw03w00000000g000000000a45x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:46 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:45 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:45 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 134a0630-601e-0084-685d-2a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125745Z-159b85dff8fdjprfhC1DFWuqh000000001ug00000000c63g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:45 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:45 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 4632b172-e01e-0071-11da-2b08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125745Z-16ccfc49897nrfsvhC1DFW8e0000000000s00000000091q2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:45 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:45 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:45 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 9b24d4d0-601e-0032-3e08-2ceebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125745Z-16dc884887bljt2fhC1DFWru5400000000ng000000005kz8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:45 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49747	35.201.125.192	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:46 UTC	555	OUT	GET /autopilot/f00000000094873/autopilot_sdk.js HTTP/1.1 Host: cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:46 UTC	1685	IN	HTTP/1.1 200 OK x-goog-generation: 1604510297596975 x-goog-metageneration: 3 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15239 x-goog-meta-SDK_ACCOUNT_ID: f00000000094873 x-goog-meta-MARVEL_CONFIG_CONSISTENCY_CUSTOM: {"data-url":"igodigital.com","data-customerid":"f00000000094873"} x-goog-meta-SDK_WHITELIST: ixf x-goog-meta-SDK_LOG_LEVEL: 2 x-goog-meta-MARVEL_ENABLED: true x-goog-meta-publishingDate: 2020-11-04 17:18:17 x-goog-meta-MARVEL_CUSTOMER_ID: x-goog-meta-CUSTOM: true x-goog-meta-SDK_REQUEST_PARAMETERS_CASE_SENSITIVE: false x-goog-meta-SDK_VERSION: 1.4.5 x-goog-meta-SDK_CANONICAL_PROTOCOL: x-goog-meta-SPA: false x-goog-meta-MARVEL_TEST_MODE: false x-goog-meta-SDK_CANONICAL_HOST: Content-Language: en x-goog-hash: crc32c=DuEfqw== x-goog-hash: md5=7EYbIydKs9Ugejyx5tVbSA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AHmUCY00_-bInvYy8vwrupjUkQ3WErXW0HJcDJ39yAinKGkslKQlY9VmDMBDb6eljJ-QSocBvrJjtG01ZQ Server: UploadServer Date: Fri, 01 Nov 2024 12:57:43 GMT Expires: Fri, 01 Nov 2024 13:57:43 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 04 Nov 2020 17:18:17 GMT ETag: W/"ec461b23274ab3d5207a3cb1e6d55b48" Content-Type: application/javascript Vary: Accept-Encoding Content-Length: 46019 Age: 3 strict-transport-security: max-age=63072000; includeSubDomains Content-Security-Policy: default-src self; script-src self; style-src self; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 77 69 6e 64 6f 77 2e 42 45 49 58 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: window.BEIXF=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 6f 3d 6e 28 30 29 3b 76 61 72 20 61 3d 6e 28 38 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2b 22 22 3b 6e 2e 6c 65 6e 67 74 68 3c 74 3b 29 6e 3d 22 30 22 2b 6e 3b 72 65 74 75 72 6e 20 6e 7d 74 2e 53 44 4b 55 74 69 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ct.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),o=n(0);var a=n(8);function i(e,t){for(var n=e+"";n.length<t;)n="0"+n;return n}t.SDKUtils=function(){function e(){!function(e,t){if(!(e instanceof t))throw new
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 74 2c 22 67 69 22 29 2e 74 65 73 74 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 69 73 44 61 79 6c 69 67 68 74 53 61 76 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 74 3c 33 7c 7c 74 3e 31 31 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 3e 33 26 26 74 3c 31 31 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 72 3d 65 2d 6e 3b 72 65 74 75 72 6e 20 33 3d 3d 3d 74 3f 72 3e 3d 38 3a 72 3c 3d 30 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 76 65 72 74 54 6f 4e 6f 72 6d 61 6c 69 7a 65 64 47 6f 6f 67 6c 65 49 6e 64 65 78 54 69 6d 65 5a 6f 6e 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 28 74 29 2c 6f 3d 2d 38 2c 61 3d 72 2e 67 65 74 54 Data Ascii: rn new RegExp(t,"gi").test(e)}},{key:"isDaylightSavings",value:function(e,t,n){if(t<3\|\|t>11)return!1;if(t>3&&t<11)return!0;var r=e-n;return 3===t?r>=8:r<=0}},{key:"convertToNormalizedGoogleIndexTimeZone",value:function(t,n){var r=new Date(t),o=-8,a=r.getT
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 68 74 6d 6c 45 6e 74 69 74 69 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 53 63 72 69 70 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e Data Ascii: }},{key:"htmlEntities",value:function(e){return String(e).replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""")}},{key:"createCommentScript",value:function(e){var t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],n
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 68 69 73 2e 6c 6f 67 28 22 5b 49 4e 46 4f 5d 20 22 2b 65 2c 6f 2e 49 4e 46 4f 2c 74 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 22 5b 44 45 42 55 47 5d 20 22 2b 65 2c 6f 2e 44 45 42 55 47 2c 74 29 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 Data Ascii: his.log("[INFO] "+e,o.INFO,t)},debug:function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;return this.log("[DEBUG] "+e,o.DEBUG,t)},warn:function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;return this.log(
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 6f 6d 22 2c 22 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 22 2c 22 2e 62 69 7a 69 62 6c 65 2e 22 2c 22 2e 62 69 6e 67 2e 22 2c 22 2e 67 6f 6f 67 6c 65 2e 22 2c 22 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 22 2c 22 61 64 6e 78 73 2e 22 2c 22 63 64 6e 69 6e 73 74 61 67 72 61 6d 2e 22 2c 22 66 62 63 64 6e 2e 22 2c 22 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 22 2c 22 2e 68 75 62 73 70 6f 74 2e 22 2c 22 2e 79 6f 75 74 75 62 65 2e 22 2c 22 2e 74 72 61 63 6b 2e 22 2c 22 2e 68 6f 74 6a 61 72 2e 22 2c 22 77 65 62 74 72 61 78 73 2e 22 2c 22 2e 64 61 74 61 70 72 6f 2e 22 2c 22 2e 66 61 63 65 62 6f 6f 6b 2e 22 2c 22 2e 63 6c 69 63 6b 73 61 70 70 2e 22 2c 22 2e 64 6f 6d 63 6c 69 63 6b 65 78 74 2e 22 2c 22 2e 70 69 6e 67 63 6c 6f 63 6b 2e 22 2c 22 2e 61 64 64 74 68 Data Ascii: om",".doubleclick.",".bizible.",".bing.",".google.",".googleapis.","adnxs.","cdninstagram.","fbcdn.","googleusercontent.",".hubspot.",".youtube.",".track.",".hotjar.","webtraxs.",".datapro.",".facebook.",".clicksapp.",".domclickext.",".pingclock.",".addth
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 68 29 3b 72 65 74 75 72 6e 20 74 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 5f 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 30 3d 3d 28 65 3d 65 2e 74 72 69 6d 28 29 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 35 30 30 29 72 65 74 75 72 6e 21 31 3b 69 66 28 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2e 69 6e 64 65 78 4f 66 28 75 29 3e 30 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 22 2e 73 76 67 22 29 3e 3d 30 7c 7c 65 2e 69 6e 64 65 78 Data Ascii: h);return t&&decodeURIComponent(t[1].replace(/\+/g," "))}function N(e){_&&console.log(e)}function A(e){if(!e)return!1;if(0==(e=e.trim()).length)return!1;if(e.length>500)return!1;if((e=e.toLowerCase()).indexOf(u)>0)return!1;if(e.indexOf(".svg")>=0\|\|e.index
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 22 2c 6f 29 3b 69 66 28 61 3e 30 29 7b 76 61 72 20 69 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6f 29 3b 69 66 28 69 3e 30 29 7b 76 61 72 20 73 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 69 29 3b 69 66 28 28 73 2e 73 74 61 72 74 73 57 69 74 68 28 22 27 22 29 7c 7c 73 2e 73 74 61 72 74 73 57 69 74 68 28 27 22 27 29 29 26 26 28 73 3d 73 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 28 73 2e 65 6e 64 73 57 69 74 68 28 22 27 22 29 7c 7c 73 2e 65 6e 64 73 57 69 74 68 28 27 22 27 29 29 26 26 28 73 3d 73 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 73 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 41 28 73 29 29 7b 76 61 72 20 6c 3d 49 28 73 29 3b 69 66 28 6c 26 26 6c 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3e 30 26 26 73 21 3d 6c 29 72 65 74 75 72 6e 20 6c 3d 22 27 Data Ascii: ",o);if(a>0){var i=n.indexOf(")",o);if(i>0){var s=e.substring(a+1,i);if((s.startsWith("'")\|\|s.startsWith('"'))&&(s=s.substring(1)),(s.endsWith("'")\|\|s.endsWith('"'))&&(s=s.substring(0,s.length-1)),A(s)){var l=I(s);if(l&&l.trim().length>0&&s!=l)return l="'
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 4e 28 22 43 68 65 63 6b 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 74 79 6c 65 5d 3d 3d 3e 22 2b 69 29 2c 28 75 3d 4c 28 69 29 29 26 26 75 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3e 30 26 26 69 21 3d 75 26 26 28 5f 26 26 4e 28 22 43 68 61 6e 67 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 74 79 6c 65 5d 3d 3d 3e 22 2b 75 29 2c 6e 5b 73 5d 2e 6e 6f 64 65 56 61 6c 75 65 3d 75 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 62 65 5f 6d 61 72 76 65 6c 22 2c 22 31 22 29 29 7d 65 6c 73 65 20 69 66 28 22 73 72 63 73 65 74 22 3d 3d 6c 29 7b 76 61 72 20 63 3b 61 3d 6e 5b 73 5d 2e 6e 6f 64 65 56 61 6c 75 65 3b 5f 26 26 4e 28 22 43 68 65 63 6b 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 72 63 73 65 74 5d 3d 3d 3e 22 2b 61 29 2c 28 63 3d 4f 28 61 29 Data Ascii: N("Checking[node,"+t+",style]==>"+i),(u=L(i))&&u.trim().length>0&&i!=u&&(_&&N("Changing[node,"+t+",style]==>"+u),n[s].nodeValue=u,e.setAttribute("be_marvel","1"))}else if("srcset"==l){var c;a=n[s].nodeValue;_&&N("Checking[node,"+t+",srcset]==>"+a),(c=O(a)
2024-11-01 12:57:46 UTC	1685	IN	Data Raw: 65 5f 6d 61 72 76 65 6c 22 29 29 26 26 22 31 22 3d 3d 6e 7c 7c 53 28 74 2e 74 61 72 67 65 74 2c 74 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 29 29 29 7d 76 61 72 20 44 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 65 2c 55 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 78 3d 44 7c 7c 55 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 2c 50 3d 74 26 26 21 74 2e 6e 6f 64 65 54 79 70 65 26 26 74 2c 77 3d 50 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 26 26 21 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e Data Ascii: e_marvel"))&&"1"==n\|\|S(t.target,t.attributeName)))}var D="object"==typeof e&&e&&e.Object===Object&&e,U="object"==typeof self&&self&&self.Object===Object&&self,x=D\|\|U\|\|Function("return this")(),P=t&&!t.nodeType&&t,w=P&&"object"==typeof n&&n&&!n.nodeType&&n

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:46 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:46 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:46 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: e5c4cfa3-b01e-0001-3cff-2b46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125746Z-16ccfc49897hshbrhC1DFW7g1c00000000g000000000bsqx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:46 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:46 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:46 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 396bdd21-c01e-0034-5008-2c2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125746Z-176bd8f9bc55csg5hC1DFW6yfn00000000qg00000000at94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.7	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:46 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:47 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 1c930448-201e-0003-6800-2cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125747Z-176bd8f9bc5pzj8phC1DFWsz3000000000m0000000005xcb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:46 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:46 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: f5cab439-801e-00a3-1932-2c7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125746Z-16ccfc49897w2n6khC1DFW5wd800000000gg00000000au3v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 12:57:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=100075 Date: Fri, 01 Nov 2024 12:57:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.7	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:47 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:47 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 3ed93b46-001e-0065-6b08-2c0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125747Z-16dc884887bljt2fhC1DFWru5400000000g00000000079yc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	60211	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:47 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:47 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: cc16d0f5-a01e-001e-0d08-2c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125747Z-16ccfc49897rxrtbhC1DFWk40s00000000u0000000001k9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	60210	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:47 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fc1cb8b8-801e-0083-61ac-2bf0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125747Z-159b85dff8f97jn9hC1DFW19vg000000018g0000000066gc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.7	60208	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:47 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:47 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:47 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: fd4533cb-201e-005d-3108-2cafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125747Z-16ccfc49897774xmhC1DFWuraw00000000dg000000003yvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:47 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.7	60209	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125748Z-159b85dff8f2qnk7hC1DFWwa2400000001m000000000af6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:48 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	60214	35.201.125.192	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	378	OUT	GET /autopilot/f00000000094873/autopilot_sdk.js HTTP/1.1 Host: cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:48 UTC	1685	IN	HTTP/1.1 200 OK x-goog-generation: 1604510297596975 x-goog-metageneration: 3 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 15239 x-goog-meta-SDK_ACCOUNT_ID: f00000000094873 x-goog-meta-MARVEL_CONFIG_CONSISTENCY_CUSTOM: {"data-url":"igodigital.com","data-customerid":"f00000000094873"} x-goog-meta-SDK_WHITELIST: ixf x-goog-meta-SDK_LOG_LEVEL: 2 x-goog-meta-MARVEL_ENABLED: true x-goog-meta-publishingDate: 2020-11-04 17:18:17 x-goog-meta-MARVEL_CUSTOMER_ID: x-goog-meta-CUSTOM: true x-goog-meta-SDK_REQUEST_PARAMETERS_CASE_SENSITIVE: false x-goog-meta-SDK_VERSION: 1.4.5 x-goog-meta-SDK_CANONICAL_PROTOCOL: x-goog-meta-SPA: false x-goog-meta-MARVEL_TEST_MODE: false x-goog-meta-SDK_CANONICAL_HOST: Content-Language: en x-goog-hash: crc32c=DuEfqw== x-goog-hash: md5=7EYbIydKs9Ugejyx5tVbSA== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped X-GUploader-UploadID: AHmUCY00_-bInvYy8vwrupjUkQ3WErXW0HJcDJ39yAinKGkslKQlY9VmDMBDb6eljJ-QSocBvrJjtG01ZQ Server: UploadServer Date: Fri, 01 Nov 2024 12:57:43 GMT Expires: Fri, 01 Nov 2024 13:57:43 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 04 Nov 2020 17:18:17 GMT ETag: W/"ec461b23274ab3d5207a3cb1e6d55b48" Content-Type: application/javascript Vary: Accept-Encoding Content-Length: 46019 Age: 5 strict-transport-security: max-age=63072000; includeSubDomains Content-Security-Policy: default-src self; script-src self; style-src self; Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 77 69 6e 64 6f 77 2e 42 45 49 58 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: window.BEIXF=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 65 28 74 2c 72 29 2c 74 7d 7d 28 29 2c 6f 3d 6e 28 30 29 3b 76 61 72 20 61 3d 6e 28 38 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2b 22 22 3b 6e 2e 6c 65 6e 67 74 68 3c 74 3b 29 6e 3d 22 30 22 2b 6e 3b 72 65 74 75 72 6e 20 6e 7d 74 2e 53 44 4b 55 74 69 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: ct.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),o=n(0);var a=n(8);function i(e,t){for(var n=e+"";n.length<t;)n="0"+n;return n}t.SDKUtils=function(){function e(){!function(e,t){if(!(e instanceof t))throw new
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 74 2c 22 67 69 22 29 2e 74 65 73 74 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 69 73 44 61 79 6c 69 67 68 74 53 61 76 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 74 3c 33 7c 7c 74 3e 31 31 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 3e 33 26 26 74 3c 31 31 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 72 3d 65 2d 6e 3b 72 65 74 75 72 6e 20 33 3d 3d 3d 74 3f 72 3e 3d 38 3a 72 3c 3d 30 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6e 76 65 72 74 54 6f 4e 6f 72 6d 61 6c 69 7a 65 64 47 6f 6f 67 6c 65 49 6e 64 65 78 54 69 6d 65 5a 6f 6e 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 28 74 29 2c 6f 3d 2d 38 2c 61 3d 72 2e 67 65 74 54 Data Ascii: rn new RegExp(t,"gi").test(e)}},{key:"isDaylightSavings",value:function(e,t,n){if(t<3\|\|t>11)return!1;if(t>3&&t<11)return!0;var r=e-n;return 3===t?r>=8:r<=0}},{key:"convertToNormalizedGoogleIndexTimeZone",value:function(t,n){var r=new Date(t),o=-8,a=r.getT
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 7d 7d 2c 7b 6b 65 79 3a 22 68 74 6d 6c 45 6e 74 69 74 69 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 53 63 72 69 70 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e Data Ascii: }},{key:"htmlEntities",value:function(e){return String(e).replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""")}},{key:"createCommentScript",value:function(e){var t=arguments.length>1&&void 0!==arguments[1]&&arguments[1],n
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 68 69 73 2e 6c 6f 67 28 22 5b 49 4e 46 4f 5d 20 22 2b 65 2c 6f 2e 49 4e 46 4f 2c 74 29 7d 2c 64 65 62 75 67 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 22 5b 44 45 42 55 47 5d 20 22 2b 65 2c 6f 2e 44 45 42 55 47 2c 74 29 7d 2c 77 61 72 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 67 28 Data Ascii: his.log("[INFO] "+e,o.INFO,t)},debug:function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;return this.log("[DEBUG] "+e,o.DEBUG,t)},warn:function(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:null;return this.log(
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 6f 6d 22 2c 22 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 22 2c 22 2e 62 69 7a 69 62 6c 65 2e 22 2c 22 2e 62 69 6e 67 2e 22 2c 22 2e 67 6f 6f 67 6c 65 2e 22 2c 22 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 22 2c 22 61 64 6e 78 73 2e 22 2c 22 63 64 6e 69 6e 73 74 61 67 72 61 6d 2e 22 2c 22 66 62 63 64 6e 2e 22 2c 22 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 22 2c 22 2e 68 75 62 73 70 6f 74 2e 22 2c 22 2e 79 6f 75 74 75 62 65 2e 22 2c 22 2e 74 72 61 63 6b 2e 22 2c 22 2e 68 6f 74 6a 61 72 2e 22 2c 22 77 65 62 74 72 61 78 73 2e 22 2c 22 2e 64 61 74 61 70 72 6f 2e 22 2c 22 2e 66 61 63 65 62 6f 6f 6b 2e 22 2c 22 2e 63 6c 69 63 6b 73 61 70 70 2e 22 2c 22 2e 64 6f 6d 63 6c 69 63 6b 65 78 74 2e 22 2c 22 2e 70 69 6e 67 63 6c 6f 63 6b 2e 22 2c 22 2e 61 64 64 74 68 Data Ascii: om",".doubleclick.",".bizible.",".bing.",".google.",".googleapis.","adnxs.","cdninstagram.","fbcdn.","googleusercontent.",".hubspot.",".youtube.",".track.",".hotjar.","webtraxs.",".datapro.",".facebook.",".clicksapp.",".domclickext.",".pingclock.",".addth
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 68 29 3b 72 65 74 75 72 6e 20 74 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 22 20 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 5f 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 30 3d 3d 28 65 3d 65 2e 74 72 69 6d 28 29 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 35 30 30 29 72 65 74 75 72 6e 21 31 3b 69 66 28 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2e 69 6e 64 65 78 4f 66 28 75 29 3e 30 29 72 65 74 75 72 6e 21 31 3b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 22 2e 73 76 67 22 29 3e 3d 30 7c 7c 65 2e 69 6e 64 65 78 Data Ascii: h);return t&&decodeURIComponent(t[1].replace(/\+/g," "))}function N(e){_&&console.log(e)}function A(e){if(!e)return!1;if(0==(e=e.trim()).length)return!1;if(e.length>500)return!1;if((e=e.toLowerCase()).indexOf(u)>0)return!1;if(e.indexOf(".svg")>=0\|\|e.index
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 22 2c 6f 29 3b 69 66 28 61 3e 30 29 7b 76 61 72 20 69 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6f 29 3b 69 66 28 69 3e 30 29 7b 76 61 72 20 73 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 61 2b 31 2c 69 29 3b 69 66 28 28 73 2e 73 74 61 72 74 73 57 69 74 68 28 22 27 22 29 7c 7c 73 2e 73 74 61 72 74 73 57 69 74 68 28 27 22 27 29 29 26 26 28 73 3d 73 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 2c 28 73 2e 65 6e 64 73 57 69 74 68 28 22 27 22 29 7c 7c 73 2e 65 6e 64 73 57 69 74 68 28 27 22 27 29 29 26 26 28 73 3d 73 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 73 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 41 28 73 29 29 7b 76 61 72 20 6c 3d 49 28 73 29 3b 69 66 28 6c 26 26 6c 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3e 30 26 26 73 21 3d 6c 29 72 65 74 75 72 6e 20 6c 3d 22 27 Data Ascii: ",o);if(a>0){var i=n.indexOf(")",o);if(i>0){var s=e.substring(a+1,i);if((s.startsWith("'")\|\|s.startsWith('"'))&&(s=s.substring(1)),(s.endsWith("'")\|\|s.endsWith('"'))&&(s=s.substring(0,s.length-1)),A(s)){var l=I(s);if(l&&l.trim().length>0&&s!=l)return l="'
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 4e 28 22 43 68 65 63 6b 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 74 79 6c 65 5d 3d 3d 3e 22 2b 69 29 2c 28 75 3d 4c 28 69 29 29 26 26 75 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3e 30 26 26 69 21 3d 75 26 26 28 5f 26 26 4e 28 22 43 68 61 6e 67 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 74 79 6c 65 5d 3d 3d 3e 22 2b 75 29 2c 6e 5b 73 5d 2e 6e 6f 64 65 56 61 6c 75 65 3d 75 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 62 65 5f 6d 61 72 76 65 6c 22 2c 22 31 22 29 29 7d 65 6c 73 65 20 69 66 28 22 73 72 63 73 65 74 22 3d 3d 6c 29 7b 76 61 72 20 63 3b 61 3d 6e 5b 73 5d 2e 6e 6f 64 65 56 61 6c 75 65 3b 5f 26 26 4e 28 22 43 68 65 63 6b 69 6e 67 5b 6e 6f 64 65 2c 22 2b 74 2b 22 2c 73 72 63 73 65 74 5d 3d 3d 3e 22 2b 61 29 2c 28 63 3d 4f 28 61 29 Data Ascii: N("Checking[node,"+t+",style]==>"+i),(u=L(i))&&u.trim().length>0&&i!=u&&(_&&N("Changing[node,"+t+",style]==>"+u),n[s].nodeValue=u,e.setAttribute("be_marvel","1"))}else if("srcset"==l){var c;a=n[s].nodeValue;_&&N("Checking[node,"+t+",srcset]==>"+a),(c=O(a)
2024-11-01 12:57:48 UTC	1685	IN	Data Raw: 65 5f 6d 61 72 76 65 6c 22 29 29 26 26 22 31 22 3d 3d 6e 7c 7c 53 28 74 2e 74 61 72 67 65 74 2c 74 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 29 29 29 7d 76 61 72 20 44 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 65 2c 55 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 78 3d 44 7c 7c 55 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 2c 50 3d 74 26 26 21 74 2e 6e 6f 64 65 54 79 70 65 26 26 74 2c 77 3d 50 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 26 26 21 6e 2e 6e 6f 64 65 54 79 70 65 26 26 6e Data Ascii: e_marvel"))&&"1"==n\|\|S(t.target,t.attributeName)))}var D="object"==typeof e&&e&&e.Object===Object&&e,U="object"==typeof self&&self&&self.Object===Object&&self,x=D\|\|U\|\|Function("return this")(),P=t&&!t.nodeType&&t,w=P&&"object"==typeof n&&n&&!n.nodeType&&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	60213	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-01 12:57:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=100131 Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-01 12:57:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.7	60219	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5cde4d2e-001e-0046-6764-2ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125748Z-159b85dff8fk99t5hC1DFWepmn00000001a00000000065dw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:48 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.7	60231	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 80f47f15-d01e-0049-6b08-2ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125748Z-16ccfc498979lfwnhC1DFW56w800000000t00000000056t8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:48 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.7	60230	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:48 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 74985455-e01e-00aa-1aa3-2aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125748Z-176bd8f9bc59g2s2hC1DFWby1800000000ng00000000eg6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:48 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.7	60229	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:48 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:48 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1a876f58-701e-0032-1608-2ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125748Z-16ccfc498974hjqwhC1DFW7uyn00000000m0000000003ewg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:48 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	60232	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:48 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f60b378e-801e-0078-1b44-2cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-16ccfc498976vdjnhC1DFW5ann00000000ng00000000bvuc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	60238	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8eb92b9a-301e-001f-0330-2caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-16dc884887b4tt9chC1DFWrg2c00000000g00000000033r8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	60242	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 31f1d278-901e-0083-7b79-2bbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-159b85dff8f97jn9hC1DFW19vg00000001ag000000002g27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	60241	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1446e3c8-201e-0033-0a43-2cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-16ccfc49897z67z2hC1DFW6cd800000000p00000000042xn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.7	60240	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: dbe51632-e01e-000c-1608-2c8e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-16ccfc49897rwhbvhC1DFWx88g00000000d00000000032br x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.7	60243	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:49 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 13a59a53-101e-0046-5b08-2c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125749Z-16ccfc498978mvxwhC1DFWafzn00000000m000000000qbye x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:49 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	60250	35.244.153.179	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	950	OUT	GET /api/ixf/1.0.0/get_capsule/f00000000094873/1850664187?client=js_sdk&client_version=1.4.5&orig_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&base_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36 HTTP/1.1 Host: ixfd-api.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:41 GMT Content-Type: application/json Content-Length: 17315 Cache-Control: public, max-age=3600 Server: bws/1.0 x-be-pop: DSM-1-203 Access-Control-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 7b 0a 20 20 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 20 22 66 30 30 30 30 30 30 30 30 30 39 34 38 37 33 22 2c 20 0a 20 20 22 64 61 74 65 5f 70 75 62 6c 69 73 68 65 64 22 3a 20 31 36 39 33 33 37 36 38 38 35 33 34 35 2c 20 0a 20 20 22 6b 65 79 22 3a 20 22 31 38 35 30 36 36 34 31 38 37 22 2c 20 0a 20 20 22 69 73 5f 75 6e 69 76 65 72 73 61 6c 5f 63 61 70 73 75 6c 65 5f 65 6e 61 62 6c 65 64 22 3a 20 22 74 72 75 65 22 2c 20 0a 20 20 22 63 61 70 73 75 6c 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 2e 30 2e 30 22 2c 20 0a 20 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 2e 30 2e 30 22 2c 20 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 32 2c 20 0a 20 20 22 64 61 74 65 5f 63 72 65 61 74 65 64 22 3a 20 31 36 39 33 33 37 36 38 38 35 33 34 35 2c Data Ascii: { "account_id": "f00000000094873", "date_published": 1693376885345, "key": "1850664187", "is_universal_capsule_enabled": "true", "capsule_version": "1.0.0.0", "engine_version": "1.0.0.0", "version": 2, "date_created": 1693376885345,
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 65 66 61 75 6c 74 3a 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 65 5f 6c 61 62 65 6c 20 3d 20 27 52 65 6c 61 74 65 64 20 4c 69 6e 6b 73 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 62 65 2d 69 78 2d 6c 69 6e 6b 2d 62 6c 6f 63 6b 27 29 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 65 2d 6c 61 62 65 6c 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 62 65 5f 6c 61 62 65 6c 3b 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 7d 5c 6e 20 5c 6e 20 20 20 20 6a 73 45 6c 65 6d 65 6e 74 52 65 61 64 79 28 27 2e 62 65 2d 69 78 2d 6c 69 6e 6b 2d 62 6c 6f 63 6b 27 Data Ascii: efault:\n var be_label = 'Related Links';\n }\n \n document.getElementsByClassName('be-ix-link-block')[0].querySelector('.be-label').innerHTML = be_label;\n \n }\n }\n \n jsElementReady('.be-ix-link-block'
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 3a 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 65 5f 6c 61 62 65 6c 20 3d 20 27 52 65 6c 61 74 65 64 20 4c 69 6e 6b 73 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 27 62 65 2d 69 78 2d 6c 69 6e 6b 2d 62 6c 6f 63 6b 27 29 5b 30 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 62 65 2d 6c 61 62 65 6c 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 62 65 5f 6c 61 62 65 6c 3b 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 7d 5c 6e 20 5c 6e 20 20 20 20 6a 73 45 Data Ascii: break;\n default:\n var be_label = 'Related Links';\n }\n \n document.getElementsByClassName('be-ix-link-block')[0].querySelector('.be-label').innerHTML = be_label;\n \n }\n }\n \n jsE
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 74 69 6e 75 65 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 76 61 72 20 65 6c 65 6d 65 6e 74 20 3d 20 65 6c 65 6d 65 6e 74 73 5b 69 5d 3b 5c 6e 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6a 20 3d 20 30 3b 20 6a 20 3c 20 72 65 61 64 79 53 65 74 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 69 66 20 28 72 65 61 64 79 53 65 74 5b 6a 5d 20 3d 3d 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 7c 7c 20 72 65 61 64 79 53 65 74 5b 6a 5d 20 3d 3d 20 65 6c 65 6d 65 6e 74 2e 69 64 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 69 66 20 28 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 29 20 7b 5c 6e 20 20 20 20 Data Ascii: tinue;\n }\n var element = elements[i];\n for (var j = 0; j < readySet.length; j++) {\n if (readySet[j] == element.className \|\| readySet[j] == element.id) {\n return;\n }\n }\n if (element.className) {\n
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 61 64 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 73 65 6c 65 63 74 6f 72 2c 20 66 6e 2c 20 69 6e 64 65 78 5f 6c 69 73 74 29 20 7b 5c 6e 20 20 69 66 20 28 69 6e 64 65 78 5f 6c 69 73 74 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 5c 6e 20 20 20 20 69 6e 64 65 78 5f 6c 69 73 74 20 3d 20 5b 5d 3b 5c 6e 20 20 20 20 69 6e 64 65 78 5f 6c 69 73 74 2e 70 75 73 68 28 30 29 3b 5c 6e 20 20 7d 5c 6e 5c 6e 20 20 69 66 20 28 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 21 3d 20 6e 75 6c 6c 29 20 7b 5c 6e 20 20 20 20 69 66 20 28 21 6f 62 73 65 72 76 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 6f 62 73 65 72 76 65 72 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 63 68 65 63 6b 4c 69 73 74 65 6e 65 72 73 29 3b 5c 6e 20 20 20 20 20 20 6f 62 73 Data Ascii: ady = function(selector, fn, index_list) {\n if (index_list === undefined) {\n index_list = [];\n index_list.push(0);\n }\n\n if (MutationObserver != null) {\n if (!observer) {\n observer = new MutationObserver(checkListeners);\n obs
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 63 6b 47 65 6e 65 72 61 74 6f 72 2c 20 24 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 5c 6e 20 20 20 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 4d 41 58 49 4d 55 4d 5f 48 45 41 44 4c 49 4e 45 5f 4c 45 4e 47 54 48 20 3d 20 31 30 30 3b 5c 6e 20 20 20 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 4d 41 58 49 4d 55 4d 5f 44 45 53 43 5f 4c 45 4e 47 54 48 20 3d 20 32 30 30 3b 5c 6e 5c 6e 20 20 20 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 49 4e 44 5f 4c 49 4e 4b 5f 42 4c 4f 43 4b 5f 54 59 50 45 5f 55 52 4c 5f 54 59 50 45 20 3d 20 30 3b 5c 6e 20 20 20 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 49 4e 44 5f 4c 49 4e 4b 5f 42 4c 4f 43 4b 5f 54 59 50 45 5f 48 45 41 44 4c 49 4e 45 Data Ascii: ckGenerator, $, undefined) {\n BELinkBlockGenerator.MAXIMUM_HEADLINE_LENGTH = 100;\n BELinkBlockGenerator.MAXIMUM_DESC_LENGTH = 200;\n\n BELinkBlockGenerator.IND_LINK_BLOCK_TYPE_URL_TYPE = 0;\n BELinkBlockGenerator.IND_LINK_BLOCK_TYPE_HEADLINE
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 5f 61 74 74 72 69 62 75 74 65 5f 6b 65 79 20 69 6e 20 6c 69 6e 6b 5f 61 74 74 72 69 62 75 74 65 5f 64 69 63 74 69 6f 6e 61 72 79 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 6b 5f 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6c 69 6e 6b 5f 61 74 74 72 69 62 75 74 65 5f 6b 65 79 2c 20 6c 69 6e 6b 5f 61 74 74 72 69 62 75 74 65 5f 64 69 63 74 69 6f 6e 61 72 79 5b 6c 69 6e 6b 5f 61 74 74 72 69 62 75 74 65 5f 6b 65 79 5d 29 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 76 61 72 20 61 64 64 65 64 5f 73 6f 6d 65 74 68 69 6e 67 20 3d 20 66 61 6c 73 65 3b 5c 6e 20 20 20 20 20 20 69 66 20 28 61 6c 6c 6f 77 61 62 6c 65 5f 65 6c 65 6d 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e Data Ascii: _attribute_key in link_attribute_dictionary) {\n link_level_element.setAttribute(link_attribute_key, link_attribute_dictionary[link_attribute_key]);\n }\n\n var added_something = false;\n if (allowable_elements.indexOf(BELinkBlockGen
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 6d 65 74 68 69 6e 67 20 3d 20 74 72 75 65 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 69 66 20 28 61 6c 6c 6f 77 61 62 6c 65 5f 65 6c 65 6d 65 6e 74 73 2e 69 6e 64 65 78 4f 66 28 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 49 4e 44 5f 4c 49 4e 4b 5f 42 4c 4f 43 4b 5f 54 59 50 45 5f 49 4d 41 47 45 5f 54 59 50 45 29 3e 3d 30 20 26 26 20 6c 69 6e 6b 2e 69 6d 61 67 65 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 6b 5f 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 20 6c 69 6e 6b 2e 69 6d 61 67 65 29 3b 5c 6e 20 20 20 20 20 20 20 20 61 64 64 65 64 5f 73 6f 6d 65 74 68 69 6e 67 20 3d 20 74 72 75 65 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 2f 2a 2a 5c 6e 20 20 20 20 64 6f 6e 27 74 20 Data Ascii: mething = true;\n }\n if (allowable_elements.indexOf(BELinkBlockGenerator.IND_LINK_BLOCK_TYPE_IMAGE_TYPE)>=0 && link.image) {\n link_level_element.setAttribute('src', link.image);\n added_something = true;\n }\n/**\n don't
2024-11-01 12:57:50 UTC	1022	IN	Data Raw: 20 20 76 61 72 20 6c 65 76 65 6c 5f 64 65 66 69 6e 69 74 69 6f 6e 20 3d 20 6f 76 65 72 61 6c 6c 53 74 72 75 63 74 75 72 65 5b 69 5d 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 5f 74 61 67 20 3d 20 6c 65 76 65 6c 5f 64 65 66 69 6e 69 74 69 6f 6e 5b 30 5d 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 5f 74 61 67 29 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 61 74 74 72 69 62 75 74 65 5f 64 69 63 74 69 6f 6e 61 72 79 20 3d 20 6c 65 76 65 6c 5f 64 65 66 69 6e 69 74 69 6f 6e 5b 31 5d 3b 5c 6e 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 61 74 74 72 69 62 75 74 65 5f 6b 65 79 20 69 6e Data Ascii: var level_definition = overallStructure[i];\n var level_element_tag = level_definition[0];\n var level_element = document.createElement(level_element_tag);\n var attribute_dictionary = level_definition[1];\n for (var attribute_key in
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 74 6c 65 5f 74 65 78 74 5f 6e 6f 64 65 29 3b 5c 6e 5c 6e 5c 6e 20 20 20 20 20 20 20 20 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 69 74 6c 65 5f 65 6c 65 6d 65 6e 74 29 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 2f 2a 20 6c 61 73 74 20 6c 65 76 65 6c 20 70 6c 61 63 65 20 6c 69 6e 6b 73 20 2a 2f 5c 6e 20 20 20 20 20 20 69 66 20 28 69 20 3d 3d 20 6f 76 65 72 61 6c 6c 53 74 72 75 63 74 75 72 65 2e 6c 65 6e 67 74 68 2d 31 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6c 69 6e 6b 5f 69 3d 30 3b 20 6c 69 6e 6b 5f 69 20 3c 20 6c 69 6e 6b 73 2e 6c 65 6e 67 74 68 3b 20 6c 69 6e 6b 5f 69 2b 2b 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 20 3d 20 6c 69 6e 6b 73 5b 6c Data Ascii: tle_text_node);\n\n\n level_element.appendChild(title_element);\n }\n\n /* last level place links */\n if (i == overallStructure.length-1) {\n for (var link_i=0; link_i < links.length; link_i++) {\n var link = links[l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	60257	151.101.65.229	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	575	OUT	GET /npm/es6-object-assign@1.1.0/dist/object-assign-auto.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	772	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1058 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.1.0 X-JSD-Version-Type: version ETag: W/"422-N+5NBYb4CVFzB5/O4mpxF8lbAfw" Accept-Ranges: bytes Date: Fri, 01 Nov 2024 12:57:50 GMT Age: 840718 X-Served-By: cache-fra-eddf8230024-FRA, cache-dfw-kdal2120125-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-01 12:57:50 UTC	1058	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 75 2c 66 29 7b 69 66 28 21 74 5b 75 5d 29 7b 69 66 28 21 65 5b 75 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 75 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 75 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 75 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 6c 3d 74 5b 75 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 75 5d 5b 30 5d 2e 63 61 Data Ascii: !function r(e,t,n){function o(u,f){if(!t[u]){if(!e[u]){var c="function"==typeof require&&require;if(!f&&c)return c(u,!0);if(i)return i(u,!0);var a=new Error("Cannot find module '"+u+"'");throw a.code="MODULE_NOT_FOUND",a}var l=t[u]={exports:{}};e[u][0].ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	60258	151.101.65.229	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	573	OUT	GET /npm/jquery-validation@1.17.0/dist/jquery.validate.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23261 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.17.0 X-JSD-Version-Type: version ETag: W/"5add-anbkx9tHkFM1BYBGmqAQ/r/crNA" Accept-Ranges: bytes Date: Fri, 01 Nov 2024 12:57:50 GMT Age: 204539 X-Served-By: cache-fra-eddf8230098-FRA, cache-dfw-kdal2120030-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 37 2e 30 20 2d 20 37 2f 32 39 2f 32 30 31 37 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 Data Ascii: /! jQuery Validation Plugin - v1.17.0 - 7/29/2017 https://jqueryvalidation.org/ * Copyright (c) 2017 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?modu
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 61 28 74 68 69 73 5b 30 5d 29 2e 69 73 28 22 66 6f 72 6d 22 29 3f 62 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 28 29 2e 66 6f 72 6d 28 29 3a 28 64 3d 5b 5d 2c 62 3d 21 30 2c 63 3d 61 28 74 68 69 73 5b 30 5d 2e 66 6f 72 6d 29 2e 76 61 6c 69 64 61 74 65 28 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 3d 63 2e 65 6c 65 6d 65 6e 74 28 74 68 69 73 29 26 26 62 2c 62 7c 7c 28 64 3d 64 2e 63 6f 6e 63 61 74 28 63 2e 65 72 72 6f 72 4c 69 73 74 29 29 7d 29 2c 63 2e 65 72 72 6f 72 4c 69 73 74 3d 64 29 2c 62 7d 2c 72 75 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3d 74 68 69 73 5b 30 5d 3b 69 66 28 6e 75 6c 6c 21 3d 6a 26 26 28 21 6a 2e 66 6f 72 6d 26 26 6a 2e 68 61 73 41 74 74 72 Data Ascii: a(this[0]).is("form")?b=this.validate().form():(d=[],b=!0,c=a(this[0].form).validate(),this.each(function(){b=c.element(this)&&b,b\|\|(d=d.concat(c.errorList))}),c.errorList=d),b},rules:function(b,c){var d,e,f,g,h,i,j=this[0];if(null!=j&&(!j.form&&j.hasAttr
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 63 2e 75 6e 73 68 69 66 74 28 62 29 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3a 76 6f 69 64 20 30 3d 3d 3d 63 3f 62 3a 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 2e 73 6c 69 63 65 28 31 29 29 2c 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 5b 63 5d 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f Data Ascii: 1===arguments.length?function(){var c=a.makeArray(arguments);return c.unshift(b),a.validator.format.apply(this,c)}:void 0===c?b:(arguments.length>2&&c.constructor!==Array&&(c=a.makeArray(arguments).slice(1)),c.constructor!==Array&&(c=[c]),a.each(c,functio
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 65 43 6c 61 73 73 28 64 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 62 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 62 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 2e 61 64 64 43 6c 61 73 73 28 64 29 3a 61 28 62 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 2e 61 64 64 43 6c 61 73 73 28 64 29 7d 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 65 78 74 65 6e 64 28 61 2e 76 61 6c 69 64 61 74 6f 72 2e 64 65 66 61 75 6c 74 73 2c 62 29 7d 2c 6d 65 73 73 61 67 65 73 3a 7b 72 65 71 75 69 72 65 64 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 72 65 6d 6f 74 65 3a 22 50 6c 65 Data Ascii: eClass(d)},unhighlight:function(b,c,d){"radio"===b.type?this.findByName(b.name).removeClass(c).addClass(d):a(b).removeClass(c).addClass(d)}},setDefaults:function(b){a.extend(a.validator.defaults,b)},messages:{required:"This field is required.",remote:"Ple
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 62 29 7d 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 3d 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 7c 7c 61 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 Data Ascii: b)}this.labelContainer=a(this.settings.errorLabelContainer),this.errorContext=this.labelContainer.length&&this.labelContainer\|\|a(this.currentForm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},thi
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 61 6c 69 64 28 29 7d 2c 63 68 65 63 6b 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 70 61 72 65 46 6f 72 6d 28 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 62 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 28 29 3b 62 5b 61 5d 3b 61 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 62 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 63 6c 65 61 6e 28 62 29 2c 66 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 65 29 2c 67 3d 74 68 69 73 2c 68 3d 21 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 66 3f 64 65 6c 65 74 Data Ascii: alid()},checkForm:function(){this.prepareForm();for(var a=0,b=this.currentElements=this.elements();b[a];a++)this.check(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delet
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 69 67 68 74 29 66 6f 72 28 62 3d 30 3b 61 5b 62 5d 3b 62 2b 2b 29 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 6e 68 69 67 68 6c 69 67 68 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 5b 62 5d 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2c 22 22 29 2c 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 5b 62 5d 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 3b 65 6c 73 65 20 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 7d 2c 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 Data Ascii: ight)for(b=0;a[b];b++)this.settings.unhighlight.call(this,a[b],this.settings.errorClass,""),this.findByName(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvali
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 2c 21 28 64 20 69 6e 20 63 7c 7c 21 62 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 61 28 74 68 69 73 29 2e 72 75 6c 65 73 28 29 29 29 26 26 28 63 5b 64 5d 3d 21 30 2c 21 30 29 7d 29 7d 2c 63 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 5b 30 5d 7d 2c 65 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2e 22 2b 62 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 29 7d 2c 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 Data Ascii: ,!(d in c\|\|!b.objectLength(a(this).rules()))&&(c[d]=!0,!0)})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetInternals:function(){t
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 68 6f 75 6c 64 20 72 65 74 75 72 6e 20 61 20 73 74 72 69 6e 67 20 76 61 6c 75 65 2e 22 29 3b 64 65 6c 65 74 65 20 67 2e 6e 6f 72 6d 61 6c 69 7a 65 72 7d 66 6f 72 28 64 20 69 6e 20 67 29 7b 65 3d 7b 6d 65 74 68 6f 64 3a 64 2c 70 61 72 61 6d 65 74 65 72 73 3a 67 5b 64 5d 7d 3b 74 72 79 7b 69 66 28 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 64 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2c 62 2c 65 2e 70 61 72 61 6d 65 74 65 72 73 29 2c 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 63 26 26 31 3d 3d 3d 68 29 7b 69 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 69 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 74 6f 48 69 Data Ascii: hould return a string value.");delete g.normalizer}for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHi
2024-11-01 12:57:50 UTC	1378	IN	Data Raw: 65 73 74 28 64 29 26 26 28 64 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 64 2e 72 65 70 6c 61 63 65 28 65 2c 22 7b 24 31 7d 22 29 2c 63 2e 70 61 72 61 6d 65 74 65 72 73 29 29 2c 64 7d 2c 66 6f 72 6d 61 74 41 6e 64 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 61 2c 62 29 3b 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 70 75 73 68 28 7b 6d 65 73 73 61 67 65 3a 63 2c 65 6c 65 6d 65 6e 74 3a 61 2c 6d 65 74 68 6f 64 3a 62 2e 6d 65 74 68 6f 64 7d 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 5b 61 2e 6e 61 6d 65 5d 3d 63 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 5b 61 2e 6e 61 6d 65 5d 3d 63 7d 2c 61 64 64 57 72 61 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: est(d)&&(d=a.validator.format(d.replace(e,"{$1}"),c.parameters)),d},formatAndAdd:function(a,b){var c=this.defaultMessage(a,b);this.errorList.push({message:c,element:a,method:b.method}),this.errorMap[a.name]=c,this.submitted[a.name]=c},addWrapper:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	60255	104.16.79.73	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:49 UTC	622	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.purolator.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:50 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8dbc0d87bcb9e7d3-DFW
2024-11-01 12:57:50 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-11-01 12:57:50 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	60259	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	569	OUT	GET /app/tracker/js/app.tracker-drupal.js?v=1729112303023 HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	558	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 102203 Connection: close Last-Modified: Thu, 17 Oct 2024 03:13:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: k_NoS7OqJGGgDmwbvN97p3W0UYBPeEuU Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 12:57:51 GMT ETag: "34dbb3704d6be5e1f2f442368e7139a9" X-Cache: RefreshHit from cloudfront Via: 1.1 e75bff6012758ccb55ff41b176b32342.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: FZ_YXBTUQrh7TeRTquIEHOzSmJZsW2aYZ_bhQXJKh0onGkJ_Fg9iBQ==
2024-11-01 12:57:50 UTC	16384	IN	Data Raw: 2f 2f 40 31 37 32 39 31 31 32 33 30 33 30 32 33 0a 76 61 72 20 64 61 74 61 4c 61 79 65 72 3d 76 6f 69 64 20 30 21 3d 3d 64 61 74 61 4c 61 79 65 72 26 26 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 61 70 70 3d 7b 74 72 61 63 6b 65 72 3a 7b 75 69 3a 7b 74 65 6d 70 6c 61 74 65 3a 7b 7d 2c 65 76 65 6e 74 3a 7b 7d 7d 2c 73 74 61 74 75 73 3a 7b 7d 2c 63 6f 6e 66 69 67 3a 7b 7d 2c 69 6e 69 74 3a 7b 7d 2c 73 65 72 76 69 63 65 3a 7b 7d 2c 75 74 69 6c 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 6d 6f 64 65 6c 3a 7b 7d 2c 6d 61 70 55 74 69 6c 3a 7b 7d 2c 71 75 65 75 65 3a 7b 73 75 6d 6d 61 72 79 3a 7b 7d 7d 2c 61 6e 61 6c 79 74 69 63 73 3a 7b 7d 2c 74 69 6d 65 72 3a 7b 61 75 74 68 65 6e 74 69 63 61 74 65 3a 7b 7d 2c 73 75 6d 6d 61 72 79 3a 7b 7d 2c 64 65 74 61 69 6c 3a 7b 7d Data Ascii: //@1729112303023var dataLayer=void 0!==dataLayer&&dataLayer\|\|[],app={tracker:{ui:{template:{},event:{}},status:{},config:{},init:{},service:{},util:{},data:{},model:{},mapUtil:{},queue:{summary:{}},analytics:{},timer:{authenticate:{},summary:{},detail:{}
2024-11-01 12:57:50 UTC	16384	IN	Data Raw: 68 69 70 70 65 72 2e 63 6f 75 6e 74 72 79 43 6f 64 65 3a 22 22 29 3b 72 65 74 75 72 6e 22 22 7d 2c 67 65 74 53 68 69 70 6d 65 6e 74 44 65 73 74 69 6e 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 29 72 65 74 75 72 6e 5b 5d 3b 22 6f 62 6a 65 63 74 22 21 3d 65 26 26 28 65 3d 22 73 74 72 69 6e 67 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 3b 69 3c 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 5b 74 5d 2e 70 61 63 6b 61 67 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 Data Ascii: hipper.countryCode:"");return""},getShipmentDestination:function(a,e){if(null==app.tracker.data.shipment)return[];"object"!=e&&(e="string");for(var t=0;t<app.tracker.data.shipment.length;t++)for(var r,i=0;i<app.tracker.data.shipment[t].package.length;i++)
2024-11-01 12:57:51 UTC	16384	IN	Data Raw: 69 74 28 22 3a 22 29 5b 31 5d 2c 22 70 72 65 76 69 6f 75 73 22 29 29 7d 2c 63 62 51 75 65 72 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 69 2e 65 76 65 6e 74 2e 6d 6f 64 61 6c 28 22 23 74 72 61 63 6b 65 72 2d 6d 6f 64 61 6c 2d 6c 6f 61 64 69 6e 67 22 2c 22 68 69 64 65 22 29 2c 75 28 22 23 74 72 61 63 6b 65 72 2d 73 65 72 76 69 63 65 2d 65 72 72 6f 72 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 7d 2c 61 75 74 68 65 6e 74 69 63 61 74 65 53 75 62 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 65 2c 74 3b 6e 75 6c 6c 3d 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 61 74 74 65 6d 70 74 73 26 26 28 61 70 70 2e 74 72 61 63 6b 65 72 2e 61 74 74 65 6d 70 74 73 3d 30 29 2c 61 70 70 2e 74 72 61 Data Ascii: it(":")[1],"previous"))},cbQueryError:function(a,e){app.tracker.ui.event.modal("#tracker-modal-loading","hide"),u("#tracker-service-error").modal("show")},authenticateSubmit:function(){var a,e,t;null==app.tracker.attempts&&(app.tracker.attempts=0),app.tra
2024-11-01 12:57:51 UTC	16384	IN	Data Raw: 6c 65 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 65 6e 5c 2f 2f 69 2c 22 2f 66 72 2f 22 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 66 72 5c 2f 2f 2c 22 2f 65 6e 2f 22 29 3b 75 28 22 23 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 41 6e 63 68 6f 72 22 29 2e 61 74 74 72 28 22 68 72 65 66 22 2c 61 29 7d 2c 6d 73 69 65 76 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 30 3c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 54 72 69 64 65 6e 74 2e 2a 72 Data Ascii: le?window.location.href.replace(/\/en\//i,"/fr/"):window.location.href.replace(/\/fr\//,"/en/");u("#changeLanguageAnchor").attr("href",a)},msieversion:function(){return!!(0<window.navigator.userAgent.indexOf("MSIE ")\|\|navigator.userAgent.match(/Trident.*r
2024-11-01 12:57:51 UTC	16384	IN	Data Raw: 2e 75 74 69 6c 2e 67 65 74 4c 61 62 65 6c 28 22 73 65 61 72 63 68 2e 66 72 65 69 67 68 74 2e 75 72 6c 22 29 2b 27 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 22 3e 3c 2f 69 3e 20 27 2b 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 74 69 6c 2e 67 65 74 4c 61 62 65 6c 28 22 73 65 61 72 63 68 2e 66 72 65 69 67 68 74 2e 6c 61 62 65 6c 22 29 2b 22 3c 2f 61 3e 22 7d 2c 62 75 69 6c 64 54 72 61 63 6b 4c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 27 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 20 62 74 6e 2d 62 6c 6f 63 6b 20 74 72 61 63 6b 65 72 2d Data Ascii: .util.getLabel("search.freight.url")+'" target="_blank"><i class="fa fa-chevron-right"></i> '+app.tracker.util.getLabel("search.freight.label")+"</a>"},buildTrackLink:function(a){return'<button type="button" class="btn btn-outline-light btn-block tracker-
2024-11-01 12:57:51 UTC	16384	IN	Data Raw: 27 2b 72 5b 64 5d 2e 70 69 6e 2b 27 22 20 64 61 74 61 2d 64 61 74 65 3d 22 27 2b 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 53 68 69 70 6d 65 6e 74 44 61 74 65 28 72 5b 64 5d 2e 70 69 6e 29 2b 27 22 3e 27 29 2b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 68 69 70 6d 65 6e 74 20 27 2b 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 61 63 6b 61 67 65 4c 69 66 65 43 79 63 6c 65 53 74 61 74 75 73 42 79 50 69 6e 28 72 5b 64 5d 2e 70 69 6e 29 2b 27 22 3e 27 29 2b 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 69 2e 74 65 6d 70 6c 61 74 65 2e 63 6f 6d 6d 6f 6e 2e 62 75 69 6c 64 53 68 69 70 6d 65 6e 74 54 69 74 6c 65 28 72 5b 64 5d 2e 70 69 6e 2c 63 29 2c 21 30 21 3d 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 63 6f 6e 66 69 67 2e 73 74 61 Data Ascii: '+r[d].pin+'" data-date="'+app.tracker.model.getShipmentDate(r[d].pin)+'">')+'<div class="shipment '+app.tracker.model.getPackageLifeCycleStatusByPin(r[d].pin)+'">')+app.tracker.ui.template.common.buildShipmentTitle(r[d].pin,c),!0!==app.tracker.config.sta
2024-11-01 12:57:51 UTC	3899	IN	Data Raw: 2f 61 3e 22 29 2b 22 3c 2f 64 69 76 3e 22 2b 22 3c 2f 64 69 76 3e 22 2b 22 3c 2f 6c 69 3e 22 7d 2c 62 75 69 6c 64 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 69 6e 73 42 79 53 74 61 74 65 28 22 41 54 54 22 29 2c 74 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 69 6e 73 42 79 53 74 61 74 65 28 22 53 44 52 22 29 2c 72 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 69 6e 73 42 79 53 74 61 74 65 28 22 50 4f 50 22 29 2c 69 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 69 6e 73 42 79 53 74 61 74 65 28 22 49 4e 54 22 29 2c 6c 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 6d 6f 64 65 6c 2e 67 65 74 50 69 6e Data Ascii: /a>")+"</div>"+"</div>"+"</li>"},buildFilter:function(a){var e=app.tracker.model.getPinsByState("ATT"),t=app.tracker.model.getPinsByState("SDR"),r=app.tracker.model.getPinsByState("POP"),i=app.tracker.model.getPinsByState("INT"),l=app.tracker.model.getPin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	60256	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	671	OUT	GET /f00000000094873/www.purolator.com/modules/custom/purolator_widgets/img/liveChat-open.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	827	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 690 Connection: close x-amz-id-2: cQj79P0ioHjT/nBRfO2OC/KVgqXhXfi7TAznWFEVJiBFEv8mqHUGwbL26Bg5cVjteycEoBOBVt0= x-amz-request-id: 9YFF5GEZ3TVB597M Date: Fri, 01 Nov 2024 12:57:49 GMT Last-Modified: Fri, 07 Jun 2024 23:16:54 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "9cc01f73df36d5664a4bb1113efb559b" x-amz-server-side-encryption: AES256 x-amz-version-id: GihKY.DL802q.K2ABQa5BnLR9AzKu7U1 Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 0f34c0d3b0e50b8875bcbb7d41684a58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: W8uAKdWBWUuqv8-n_2scvccfWNBCIgQilR5Q_jODegljTHEmPhFIEQ== Age: 2
2024-11-01 12:57:50 UTC	690	IN	Data Raw: 52 49 46 46 aa 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 21 00 00 21 00 00 41 4c 50 48 cb 00 00 00 01 80 62 db da b2 e5 fe 3e 05 4d ee b8 4c 82 9f f6 db 38 70 6d de 3c 52 5d 93 bb 4b 74 f8 32 d6 48 a4 df ed 79 9e 0f 06 10 11 13 00 55 9a fb 97 97 97 b8 57 e6 22 00 ac 0f 59 d9 4e 60 30 2b fc 63 c7 8a 54 b6 59 05 4d 58 56 cd fb da 3a 79 f5 24 43 58 02 63 43 8a b0 c8 51 47 d9 71 7a c8 8e 38 45 b2 dc 7d 47 57 37 b5 7d 36 4d 98 07 63 38 45 58 e0 a8 a6 dc 24 92 95 26 e2 f1 78 3c 3a 90 26 48 96 bb 88 b4 56 d8 b2 c9 b3 80 8a c7 fe ca eb c8 d8 78 d9 b1 a1 3b 1e c9 ff a1 59 ee d7 29 37 a1 29 f3 7d 7d cb 7a 77 d8 a6 43 29 a5 da 60 64 35 a1 b8 48 09 40 74 39 9b 55 02 90 52 fc 10 de 7a f7 43 7a ac 1e e2 26 88 03 00 56 50 38 20 b8 01 00 00 f0 0c 00 9d 01 Data Ascii: RIFFWEBPVP8X!!ALPHb>ML8pm<R]Kt2HyUW"YN`0+cTYMXV:y$CXcCQGqz8E}GW7}6Mc8EX$&x<:&HVx;Y)7)}}zwC)`d5H@t9URzCz&VP8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	60260	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	667	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-login.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:50 UTC	839	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 750 Connection: close x-amz-id-2: EsZ5h2gg/iATgDQHIyHdSgoI0NuXBvM7jm7UWuqMtf++lthppb6jukHTeT0dtcZLMIGcHcZvk/6BpyqIcsHBJg== x-amz-request-id: E3Q2PP2FJGZCMKZM Date: Fri, 01 Nov 2024 12:57:50 GMT Last-Modified: Fri, 07 Jun 2024 20:55:37 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "1f793f7cf7877bce5566cb5446093efc" x-amz-server-side-encryption: AES256 x-amz-version-id: CBvlM_x.vZB0YeR9KXjmKOSJQ0fEtozV Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 4cc2a0a7eb7d5483edc69be298297f9e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: -6u82olEkQNGDUEVQlaEmPp50A5dhwQMxhXHozG9Kj7-oAzOXO8meA== Age: 1
2024-11-01 12:57:50 UTC	750	IN	Data Raw: 52 49 46 46 e6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1e 00 00 1f 00 00 41 4c 50 48 ac 00 00 00 01 70 5d db 56 13 dd 89 df 14 c6 7c 4b 39 58 42 ee c2 2e 52 2b 80 16 30 d9 ac 5c 2b 88 08 06 6e db 36 92 ba 7b fb 92 4f e0 30 6f 32 aa cd f3 69 ea 48 de 3c 10 da f5 1b b6 5a ec a1 4c bf a3 51 9b 5c f2 de c3 fc b2 51 8b de cb 62 5d 92 de d3 74 49 d0 7b 1b 00 80 b0 fe 58 01 40 f7 84 1a b8 3b 06 77 87 ec 29 25 62 8e 04 25 47 05 c7 e1 f0 e2 78 d1 f0 93 8a 3c 84 bf 90 e4 78 e0 de 71 3f 93 0d 05 32 90 9c 20 c3 50 61 61 ea 1d c4 74 0a 1c 95 40 00 d4 ee c5 ac da 4d de b0 db a2 0b 85 57 ea c7 8d 7d bf 6d 13 cb 3b 0e 13 56 50 38 20 14 02 00 00 10 0e 00 9d 01 2a 1f 00 20 00 3e 31 16 89 43 a2 21 21 14 04 00 20 03 04 b6 00 4e 99 42 38 1b ca 3f 06 3f 66 7f Data Ascii: RIFFWEBPVP8XALPHp]V\|K9XB.R+0\+n6{O0o2iH<ZLQ\Qb]tI{X@;w)%b%Gx<xq?2 Paat@MW}m;VP8 * >1C!! NB8??f

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	60269	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:50 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 445643c3-401e-0078-193e-2c4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125750Z-16ccfc49897b872mhC1DFWqtb000000000g0000000009snm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:50 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	60263	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	731	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-trakcer-banner-image-pod.jpg?itok=dp8fmKbM HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	822	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 21456 Connection: close x-amz-id-2: L2wBKyE2axxE5E1nHLPMgVv9N3mf4BJMYmRc28HLQSBAXcBbHsJS0ws2imFJSTOSkL66tHZ98R0= x-amz-request-id: KDJT6YWC6FKQHJ7W Date: Fri, 01 Nov 2024 12:57:51 GMT Last-Modified: Thu, 11 Jul 2024 17:40:44 GMT x-amz-expiration: expiry-date="Sat, 03 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "2890df73b0f01dddc038cd69968b7133" x-amz-server-side-encryption: AES256 x-amz-version-id: LSWiscZgQd3sGpdaPVssHONzKe8zmBAL Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 2b298af2bb6f21ab0dee9e764d8bcb28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: Kv90m0rW9YGBa9Ju9V7Soa_m3d47D2NkJJv5kGI8gy38ZDEQcfvD3w==
2024-11-01 12:57:51 UTC	8459	IN	Data Raw: 52 49 46 46 c8 53 00 00 57 45 42 50 56 50 38 20 bc 53 00 00 30 35 02 9d 01 2a 35 03 ec 04 3e 6d 32 96 49 24 22 a2 a1 22 d0 b9 78 80 0d 89 67 6e fb e8 bb bb f4 02 35 90 4d c8 a3 40 27 9c c7 3a 78 25 5f 99 fe 6f fc b7 ee b7 f6 df 7f ee 33 ee 2b c8 df 75 fd 2b fd c7 e7 d3 fc 7e 5d f6 4f eb df a9 af 9a 7e a7 fe eb fb 37 f8 2f dd 3f a0 1f f4 fd 72 ff 52 ff 4b ff 83 dc 23 f8 ef f6 8f d9 4f f5 1f 17 3f f0 7a f7 ff a3 ff 07 d4 ff fa ff f6 ff b4 9e eb 1f f2 7f 6a bf fa fc 7a fe 9d fe cf f6 cb e0 e3 f9 9f fa 8f fe fd 95 be 8d ff ba 9e ac 3f f3 7f 79 fe 2a bf 6e ff 75 3e 19 ff 66 75 57 be ed fe db be bf f1 1f ec bc 5f f3 cb ea cf 6e fe 58 2f af ef ff e2 79 97 fc e7 f0 57 f2 7f c2 7b be ed 07 f6 2f 10 bf cc 3f aa ff be f6 5a 80 16 a2 fa 05 f7 a3 d2 5f f3 3c e0 fb 5d Data Ascii: RIFFSWEBPVP8 S055>m2I$""xgn5M@':x%_o3+u+~]O~7/?rRK#O?zjz?ynu>fuW_nX/yW{/?Z_<]
2024-11-01 12:57:51 UTC	12997	IN	Data Raw: b3 cc 7d d5 2c 48 8f 8d 9c a6 07 10 32 de ed 0c 38 00 14 79 98 f2 d5 96 bd 8e da cf fc 93 8a 0a 7c d0 38 9d 91 44 64 b1 6d 3a 71 77 12 09 61 22 17 ff 65 1f 34 35 5e 86 53 c8 00 0e 0c 9b 54 00 cc ea 68 8a 5c 6a f6 4b 30 ea 01 7d 88 84 8c e8 72 e7 20 8b c0 f8 dc ff b7 0e 44 89 13 e0 c2 dc b7 50 37 51 8d e9 fc 84 84 c3 45 e1 09 8a cd b9 52 a7 54 34 a0 46 33 0a 74 cd 31 59 b7 2a 54 ea 86 94 08 c6 61 4e 99 a6 2b 36 e5 4a 9d 50 d2 81 18 cc 29 cb cd ec ca 22 6c 6d 1b 34 6d b8 48 11 97 e2 d2 52 85 78 d5 2c 62 ed 24 75 f8 df 1f ef 1d ab 82 cc dd d1 63 06 e4 d2 ff 2c e7 3c 8d 9d ba 02 50 15 8a d9 ef e7 9e b3 06 83 5c ab 9f b8 30 b3 52 1c 32 ff 9e d5 fd 7f 57 4f f8 97 7d 11 45 0f 06 f6 1d e4 ad 1c 59 d7 b6 94 1d 4e 39 ae 66 62 43 0e 00 40 d7 b4 f4 4e 76 ad 34 85 54 Data Ascii: },H28y\|8Ddm:qwa"e45^STh\jK0}r DP7QERT4F3t1Y*TaN+6JP)"lm4mHRx,b$uc,<P\0R2WO}EYN9fbC@Nv4T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	60262	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	710	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-appstore.png?itok=lSjNWKGF HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 4304 Connection: close x-amz-id-2: kqjBIeXR15iG1Lu6zoow8T7MQSUfEsw0XpCRKlVVgbaqc8nNmku+JCzOa5sBnql0stkP0h4z+ug= x-amz-request-id: KDJQ5SD32R56ARBV Date: Fri, 01 Nov 2024 12:57:51 GMT Last-Modified: Thu, 25 Jul 2024 14:05:28 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "4b1f8a29613c547c138331369d6549bd" x-amz-server-side-encryption: AES256 x-amz-version-id: d.xI.PF2f7r7G2geq4sbfu.nUJpyq4sw Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 3af85c3075e12aff72b9e148b99d6622.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: nOxhaOVIUyC3BIccG9qZUKrDkccGejB_jrPb90J5ItdznL2MhtNpLw==
2024-11-01 12:57:51 UTC	4304	IN	Data Raw: 52 49 46 46 c8 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 f9 00 00 53 00 00 41 4c 50 48 a8 00 00 00 01 70 8e 6d 5b 64 bd 08 1f 42 08 21 84 30 08 21 a4 10 42 08 21 0c c2 87 10 42 08 1f c1 ec cb bf f7 ec 27 22 26 00 67 5d c8 f4 c6 80 3b 5d e9 13 c7 1a e5 82 d4 89 68 8b a7 bc 4d 5c 8f 72 14 6d 62 bb c9 9e b7 89 ef b6 23 7d 62 bc 6c f2 c4 b9 03 c4 48 ab 40 9a 58 17 28 6d 11 13 ed d5 f3 a6 81 37 1b 78 9b f2 df 7f 7f ff fd fd f7 e9 25 12 17 9e 71 0d bc 8d 68 b4 25 14 da 3c 3c 6b 0d 80 92 16 01 38 ce 14 db c4 98 b9 1d 54 be cc e3 b0 b0 65 1e 27 87 4e 95 3a 9c 96 dc 69 d2 80 eb 3e 55 6d dc 98 6a 89 0e c7 56 50 38 20 fa 0f 00 00 d0 44 00 9d 01 2a fa 00 54 00 3e 31 16 89 43 a2 21 09 85 1e a4 10 01 82 5a 40 35 6c ab 64 9c fc 31 fc af f1 9b be af e9 3f Data Ascii: RIFFWEBPVP8XSALPHpm[dB!0!B!B'"&g];]hM\rmb#}blH@X(m7x%qh%<<k8Te'N:i>UmjVP8 D*T>1C!Z@5ld1?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	60265	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	701	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2023-08/x3_0.png?itok=eYiAfA7G HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 766 Connection: close x-amz-id-2: UPApfVr7ugsayAITIhvvK9CF1DpYAGTiO8mCtSaoDzdB2hhqQqhaJWI9tUuWzSTHZvdoLiAarJI= x-amz-request-id: KDJQ74FVGBQBCNYW Date: Fri, 01 Nov 2024 12:57:51 GMT Last-Modified: Thu, 17 Aug 2023 20:49:17 GMT x-amz-expiration: expiry-date="Sat, 08 Feb 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "809252d6a16f144c3e119781939e544f" x-amz-server-side-encryption: AES256 x-amz-version-id: day41bQyT2F6Imy9IQOwGBDVkTq3cIX1 Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 6c22fb0e883db3123ae98d8d72cdaf76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: gakf7exX63kMBaoGbKjwsEDooMKNyi6k3OkucuYP9hakDvHieSAwow==
2024-11-01 12:57:51 UTC	766	IN	Data Raw: 52 49 46 46 f6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 31 00 00 31 00 00 41 4c 50 48 85 00 00 00 01 80 62 6d db b2 e8 c1 49 9a 9d 44 74 d7 ac 89 43 66 19 24 8b 2c 83 44 22 69 26 e9 12 48 ee ee ce b8 bc 93 e7 9c 88 98 00 7c 2c d7 12 d4 70 f1 45 49 ba ff 24 79 cc e9 3f 71 8f 9f 64 ef f1 0f cc fb 27 e5 14 00 6e eb 49 fa 6e 07 a2 4f e2 65 a0 48 ed 2a 40 9b da d3 8c 25 39 ef bf 1c 2d 72 5a 64 a9 ed f9 f0 51 cb 00 a8 d0 da ab 01 48 bb 94 ee 11 bc 97 57 e9 4c 43 f8 98 19 ce 8f 29 6c 9b 31 11 fe 28 00 56 50 38 20 4a 02 00 00 30 11 00 9d 01 2a 32 00 32 00 3e 31 18 89 43 a2 21 a1 11 06 20 20 03 04 b4 80 0a f0 0e b5 3f 8b 72 52 7a 89 92 59 e4 df 8e 7a 25 bf b4 7c c0 66 33 ff 2b f9 33 ac 23 f8 ff f6 ac a2 ef d2 7f c2 7d d2 7b 14 f9 37 fc b7 f6 6f db Data Ascii: RIFFWEBPVP8X11ALPHbmIDtCf$,D"i&H\|,pEI$y?qd'nInOeH@%9-rZdQHWLC)l1(VP8 J022>1C! ?rRzYz%\|f3+3#}{7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	60264	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	710	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-facebook.png?itok=MfOAW2h7 HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 704 Connection: close x-amz-id-2: BXhYRe396qE6DDiqe9UuYRfitKb2jJDwWzAHs/ee5VqguSSutwkjKZJH83RZYCFFIKpSA+02wQw= x-amz-request-id: KDJK0H5NEV6HQJE7 Date: Fri, 01 Nov 2024 12:57:51 GMT Last-Modified: Thu, 25 Jul 2024 14:36:38 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "b1543d5dec40093b827f8568ebc0942e" x-amz-server-side-encryption: AES256 x-amz-version-id: t1X9JO90TaHkN5xBDiI2.CcpHYeZE2g_ Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 6c22fb0e883db3123ae98d8d72cdaf76.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: -zSrU19v_TDL3YTmTtlUTvWEu91ku4D9s37gptbyBWmXga9zF5oL0g==
2024-11-01 12:57:51 UTC	704	IN	Data Raw: 52 49 46 46 b8 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 97 00 00 00 01 70 24 db b6 e9 64 24 7f 00 7f fe 55 71 d3 c9 47 6c db 36 1e be 4f 9c 56 44 4c 80 eb 11 c5 14 c1 4d 89 9a 14 41 4e 69 08 f6 bb 36 a9 95 3a 83 1d 4e 2a b1 22 ba 29 90 4d 85 18 b7 30 76 13 82 d6 20 68 23 02 57 c2 5b e9 9d 94 de 66 b7 db 40 18 86 88 79 88 11 dc e6 06 b7 22 6f 42 41 92 24 29 a3 b7 91 74 0b 0e d9 ea c7 73 e3 05 f1 24 bc 0e dc e2 e6 50 29 95 4a a5 0a 7a 97 94 36 46 1c 32 bf 22 16 ff b1 42 50 21 8d e0 9e ad 6c dd 18 98 9e b9 05 cd f3 07 00 56 50 38 20 fa 01 00 00 b0 0d 00 9d 01 2a 31 00 30 00 3e 2d 12 86 42 a1 a1 0e ad 9a 00 0c 01 62 59 00 2e 83 72 df b9 6b 57 72 ff c7 2a 98 38 00 6d 80 f3 01 fa 73 fb 15 ec e9 fb 01 ee 03 ce df a8 Data Ascii: RIFFWEBPVP8X0/ALPHp$d$UqGl6OVDLMANi6:N")M0v h#W[f@y"oBA$)ts$P)Jz6F2"BP!lVP8 10>-BbY.rkWr*8ms

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.7	60272	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:50 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: bce25016-801e-0035-64b4-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125750Z-159b85dff8fdjprfhC1DFWuqh000000001tg00000000cdu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:50 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.7	60270	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:50 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:50 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 1f068f09-a01e-0021-1814-2c814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125750Z-176bd8f9bc5hwksrhC1DFWf9wg00000000ng0000000020u3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:50 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.7	60271	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:50 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:50 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 2f7198fb-501e-0064-2a08-2c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125750Z-16ccfc4989744mtmhC1DFWr0ts00000000n000000000ns7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:50 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.7	60274	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:50 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 8155ec97-d01e-0049-2f2f-2ce7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-159b85dff8fwqwmdhC1DFWy0a00000000130000000008yep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	60281	35.244.153.179	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	742	OUT	GET /api/ixf/1.0.0/get_capsule/f00000000094873/1850664187?client=js_sdk&client_version=1.4.5&orig_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&base_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker&user_agent=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F117.0.0.0%20Safari%2F537.36 HTTP/1.1 Host: ixfd-api.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	311	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:49 GMT Content-Type: application/json Content-Length: 17315 Cache-Control: public, max-age=3600 Server: bws/1.0 x-be-pop: DSM-1-204 Access-Control-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-01 12:57:51 UTC	1067	IN	Data Raw: 7b 0a 20 20 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 20 22 66 30 30 30 30 30 30 30 30 30 39 34 38 37 33 22 2c 20 0a 20 20 22 64 61 74 65 5f 70 75 62 6c 69 73 68 65 64 22 3a 20 31 36 39 33 33 37 36 38 38 35 33 34 35 2c 20 0a 20 20 22 6b 65 79 22 3a 20 22 31 38 35 30 36 36 34 31 38 37 22 2c 20 0a 20 20 22 69 73 5f 75 6e 69 76 65 72 73 61 6c 5f 63 61 70 73 75 6c 65 5f 65 6e 61 62 6c 65 64 22 3a 20 22 74 72 75 65 22 2c 20 0a 20 20 22 63 61 70 73 75 6c 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 2e 30 2e 30 22 2c 20 0a 20 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 2e 30 2e 30 22 2c 20 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 32 2c 20 0a 20 20 22 64 61 74 65 5f 63 72 65 61 74 65 64 22 3a 20 31 36 39 33 33 37 36 38 38 35 33 34 35 2c Data Ascii: { "account_id": "f00000000094873", "date_published": 1693376885345, "key": "1850664187", "is_universal_capsule_enabled": "true", "capsule_version": "1.0.0.0", "engine_version": "1.0.0.0", "version": 2, "date_created": 1693376885345,
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 69 6e 67 5c 22 3e 46 41 51 20 2d 20 52 65 63 65 69 76 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 27 61 66 74 65 72 62 65 67 69 6e 27 2c 20 73 74 72 4c 69 6e 6b 42 6c 6f 63 6b 29 3b 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 66 72 27 3a 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 65 5f 6c 61 62 65 6c 20 3d 20 27 4c 69 65 6e 73 20 Data Ascii: ing\">FAQ - Receiving</a></li></ul></div></div></div>';\n targetContainer.insertAdjacentHTML('afterbegin', strLinkBlock);\n \n switch (document.documentElement.lang) {\n case 'fr':\n var be_label = 'Liens
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 61 74 6f 72 2e 63 6f 6d 2f 65 6e 2f 73 75 70 70 6f 72 74 2f 66 61 71 73 2f 72 65 63 65 69 76 69 6e 67 5c 22 3e 46 41 51 20 2d 20 52 65 63 65 69 76 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 43 6f 6e 74 61 69 6e 65 72 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 27 61 66 74 65 72 62 65 67 69 6e 27 2c 20 73 74 72 4c 69 6e 6b 42 6c 6f 63 6b 29 3b 5c 6e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 73 77 69 74 63 68 20 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 66 72 27 3a 5c 6e 20 20 20 20 20 20 20 Data Ascii: ator.com/en/support/faqs/receiving\">FAQ - Receiving</a></li></ul></div></div></div>';\n targetContainer.insertAdjacentHTML('afterbegin', strLinkBlock);\n \n switch (document.documentElement.lang) {\n case 'fr':\n
2024-11-01 12:57:51 UTC	31	IN	Data Raw: 6f 72 29 3b 5c 6e 20 20 2f 2a 2a 5c 6e 20 20 20 20 69 73 73 75 65 73 20 6f 6e 20 49 45 20 40 Data Ascii: or);\n /**\n issues on IE @
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 64 65 73 64 2e 63 6f 6d 2f 69 74 65 6d 2f 6a 61 76 61 73 63 72 69 70 74 2d 65 73 36 2d 6e 6f 74 2d 61 2d 66 75 6e 63 74 69 6f 6e 2d 65 72 72 6f 72 2e 68 74 6d 6c 5c 6e 20 20 20 20 65 6c 65 6d 65 6e 74 73 20 3d 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 6c 65 6d 65 6e 74 73 29 3b 5c 6e 5c 6e 20 20 20 20 2a 2f 5c 6e 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 20 3d 20 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 29 20 7b 5c 6e 20 20 20 20 20 20 2f 2a 20 2d 31 20 6d 65 61 6e 73 20 61 6c 6c 20 69 6e 73 74 61 6e 63 65 73 20 2a 2f 5c 6e 20 20 20 20 20 20 69 66 20 28 69 6e 64 65 78 4c 69 73 74 20 21 3d 20 2d 31 20 26 26 20 21 28 69 20 69 6e 20 69 Data Ascii: see https://www.codesd.com/item/javascript-es6-not-a-function-error.html\n elements = Array.from(elements);\n\n /\n for (var i = 0, len = elements.length; i < len; i++) {\n / -1 means all instances */\n if (indexList != -1 && !(i in i
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 65 63 74 6f 72 5c 6e 20 2a 20 40 70 61 72 61 6d 20 73 65 6c 65 63 74 6f 72 20 73 74 72 69 6e 67 20 74 6f 20 77 61 74 63 68 20 6f 6e 5c 6e 20 2a 20 40 70 61 72 61 6d 20 66 6e 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 20 66 75 6e 63 74 69 6f 6e 5c 6e 20 2a 20 40 70 61 72 61 6d 20 69 6e 64 65 78 5f 6c 69 73 74 20 63 61 6e 20 62 65 20 75 6e 64 65 66 69 6e 65 64 20 77 68 69 63 68 20 6d 65 61 6e 73 20 6f 6e 6c 79 20 66 69 72 73 74 20 6f 6e 65 5c 6e 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 20 2d 31 20 77 68 69 63 68 20 6d 65 61 6e 73 20 61 6c 6c 5c 6e 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 72 20 61 20 6c 69 73 74 20 6f 66 20 61 6c 6c 6f 77 61 62 6c 65 20 69 6e 64 65 78 65 73 5c 6e 20 2a 2f 5c 6e 20 42 45 Data Ascii: ector\n * @param selector string to watch on\n * @param fn callback function\n * @param index_list can be undefined which means only first one\n * or -1 which means all\n * or a list of allowable indexes\n */\n BE
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 69 73 74 29 3b 5c 6e 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 5c 6e 20 20 20 20 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 73 65 6c 65 63 74 6f 72 2c 20 66 6e 29 3b 5c 6e 20 20 7d 3b 5c 6e 7d 3b 5c 6e 7d 28 77 69 6e 64 6f 77 2e 42 45 4a 53 53 44 4b 4f 62 73 65 72 76 65 72 20 3d 20 77 69 6e 64 6f 77 2e 42 45 4a 53 53 44 4b 4f 62 73 65 72 76 65 72 20 7c 7c 20 7b 7d 29 29 3b 5c 6e 7d 5c 6e 76 61 72 20 6a 73 45 6c 65 6d 65 6e 74 52 65 61 64 79 20 3d 20 77 69 6e 64 6f 77 2e 42 45 4a 53 53 44 4b 4f 62 73 65 72 76 65 72 2e 6a 73 45 6c 65 6d 65 6e 74 52 65 61 64 79 3b 5c 6e 5c 6e 69 66 20 28 77 69 6e 64 6f 77 2e 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 Data Ascii: ist);\n return function () {\n return removeListener(selector, fn);\n };\n};\n}(window.BEJSSDKObserver = window.BEJSSDKObserver \|\| {}));\n}\nvar jsElementReady = window.BEJSSDKObserver.jsElementReady;\n\nif (window.BELinkBlockGenerator === undefined)
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 69 6e 6b 53 74 72 75 63 74 75 72 65 5b 30 5d 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 5f 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6c 69 6e 6b 5f 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 5f 74 61 67 29 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 5f 61 74 74 72 69 62 75 74 65 5f 64 69 63 74 69 6f 6e 61 72 79 20 3d 20 6c 69 6e 6b 53 74 72 75 63 74 75 72 65 5b 31 5d 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 61 6c 6c 6f 77 61 62 6c 65 5f 65 6c 65 6d 65 6e 74 73 20 3d 20 6c 69 6e 6b 53 74 72 75 63 74 75 72 65 5b 32 5d 3b 5c 6e 20 20 20 20 20 20 76 61 72 20 63 68 69 6c 64 72 65 6e 5f 6c 69 6e 6b 5f 73 74 72 75 63 74 75 72 65 73 20 3d 20 6c 69 6e 6b 53 74 72 75 63 74 75 72 65 Data Ascii: inkStructure[0];\n var link_level_element = document.createElement(link_level_element_tag);\n var link_attribute_dictionary = linkStructure[1];\n var allowable_elements = linkStructure[2];\n var children_link_structures = linkStructure
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 4d 41 58 49 4d 55 4d 5f 44 45 53 43 5f 4c 45 4e 47 54 48 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 64 65 73 63 5f 74 65 78 74 20 3d 20 64 65 73 63 5f 74 65 78 74 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 4d 41 58 49 4d 55 4d 5f 44 45 53 43 5f 4c 45 4e 47 54 48 29 20 2b 20 27 2e 2e 2e 27 3b 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 76 61 72 20 74 65 78 74 5f 6e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 64 65 73 63 5f 74 65 78 74 29 3b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 6b 5f 6c 65 76 65 6c 5f 65 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 65 78 74 Data Ascii: LinkBlockGenerator.MAXIMUM_DESC_LENGTH) {\n desc_text = desc_text.substring(0, BELinkBlockGenerator.MAXIMUM_DESC_LENGTH) + '...';\n }\n var text_node = document.createTextNode(desc_text);\n link_level_element.appendChild(text
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 79 20 3d 3d 20 42 45 4c 69 6e 6b 42 6c 6f 63 6b 47 65 6e 65 72 61 74 6f 72 2e 52 45 50 4c 41 43 45 4d 45 4e 54 5f 53 54 52 41 54 45 47 59 5f 4f 56 45 52 57 52 49 54 45 29 20 7b 5c 6e 20 20 20 20 20 20 77 68 69 6c 65 20 28 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 76 61 72 20 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 20 3d 20 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 3b 5c 6e 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 69 3c 6f 76 65 72 61 6c 6c 53 74 72 75 Data Ascii: y == BELinkBlockGenerator.REPLACEMENT_STRATEGY_OVERWRITE) {\n while (targetElement.firstChild) {\n targetElement.removeChild(targetElement.firstChild);\n }\n }\n\n var previousElement = targetElement;\n for (var i=0;i<overallStru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	60282	151.101.65.229	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	398	OUT	GET /npm/es6-object-assign@1.1.0/dist/object-assign-auto.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	772	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1058 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.1.0 X-JSD-Version-Type: version ETag: W/"422-N+5NBYb4CVFzB5/O4mpxF8lbAfw" Accept-Ranges: bytes Date: Fri, 01 Nov 2024 12:57:51 GMT Age: 840719 X-Served-By: cache-fra-eddf8230024-FRA, cache-dfw-kdfw8210040-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-01 12:57:51 UTC	1058	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 75 2c 66 29 7b 69 66 28 21 74 5b 75 5d 29 7b 69 66 28 21 65 5b 75 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 66 26 26 63 29 72 65 74 75 72 6e 20 63 28 75 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 75 2c 21 30 29 3b 76 61 72 20 61 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 75 2b 22 27 22 29 3b 74 68 72 6f 77 20 61 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 61 7d 76 61 72 20 6c 3d 74 5b 75 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 75 5d 5b 30 5d 2e 63 61 Data Ascii: !function r(e,t,n){function o(u,f){if(!t[u]){if(!e[u]){var c="function"==typeof require&&require;if(!f&&c)return c(u,!0);if(i)return i(u,!0);var a=new Error("Cannot find module '"+u+"'");throw a.code="MODULE_NOT_FOUND",a}var l=t[u]={exports:{}};e[u][0].ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	60283	104.16.79.73	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8dbc0d8ecd24e9c6-DFW
2024-11-01 12:57:51 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-11-01 12:57:51 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	60278	151.101.65.229	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	396	OUT	GET /npm/jquery-validation@1.17.0/dist/jquery.validate.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:51 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23261 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.17.0 X-JSD-Version-Type: version ETag: W/"5add-anbkx9tHkFM1BYBGmqAQ/r/crNA" Accept-Ranges: bytes Date: Fri, 01 Nov 2024 12:57:51 GMT Age: 204540 X-Served-By: cache-fra-eddf8230098-FRA, cache-dfw-ktki8620071-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 31 37 2e 30 20 2d 20 37 2f 32 39 2f 32 30 31 37 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 76 61 6c 69 64 61 74 69 6f 6e 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 20 4a c3 b6 72 6e 20 5a 61 65 66 66 65 72 65 72 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 Data Ascii: /! jQuery Validation Plugin - v1.17.0 - 7/29/2017 https://jqueryvalidation.org/ * Copyright (c) 2017 Jrn Zaefferer; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?modu
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 61 28 74 68 69 73 5b 30 5d 29 2e 69 73 28 22 66 6f 72 6d 22 29 3f 62 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 28 29 2e 66 6f 72 6d 28 29 3a 28 64 3d 5b 5d 2c 62 3d 21 30 2c 63 3d 61 28 74 68 69 73 5b 30 5d 2e 66 6f 72 6d 29 2e 76 61 6c 69 64 61 74 65 28 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 3d 63 2e 65 6c 65 6d 65 6e 74 28 74 68 69 73 29 26 26 62 2c 62 7c 7c 28 64 3d 64 2e 63 6f 6e 63 61 74 28 63 2e 65 72 72 6f 72 4c 69 73 74 29 29 7d 29 2c 63 2e 65 72 72 6f 72 4c 69 73 74 3d 64 29 2c 62 7d 2c 72 75 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3d 74 68 69 73 5b 30 5d 3b 69 66 28 6e 75 6c 6c 21 3d 6a 26 26 28 21 6a 2e 66 6f 72 6d 26 26 6a 2e 68 61 73 41 74 74 72 Data Ascii: a(this[0]).is("form")?b=this.validate().form():(d=[],b=!0,c=a(this[0].form).validate(),this.each(function(){b=c.element(this)&&b,b\|\|(d=d.concat(c.errorList))}),c.errorList=d),b},rules:function(b,c){var d,e,f,g,h,i,j=this[0];if(null!=j&&(!j.form&&j.hasAttr
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 63 2e 75 6e 73 68 69 66 74 28 62 29 2c 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 63 29 7d 3a 76 6f 69 64 20 30 3d 3d 3d 63 3f 62 3a 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 61 2e 6d 61 6b 65 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 2e 73 6c 69 63 65 28 31 29 29 2c 63 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 41 72 72 61 79 26 26 28 63 3d 5b 63 5d 29 2c 61 2e 65 61 63 68 28 63 2c 66 75 6e 63 74 69 6f Data Ascii: 1===arguments.length?function(){var c=a.makeArray(arguments);return c.unshift(b),a.validator.format.apply(this,c)}:void 0===c?b:(arguments.length>2&&c.constructor!==Array&&(c=a.makeArray(arguments).slice(1)),c.constructor!==Array&&(c=[c]),a.each(c,functio
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 65 43 6c 61 73 73 28 64 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 62 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 62 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 2e 61 64 64 43 6c 61 73 73 28 64 29 3a 61 28 62 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 63 29 2e 61 64 64 43 6c 61 73 73 28 64 29 7d 7d 2c 73 65 74 44 65 66 61 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 2e 65 78 74 65 6e 64 28 61 2e 76 61 6c 69 64 61 74 6f 72 2e 64 65 66 61 75 6c 74 73 2c 62 29 7d 2c 6d 65 73 73 61 67 65 73 3a 7b 72 65 71 75 69 72 65 64 3a 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 72 65 6d 6f 74 65 3a 22 50 6c 65 Data Ascii: eClass(d)},unhighlight:function(b,c,d){"radio"===b.type?this.findByName(b.name).removeClass(c).addClass(d):a(b).removeClass(c).addClass(d)}},setDefaults:function(b){a.extend(a.validator.defaults,b)},messages:{required:"This field is required.",remote:"Ple
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 62 29 7d 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 3d 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 7c 7c 61 28 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 73 3d 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 Data Ascii: b)}this.labelContainer=a(this.settings.errorLabelContainer),this.errorContext=this.labelContainer.length&&this.labelContainer\|\|a(this.currentForm),this.containers=a(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},thi
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 61 6c 69 64 28 29 7d 2c 63 68 65 63 6b 46 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 70 61 72 65 46 6f 72 6d 28 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 62 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 45 6c 65 6d 65 6e 74 73 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 73 28 29 3b 62 5b 61 5d 3b 61 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 62 5b 61 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 74 68 69 73 2e 63 6c 65 61 6e 28 62 29 2c 66 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 65 29 2c 67 3d 74 68 69 73 2c 68 3d 21 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 66 3f 64 65 6c 65 74 Data Ascii: alid()},checkForm:function(){this.prepareForm();for(var a=0,b=this.currentElements=this.elements();b[a];a++)this.check(b[a]);return this.valid()},element:function(b){var c,d,e=this.clean(b),f=this.validationTargetFor(e),g=this,h=!0;return void 0===f?delet
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 69 67 68 74 29 66 6f 72 28 62 3d 30 3b 61 5b 62 5d 3b 62 2b 2b 29 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 75 6e 68 69 67 68 6c 69 67 68 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 5b 62 5d 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2c 22 22 29 2c 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 61 5b 62 5d 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 3b 65 6c 73 65 20 61 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 76 61 6c 69 64 43 6c 61 73 73 29 7d 2c 6e 75 6d 62 65 72 4f 66 49 6e 76 61 6c 69 Data Ascii: ight)for(b=0;a[b];b++)this.settings.unhighlight.call(this,a[b],this.settings.errorClass,""),this.findByName(a[b].name).removeClass(this.settings.validClass);else a.removeClass(this.settings.errorClass).removeClass(this.settings.validClass)},numberOfInvali
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 2c 21 28 64 20 69 6e 20 63 7c 7c 21 62 2e 6f 62 6a 65 63 74 4c 65 6e 67 74 68 28 61 28 74 68 69 73 29 2e 72 75 6c 65 73 28 29 29 29 26 26 28 63 5b 64 5d 3d 21 30 2c 21 30 29 7d 29 7d 2c 63 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 5b 30 5d 7d 2c 65 72 72 6f 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 2e 73 70 6c 69 74 28 22 20 22 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 61 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2e 22 2b 62 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 6e 74 65 78 74 29 7d 2c 72 65 73 65 74 49 6e 74 65 72 6e 61 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 Data Ascii: ,!(d in c\|\|!b.objectLength(a(this).rules()))&&(c[d]=!0,!0)})},clean:function(b){return a(b)[0]},errors:function(){var b=this.settings.errorClass.split(" ").join(".");return a(this.settings.errorElement+"."+b,this.errorContext)},resetInternals:function(){t
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 68 6f 75 6c 64 20 72 65 74 75 72 6e 20 61 20 73 74 72 69 6e 67 20 76 61 6c 75 65 2e 22 29 3b 64 65 6c 65 74 65 20 67 2e 6e 6f 72 6d 61 6c 69 7a 65 72 7d 66 6f 72 28 64 20 69 6e 20 67 29 7b 65 3d 7b 6d 65 74 68 6f 64 3a 64 2c 70 61 72 61 6d 65 74 65 72 73 3a 67 5b 64 5d 7d 3b 74 72 79 7b 69 66 28 63 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 64 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 6a 2c 62 2c 65 2e 70 61 72 61 6d 65 74 65 72 73 29 2c 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 63 26 26 31 3d 3d 3d 68 29 7b 69 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 69 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 63 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 74 6f 48 69 64 65 3d 74 68 69 73 2e 74 6f 48 69 Data Ascii: hould return a string value.");delete g.normalizer}for(d in g){e={method:d,parameters:g[d]};try{if(c=a.validator.methods[d].call(this,j,b,e.parameters),"dependency-mismatch"===c&&1===h){i=!0;continue}if(i=!1,"pending"===c)return void(this.toHide=this.toHi
2024-11-01 12:57:51 UTC	1378	IN	Data Raw: 65 73 74 28 64 29 26 26 28 64 3d 61 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 64 2e 72 65 70 6c 61 63 65 28 65 2c 22 7b 24 31 7d 22 29 2c 63 2e 70 61 72 61 6d 65 74 65 72 73 29 29 2c 64 7d 2c 66 6f 72 6d 61 74 41 6e 64 41 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 61 2c 62 29 3b 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 70 75 73 68 28 7b 6d 65 73 73 61 67 65 3a 63 2c 65 6c 65 6d 65 6e 74 3a 61 2c 6d 65 74 68 6f 64 3a 62 2e 6d 65 74 68 6f 64 7d 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 5b 61 2e 6e 61 6d 65 5d 3d 63 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 5b 61 2e 6e 61 6d 65 5d 3d 63 7d 2c 61 64 64 57 72 61 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: est(d)&&(d=a.validator.format(d.replace(e,"{$1}"),c.parameters)),d},formatAndAdd:function(a,b){var c=this.defaultMessage(a,b);this.errorList.push({message:c,element:a,method:b.method}),this.errorMap[a.name]=c,this.submitted[a.name]=c},addWrapper:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.7	60287	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: dca3eddb-501e-008c-6f6b-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-159b85dff8fprglthC1DFW8zcg0000000340000000001873 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	60288	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	711	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-instagram.png?itok=_EWgc0LP HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1452 Connection: close x-amz-id-2: XPfvV26473icsdrhdG8ZxwHnJUJZSmp5iAMzfaEiIfUIXNfrJNIhkMvRwNN943puwfzq5PYgPVg= x-amz-request-id: KAQN44FM5GZ8TRDK Date: Fri, 01 Nov 2024 12:57:52 GMT Last-Modified: Thu, 25 Jul 2024 14:37:25 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "02b55647b632c3197616c713651e0987" x-amz-server-side-encryption: AES256 x-amz-version-id: VUDmJpCwMx3nAVHQlG5GZUy8MptPzk0q Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 a668b79ea8c4f6f5d611c57b44351ff0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: NzuMj1fiUVV9yeNtckRh4fN5HuN_ct8DdfBeATqNNce344V2DbQhdg==
2024-11-01 12:57:52 UTC	1452	IN	Data Raw: 52 49 46 46 a4 05 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 aa 00 00 00 01 80 64 db b6 69 e7 36 ec db b6 ba f3 cb b6 d1 0e 2b 4e 4a b6 ed a7 06 04 cf 3b 23 a5 54 22 62 02 c8 ef b5 65 fa fb f7 14 c3 29 c9 50 8f 87 c3 9c 4b 8e 63 eb 53 fd 6d 9f a4 e4 27 66 4a 42 f2 13 35 25 a2 f9 c4 75 08 9d 03 3d 0a 18 3e 91 3d bc 12 54 87 37 85 5a e3 9d 42 5d f2 9e a1 5e 79 14 14 c3 63 f0 38 28 ee bf 0e 03 c5 f0 28 bc 67 a8 57 de 29 d4 25 6f 0a b5 c1 ab 40 f5 78 16 a8 00 8f dc 02 bd 12 41 0b 90 4f 88 a4 60 2a 44 3c 05 52 21 52 43 fb 00 c7 09 22 33 50 59 3a 7d a4 38 65 a9 e7 d3 a5 46 84 fc a1 56 50 38 20 d4 04 00 00 b0 18 00 9d 01 2a 31 00 30 00 3e 31 14 89 42 a2 21 21 16 a9 9e 48 20 03 04 b6 00 58 8f 6f 5b 7f ce bf 1a 7d 86 29 ef Data Ascii: RIFFWEBPVP8X0/ALPHdi6+NJ;#T"be)PKcSm'fJB5%u=>=T7ZB]^yc8((gW)%o@xAO`D<R!RC"3PY:}8eFVP8 10>1B!!H Xo[})

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.7	60289	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:51 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: e5751b3d-f01e-0099-0a8e-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-17c5cb586f659tsm88uwcmn6s400000003ng0000000021pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:51 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	60290	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	710	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-linkedin.png?itok=t2D5awqO HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 766 Connection: close x-amz-id-2: ZBZxFhO0P4HoQNbhZj8eNQVaTSoz1qWsUsXCqEzkIcTEWg0mxEfu2k/L82afZwC8wZwAmGER/PA= x-amz-request-id: 7A6PA68MD6B949TY Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 25 Jul 2024 14:37:24 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "5a95059334505d7d22c64e831e2623fa" x-amz-server-side-encryption: AES256 x-amz-version-id: CHynKMiEVIXi4P6qcOPxSOg42z_6zK8w Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 d3fdd96b3ada000b1a8c2d522534c124.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: 0ZWKOVIEkRs_B0k8kuLmmZwH5QT1dViY0voofwyqtAsTBq-GcCdSqw==
2024-11-01 12:57:52 UTC	766	IN	Data Raw: 52 49 46 46 f6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 3d 00 00 00 01 3f 40 26 6d 9b 1b 91 30 9f fb 17 11 11 67 0a 35 91 24 29 f3 ac e4 04 9c 37 f2 9f 3d 84 9f 44 f4 7f 02 38 a8 9e 3b a5 80 e5 de 0e b1 69 42 6e 5e ff 56 6c 9a 60 9b 3a a8 6f 91 c2 8b 00 56 50 38 20 92 02 00 00 50 11 00 9d 01 2a 31 00 30 00 3e 29 10 86 42 a1 a1 0f 55 76 00 0c 01 42 5b 00 2f fa 40 0d 65 6e 4b f8 57 f8 cd d1 73 ae 9d d9 c9 cf e4 9b e7 5f 6d 3e fb bf b0 68 a8 f3 01 fa 29 fa 73 ec f5 fa 81 ee 03 f1 9b 85 13 f5 57 d8 03 f4 a3 d3 53 d8 de b2 e5 74 5f d9 b3 20 64 81 7b 01 a2 e9 90 45 9b 1f c6 ff bf 7f cc f5 5c ff 59 c0 00 27 56 ad 69 c6 38 a1 1e d0 90 65 4e f5 69 44 bc 6d 82 7e 69 51 83 e9 6c 58 c7 33 b1 db 3a 7a 30 db 45 93 60 3d 00 Data Ascii: RIFFWEBPVP8X0/ALPH=?@&m0g5$)7=D8;iBn^Vl`:oVP8 P*10>)BUvB[/@enKWs_m>h)sWSt_ d{E\Y'Vi8eNiDm~iQlX3:z0E`=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.7	60292	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:51 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: b9f98eb1-201e-0096-0e24-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-176bd8f9bc5hwksrhC1DFWf9wg00000000h0000000004pp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-01 12:57:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.7	60295	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cc16d6e3-a01e-001e-1208-2c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-16ccfc49897cvhbphC1DFWt5d800000000r000000000bhp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:52 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	60291	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:51 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:51 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 6c1a6569-101e-00a2-3008-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125751Z-16ccfc49897d998fhC1DFWbah400000000hg00000000gevq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:52 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.7	60293	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	667	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-track.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	827	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 940 Connection: close x-amz-id-2: Z6fch/LN2nt1t+7S3wylubbqlMRbPB+EC/gKejL93syAvE0LgDlhR1sLheSxuniXUPkXb8CcueE= x-amz-request-id: E3QB14BH0VD07JVR Date: Fri, 01 Nov 2024 12:57:50 GMT Last-Modified: Fri, 07 Jun 2024 20:47:49 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "ac17fd6f6b966010a8abc60dab53773d" x-amz-server-side-encryption: AES256 x-amz-version-id: uWRQjevfWVCFsSyFRuwOXe.FIXB5bJBU Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 58a361324cd2b1576fcc05c5471b9b12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: MDmbGtFc1S4EgZ3FMuCmfUzp6Jp8x8zquAnjaVnPDYXpqVBpFvEORQ== Age: 3
2024-11-01 12:57:52 UTC	940	IN	Data Raw: 52 49 46 46 a4 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 00 00 21 00 00 41 4c 50 48 f9 01 00 00 01 90 2b 6d ff e2 2a ef 71 d7 0a 87 9c 45 3b 86 ca b5 4e 1f 6e c2 21 67 70 77 77 77 77 a7 a2 a2 0b ee 17 e0 84 cd 0c d5 f1 19 f2 22 9b 45 2f 20 22 26 80 ff 68 6d 6a 7f e6 73 97 7b 7f 57 cb a1 36 23 7f 53 e5 fa 6e 0b fe 9e e0 a9 6a d7 9d f9 77 7f d3 c8 ac fa a5 b5 19 f6 c6 eb 55 60 70 a8 5e e9 05 bf b2 2c 1c 1c 51 f5 54 f3 f3 00 4a 47 df 8b b3 5c 9f 55 fd b4 5e 6d 05 4a 67 bf d5 38 73 d5 f5 40 d0 a3 d7 8b 60 d0 43 23 0b 71 5a 7b 02 38 a4 b9 26 48 bc 51 6d 2b 30 77 30 34 87 7a 98 ba 36 4d 43 f9 43 f5 e6 88 bd 51 cb 7c 5e 0e 69 6d ab 4b 69 67 23 cc 56 57 15 11 35 59 9d 01 8d 9d 9a 3a a0 37 a1 ec a3 5e 85 02 5c d1 4f c5 70 53 0f 66 34 0d 53 f4 eb Data Ascii: RIFFWEBPVP8X!ALPH+m*qE;Nn!gpwwww"E/ "&hmjs{W6#SnjwU`p^,QTJG\U^mJg8s@`C#qZ{8&HQm+0w04z6MCCQ\|^imKig#VW5Y:7^\OpSf4S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.7	60294	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	670	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-location.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	827	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 306 Connection: close x-amz-id-2: 0QI/0wZ5KkaF3SdTQYIoWQU1ZeWMsEyRjBJFNHiIGFo/dxmvyBgjtzoPMFGWIBF7Hv8kcnTUlwc= x-amz-request-id: E3QBRSSQXGMSQECK Date: Fri, 01 Nov 2024 12:57:50 GMT Last-Modified: Fri, 07 Jun 2024 21:41:53 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "dc6371e7f75249692103383820237d1b" x-amz-server-side-encryption: AES256 x-amz-version-id: 3OlaG4Z9od.pHL_Dy4mqPdgcxwviv8RF Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 3af85c3075e12aff72b9e148b99d6622.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: lBHsQoOATr7IcaynhJNmViPUZkp0kYJF0ExN_fUQECGNMGC4lnoWOQ== Age: 3
2024-11-01 12:57:52 UTC	306	IN	Data Raw: 52 49 46 46 2a 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 13 00 00 13 00 00 41 4c 50 48 7b 00 00 00 01 77 20 10 20 24 38 f1 3f a8 21 22 12 3f b8 a9 6d 5b 8d c2 cc 0a 22 21 0a 18 ab 48 c8 1a 01 a3 81 51 c5 af a3 22 eb 57 53 a1 02 66 74 11 54 10 d1 ff 09 d8 fd 0b c5 63 91 74 2d 4a 6e 45 e9 ab 08 fc 4b 7e 8a f2 cb fe 91 bf c0 a7 f7 33 77 84 8e eb 98 81 da 22 44 0a 05 d8 59 ad ba cb d5 8a 12 e0 80 40 26 31 62 33 6d cb 16 19 23 c0 21 81 4c 5c df d7 84 cb bf d0 7c 15 01 00 56 50 38 20 88 00 00 00 b0 05 00 9d 01 2a 14 00 14 00 3e 31 14 88 42 a2 21 21 18 04 00 20 03 04 b2 00 3b d0 f9 cf e2 4f 08 09 83 3e 00 0f d6 6f 50 0f ec 1e c0 1f b3 be 89 e0 a0 c9 24 00 00 9b ff ff b6 87 d6 87 d0 e8 11 19 ba fc 32 c1 9e f9 a7 a7 5e bd 34 e1 12 1f ff fe b9 77 ae Data Ascii: RIFFWEBPVP8XALPH{w $8?!"?m["!HQ"WSftTct-JnEK~3w"DY@&1b3m#!L\\|VP8 >1B!! ;O>oP$2^4w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.7	60296	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	742	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-tracker-banner-image-phone-location.png?itok=GXOYW421 HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2538 Connection: close x-amz-id-2: CjBWsiUtifuwb1uBXcXOjACCvY5HHsCmSUkOUdPRZpV3reAgjW2KN++x+JSoeDfL8c1RaTiUj/4= x-amz-request-id: 7A6Y566A9ZG7XDHE Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 04 Jul 2024 21:23:10 GMT x-amz-expiration: expiry-date="Sat, 27 Dec 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "090ace433b65792bf872bd905a910807" x-amz-server-side-encryption: AES256 x-amz-version-id: dwqHZ_5c4u_OtaBCR9KQkjqlmEJrbN4. Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 6e44e48abc671a9155ea845c36f68920.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: TE-23rgZxXj0YR9TGe3WNViseL4kXjpBnJ4YTKht93Q-4eafltaq0Q==
2024-11-01 12:57:52 UTC	2538	IN	Data Raw: 52 49 46 46 e2 09 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6a 00 00 79 00 00 41 4c 50 48 95 02 00 00 01 a0 53 6d 7b 55 db fa 24 44 02 12 22 21 12 90 10 09 58 88 04 24 20 01 09 91 80 04 ca 5d a6 dc d5 5b 7c 4c d6 58 f0 ef 73 bf 44 c4 04 e8 7b e7 f6 f4 3a e9 a5 a9 0d 5e d8 f3 2b f2 c1 4b eb 0b a6 c1 6b eb f3 3a fe f3 7c f6 b8 20 3f ad f2 e6 fe b4 e3 55 e4 67 25 de bd 3c ab bc e8 07 b0 fd 2a 4e a0 ff 93 c5 fa 0b c9 fc 42 f6 5f 49 ff 33 6d e4 5f 08 23 fd 42 28 bf 4d f6 5f 49 0e af dc 51 0b 24 4f 5f ab c0 74 a7 04 d2 a1 a7 7b 19 a0 dc a9 81 9c c0 7a ef b0 e5 46 1a 81 e0 e5 ce 02 30 a6 1b 1b 81 ec 76 dc 48 c3 66 dd ec 91 a4 13 a0 7e 6a 00 5d 41 69 b6 f3 43 1a 36 85 a5 0e 50 af 16 80 4d b1 e4 5b c5 ce ab d3 26 4b ad 1f 4b 08 87 24 9d 7d cb a6 0e 50 Data Ascii: RIFFWEBPVP8XjyALPHSm{U$D"!X$ ][\|LXsD{:^+Kk:\| ?Ug%<*NB_I3m_#B(M_IQ$O_t{zF0vHf~j]AiC6PM[&KK$}P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	60298	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	656	OUT	GET /f00000000094873/dev.purolator.com/sites/default/files/FSR-Certified_0.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	849	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13586 Connection: close x-amz-id-2: h7VSy0VJrxKYga00zxajLfkRWJrC8OEDtmp6r86CdzrCqD9eXd+LeAEEce17sCeaB2Xg6c8/uvtjC2P5IlG2F6z/lN+WuaQu x-amz-request-id: E3QB6CKD8RR4XA0V Date: Fri, 01 Nov 2024 12:57:50 GMT Last-Modified: Mon, 31 Jul 2023 16:29:48 GMT x-amz-expiration: expiry-date="Wed, 22 Jan 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "5f1315ffd12ed804ab6c3d0a5b023e6e" x-amz-server-side-encryption: AES256 x-amz-version-id: lmbPNzj41Q027zSaX26rpg6V2ydwxJQQ Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 4b28b963946514dd2cf9a90f74a8034a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: l32Uy81QQ-J-Ezu2dXMvO-S3GNzXBcAnTpksuE79ltSe_NZ6_OIgHw== Age: 3
2024-11-01 12:57:52 UTC	13586	IN	Data Raw: 52 49 46 46 0a 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 8f 01 00 c2 00 00 41 4c 50 48 e7 1d 00 00 01 f0 c7 ff ff eb a4 fd ff 3d 0e 0a 0e 04 0e 58 57 55 0c 55 c4 0e 35 68 eb 1e a1 ad 5a 17 46 3b 5d 6d 1c 1d 8a 23 da 29 38 62 a7 e2 08 6a 6d dd 80 0a f6 a5 d6 e0 aa 45 c5 50 2b 5a 13 15 ac 82 03 6b 70 bf 0a ea 71 14 05 92 70 ff 23 cf 73 12 b2 38 7f 46 c4 04 90 1f 5e bf 51 d3 f6 1d 62 5e e9 16 3f 6c d2 a4 c9 93 a7 69 e7 24 4a 9c f3 99 76 da e4 49 93 df 1d 3e a0 7b a7 98 98 56 11 f5 48 9e 0e 08 6f fe dc cb f1 6f 7d f4 43 fa d6 df 4f dd b8 2e 3c 7c 6a b7 d9 ac 10 17 2c 12 05 48 b5 d9 6c 4f 1e 96 de bc 74 d4 90 be 7e c1 f8 b7 5e 6b db a2 49 80 bc 53 3f 24 a2 f3 eb e3 17 ae 39 f0 77 c9 ff ab ac 00 04 41 c8 cf ca 32 18 52 26 4c d0 68 34 51 8a a8 28 Data Ascii: RIFF5WEBPVP8XALPH=XWUU5hZF;]m#)8bjmEP+Zkpqp#s8F^Qb^?li$JvI>{VHoo}CO.<\|j,HlOt~^kIS?$9wA2R&Lh4Q(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	60300	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	434	OUT	GET /f00000000094873/www.purolator.com/modules/custom/purolator_widgets/img/liveChat-open.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 690 Connection: close x-amz-id-2: O1bRZDdFjTbyXxAi12WHvCR/nu03/6squ+y+iooeFOZ1EP8SyJQWA9Ida2RznEr6RAcRkywFRi8= x-amz-request-id: 7A6N8MR0X31JAPJP Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Fri, 07 Jun 2024 23:16:54 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "9cc01f73df36d5664a4bb1113efb559b" x-amz-server-side-encryption: AES256 x-amz-version-id: GihKY.DL802q.K2ABQa5BnLR9AzKu7U1 Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 c72aed82acf017b1476dc574b8d5da80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: mAhL2IhmKCCxC89r7Go0_ui-K3KsJC6rf-Sc3DwJ0krO8wNbiAJukg==
2024-11-01 12:57:52 UTC	690	IN	Data Raw: 52 49 46 46 aa 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 21 00 00 21 00 00 41 4c 50 48 cb 00 00 00 01 80 62 db da b2 e5 fe 3e 05 4d ee b8 4c 82 9f f6 db 38 70 6d de 3c 52 5d 93 bb 4b 74 f8 32 d6 48 a4 df ed 79 9e 0f 06 10 11 13 00 55 9a fb 97 97 97 b8 57 e6 22 00 ac 0f 59 d9 4e 60 30 2b fc 63 c7 8a 54 b6 59 05 4d 58 56 cd fb da 3a 79 f5 24 43 58 02 63 43 8a b0 c8 51 47 d9 71 7a c8 8e 38 45 b2 dc 7d 47 57 37 b5 7d 36 4d 98 07 63 38 45 58 e0 a8 a6 dc 24 92 95 26 e2 f1 78 3c 3a 90 26 48 96 bb 88 b4 56 d8 b2 c9 b3 80 8a c7 fe ca eb c8 d8 78 d9 b1 a1 3b 1e c9 ff a1 59 ee d7 29 37 a1 29 f3 7d 7d cb 7a 77 d8 a6 43 29 a5 da 60 64 35 a1 b8 48 09 40 74 39 9b 55 02 90 52 fc 10 de 7a f7 43 7a ac 1e e2 26 88 03 00 56 50 38 20 b8 01 00 00 f0 0c 00 9d 01 Data Ascii: RIFFWEBPVP8X!!ALPHb>ML8pm<R]Kt2HyUW"YN`0+cTYMXV:y$CXcCQGqz8E}GW7}6Mc8EX$&x<:&HVx;Y)7)}}zwC)`d5H@t9URzCz&VP8

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.7	60305	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:52 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:52 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1cb8ba43-301e-0033-2d08-2cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125752Z-16ccfc49897w2n6khC1DFW5wd800000000h000000000aqzg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:52 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	60306	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	430	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-login.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	840	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 750 Connection: close x-amz-id-2: jJKyzWwjwSir3nRmBXx4tpfcaCtaG+EeHTLcEmPcn9JHTODSZjwZC8zq+mAvCeblniQsHuX+/AL0hLpIqC7mweb95AUUA/Fo x-amz-request-id: 7A6SKXQFMNQ52WKP Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Fri, 07 Jun 2024 20:55:37 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "1f793f7cf7877bce5566cb5446093efc" x-amz-server-side-encryption: AES256 x-amz-version-id: CBvlM_x.vZB0YeR9KXjmKOSJQ0fEtozV Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 941ea2ea996fa7a883fc56177714a71c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: -bOkjF29whdaWrusr52GVkbtzkD-Q2Q2LyDwxRYqgPV6NacDALBXuQ==
2024-11-01 12:57:52 UTC	750	IN	Data Raw: 52 49 46 46 e6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1e 00 00 1f 00 00 41 4c 50 48 ac 00 00 00 01 70 5d db 56 13 dd 89 df 14 c6 7c 4b 39 58 42 ee c2 2e 52 2b 80 16 30 d9 ac 5c 2b 88 08 06 6e db 36 92 ba 7b fb 92 4f e0 30 6f 32 aa cd f3 69 ea 48 de 3c 10 da f5 1b b6 5a ec a1 4c bf a3 51 9b 5c f2 de c3 fc b2 51 8b de cb 62 5d 92 de d3 74 49 d0 7b 1b 00 80 b0 fe 58 01 40 f7 84 1a b8 3b 06 77 87 ec 29 25 62 8e 04 25 47 05 c7 e1 f0 e2 78 d1 f0 93 8a 3c 84 bf 90 e4 78 e0 de 71 3f 93 0d 05 32 90 9c 20 c3 50 61 61 ea 1d c4 74 0a 1c 95 40 00 d4 ee c5 ac da 4d de b0 db a2 0b 85 57 ea c7 8d 7d bf 6d 13 cb 3b 0e 13 56 50 38 20 14 02 00 00 10 0e 00 9d 01 2a 1f 00 20 00 3e 31 16 89 43 a2 21 21 14 04 00 20 03 04 b6 00 4e 99 42 38 1b ca 3f 06 3f 66 7f Data Ascii: RIFFWEBPVP8XALPHp]V\|K9XB.R+0\+n6{O0o2iH<ZLQ\Qb]tI{X@;w)%b%Gx<xq?2 Paat@MW}m;VP8 * >1C!! NB8??f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	60308	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	464	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2023-08/x3_0.png?itok=eYiAfA7G HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 766 Connection: close x-amz-id-2: RSDfqQF5+jB/EmUlr2NhsUjdyXinjCQoyjfUiuOjrGbv96tvVWIVLtVkncwuljJkNT+vWcgV8RM= x-amz-request-id: 7A6SCV7Q4XR6ZY7B Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 17 Aug 2023 20:49:17 GMT x-amz-expiration: expiry-date="Sat, 08 Feb 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "809252d6a16f144c3e119781939e544f" x-amz-server-side-encryption: AES256 x-amz-version-id: day41bQyT2F6Imy9IQOwGBDVkTq3cIX1 Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 6301016ccf61750ec7dd668279788376.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: QRDgJlOZLchbz1F4-BhnSkmMZcgeIK71WlcHr-rFxpP-FdtqvEnYIQ==
2024-11-01 12:57:52 UTC	766	IN	Data Raw: 52 49 46 46 f6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 31 00 00 31 00 00 41 4c 50 48 85 00 00 00 01 80 62 6d db b2 e8 c1 49 9a 9d 44 74 d7 ac 89 43 66 19 24 8b 2c 83 44 22 69 26 e9 12 48 ee ee ce b8 bc 93 e7 9c 88 98 00 7c 2c d7 12 d4 70 f1 45 49 ba ff 24 79 cc e9 3f 71 8f 9f 64 ef f1 0f cc fb 27 e5 14 00 6e eb 49 fa 6e 07 a2 4f e2 65 a0 48 ed 2a 40 9b da d3 8c 25 39 ef bf 1c 2d 72 5a 64 a9 ed f9 f0 51 cb 00 a8 d0 da ab 01 48 bb 94 ee 11 bc 97 57 e9 4c 43 f8 98 19 ce 8f 29 6c 9b 31 11 fe 28 00 56 50 38 20 4a 02 00 00 30 11 00 9d 01 2a 32 00 32 00 3e 31 18 89 43 a2 21 a1 11 06 20 20 03 04 b4 80 0a f0 0e b5 3f 8b 72 52 7a 89 92 59 e4 df 8e 7a 25 bf b4 7c c0 66 33 ff 2b f9 33 ac 23 f8 ff f6 ac a2 ef d2 7f c2 7d d2 7b 14 f9 37 fc b7 f6 6f db Data Ascii: RIFFWEBPVP8X11ALPHbmIDtCf$,D"i&H\|,pEI$y?qd'nInOeH@%9-rZdQHWLC)l1(VP8 J022>1C! ?rRzYz%\|f3+3#}{7o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	60309	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	473	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-facebook.png?itok=MfOAW2h7 HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 704 Connection: close x-amz-id-2: 0eXklCmoACn2pOFF0zweHzTYwmtfG+0IFC4P3luOAjPGqXNUnX+RWcQaKRCFYYKS3hDSlx037Yc= x-amz-request-id: 7A6PT3Z437DDDH7X Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 25 Jul 2024 14:36:38 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "b1543d5dec40093b827f8568ebc0942e" x-amz-server-side-encryption: AES256 x-amz-version-id: t1X9JO90TaHkN5xBDiI2.CcpHYeZE2g_ Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 72284d4e8970ebb6888dfd7f2b2b621c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: njqbVMMVNrtglMQ9l13yDw7L1sflWjUGYUhdlHW0h_-YM184A832iA==
2024-11-01 12:57:52 UTC	704	IN	Data Raw: 52 49 46 46 b8 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 97 00 00 00 01 70 24 db b6 e9 64 24 7f 00 7f fe 55 71 d3 c9 47 6c db 36 1e be 4f 9c 56 44 4c 80 eb 11 c5 14 c1 4d 89 9a 14 41 4e 69 08 f6 bb 36 a9 95 3a 83 1d 4e 2a b1 22 ba 29 90 4d 85 18 b7 30 76 13 82 d6 20 68 23 02 57 c2 5b e9 9d 94 de 66 b7 db 40 18 86 88 79 88 11 dc e6 06 b7 22 6f 42 41 92 24 29 a3 b7 91 74 0b 0e d9 ea c7 73 e3 05 f1 24 bc 0e dc e2 e6 50 29 95 4a a5 0a 7a 97 94 36 46 1c 32 bf 22 16 ff b1 42 50 21 8d e0 9e ad 6c dd 18 98 9e b9 05 cd f3 07 00 56 50 38 20 fa 01 00 00 b0 0d 00 9d 01 2a 31 00 30 00 3e 2d 12 86 42 a1 a1 0e ad 9a 00 0c 01 62 59 00 2e 83 72 df b9 6b 57 72 ff c7 2a 98 38 00 6d 80 f3 01 fa 73 fb 15 ec e9 fb 01 ee 03 ce df a8 Data Ascii: RIFFWEBPVP8X0/ALPHp$d$UqGl6OVDLMANi6:N")M0v h#W[f@y"oBA$)ts$P)Jz6F2"BP!lVP8 10>-BbY.rkWr*8ms

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	60311	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	473	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-appstore.png?itok=lSjNWKGF HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 4304 Connection: close x-amz-id-2: K3l2kfNzU29qPa0JM2JG8XbzYY07uLfT+Ecxb96C62DN6Q9m0ar06BeNth9/p8JLfisB3jWOmu4= x-amz-request-id: 7A6WC1RNN5X5KZYP Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 25 Jul 2024 14:05:28 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "4b1f8a29613c547c138331369d6549bd" x-amz-server-side-encryption: AES256 x-amz-version-id: d.xI.PF2f7r7G2geq4sbfu.nUJpyq4sw Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 8bdb05fbf74c6dd0d9d93215e88dbeee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: UlZz3vP0JYvP8rvCs__qqhx0TcNEjguBnqDqzzQqtPt3_GxDsh2Rww==
2024-11-01 12:57:52 UTC	4304	IN	Data Raw: 52 49 46 46 c8 10 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 f9 00 00 53 00 00 41 4c 50 48 a8 00 00 00 01 70 8e 6d 5b 64 bd 08 1f 42 08 21 84 30 08 21 a4 10 42 08 21 0c c2 87 10 42 08 1f c1 ec cb bf f7 ec 27 22 26 00 67 5d c8 f4 c6 80 3b 5d e9 13 c7 1a e5 82 d4 89 68 8b a7 bc 4d 5c 8f 72 14 6d 62 bb c9 9e b7 89 ef b6 23 7d 62 bc 6c f2 c4 b9 03 c4 48 ab 40 9a 58 17 28 6d 11 13 ed d5 f3 a6 81 37 1b 78 9b f2 df 7f 7f ff fd fd f7 e9 25 12 17 9e 71 0d bc 8d 68 b4 25 14 da 3c 3c 6b 0d 80 92 16 01 38 ce 14 db c4 98 b9 1d 54 be cc e3 b0 b0 65 1e 27 87 4e 95 3a 9c 96 dc 69 d2 80 eb 3e 55 6d dc 98 6a 89 0e c7 56 50 38 20 fa 0f 00 00 d0 44 00 9d 01 2a fa 00 54 00 3e 31 16 89 43 a2 21 09 85 1e a4 10 01 82 5a 40 35 6c ab 64 9c fc 31 fc af f1 9b be af e9 3f Data Ascii: RIFFWEBPVP8XSALPHpm[dB!0!B!B'"&g];]hM\rmb#}blH@X(m7x%qh%<<k8Te'N:i>UmjVP8 D*T>1C!Z@5ld1?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	60310	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	494	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-trakcer-banner-image-pod.jpg?itok=dp8fmKbM HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	842	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 21456 Connection: close x-amz-id-2: Y8UyNqg5rvxfFg4u1HIT2VJp8xZfr/gq/3qjFB62iwvfS+jrObM9oS8WYvpZTXEI8UDEREmnD2xCdKnqV8e/LFLAwOt7k1Tp x-amz-request-id: 7A6ZKWJFYNNRS3MY Date: Fri, 01 Nov 2024 12:57:53 GMT Last-Modified: Thu, 11 Jul 2024 17:40:44 GMT x-amz-expiration: expiry-date="Sat, 03 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "2890df73b0f01dddc038cd69968b7133" x-amz-server-side-encryption: AES256 x-amz-version-id: LSWiscZgQd3sGpdaPVssHONzKe8zmBAL Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 e8a60ac0739716264fa9f6b850a32e30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: oyguNhuvBdDRtnspXW4YxNT12NpCbx5LPHYS8Abkh3tV_z9lGP8DOg==
2024-11-01 12:57:53 UTC	16384	IN	Data Raw: 52 49 46 46 c8 53 00 00 57 45 42 50 56 50 38 20 bc 53 00 00 30 35 02 9d 01 2a 35 03 ec 04 3e 6d 32 96 49 24 22 a2 a1 22 d0 b9 78 80 0d 89 67 6e fb e8 bb bb f4 02 35 90 4d c8 a3 40 27 9c c7 3a 78 25 5f 99 fe 6f fc b7 ee b7 f6 df 7f ee 33 ee 2b c8 df 75 fd 2b fd c7 e7 d3 fc 7e 5d f6 4f eb df a9 af 9a 7e a7 fe eb fb 37 f8 2f dd 3f a0 1f f4 fd 72 ff 52 ff 4b ff 83 dc 23 f8 ef f6 8f d9 4f f5 1f 17 3f f0 7a f7 ff a3 ff 07 d4 ff fa ff f6 ff b4 9e eb 1f f2 7f 6a bf fa fc 7a fe 9d fe cf f6 cb e0 e3 f9 9f fa 8f fe fd 95 be 8d ff ba 9e ac 3f f3 7f 79 fe 2a bf 6e ff 75 3e 19 ff 66 75 57 be ed fe db be bf f1 1f ec bc 5f f3 cb ea cf 6e fe 58 2f af ef ff e2 79 97 fc e7 f0 57 f2 7f c2 7b be ed 07 f6 2f 10 bf cc 3f aa ff be f6 5a 80 16 a2 fa 05 f7 a3 d2 5f f3 3c e0 fb 5d Data Ascii: RIFFSWEBPVP8 S055>m2I$""xgn5M@':x%_o3+u+~]O~7/?rRK#O?zjz?ynu>fuW_nX/yW{/?Z_<]
2024-11-01 12:57:53 UTC	1055	IN	Data Raw: d2 2a b5 3f 06 67 31 72 32 a7 02 6b 19 ed 54 41 f6 68 00 14 4d c6 32 dd fd a3 e3 87 9d de 77 3c 3d 89 2f a8 28 82 98 1b cb c0 15 9a 69 a1 92 b3 9f 16 92 fb 38 d6 4b 9f 79 37 6d bd b0 95 8a 6f 15 8f 15 ac a6 62 c3 54 50 0b ec f9 26 2d e4 a9 69 a2 34 4e 06 4a 6e 50 9c 4a 76 f5 c5 8c fc 28 27 21 b5 f9 b9 20 6c 3d ef 59 8c 36 be a1 b8 bc eb fd 53 2f 07 6c e3 00 75 1c 65 45 22 32 39 26 7c 22 7b 42 41 e6 60 1a 7e fa 49 c0 94 79 5c a3 eb c4 c4 1e bf d8 58 02 c5 a8 68 89 98 c7 dc 0c 6e 90 cb c8 f6 dc be 20 32 0a a2 18 a4 10 39 6f 87 57 e4 2c dd c1 30 f7 4a d9 97 db ea c0 e9 cf d6 ad 8e ee 9d e9 a3 cb e6 1f 9b 3f 4a b1 25 99 3d 17 12 af 0a 02 a5 fb 42 08 35 07 5d 98 15 c4 5d 19 7f 74 6f 40 63 95 14 ad ec 04 09 49 6b de 2c 27 a2 d4 3d 70 e7 ad 38 83 61 1a 57 17 b9 Data Ascii: *?g1r2kTAhM2w<=/(i8Ky7mobTP&-i4NJnPJv('! l=Y6S/lueE"29&\|"{BA`~Iy\Xhn 29oW,0J?J%=B5]]to@cIk,'=p8aW
2024-11-01 12:57:53 UTC	4017	IN	Data Raw: f0 f0 de 96 31 b6 3a 24 c9 2e a3 b1 b8 5f da 72 58 63 ab 94 7f 31 bf 00 f6 a8 b8 70 e8 0e c6 94 df af f2 9a f5 9e f5 35 eb 3c 4a 2f b8 e4 90 6d c6 93 31 61 a4 68 0f 6c 75 09 9e 77 ed c3 8f 3a e5 f8 b3 cc 1f 47 90 ab b0 11 05 5b 49 7d 40 22 b5 ea ea 1d d1 08 22 5b f6 4f d5 14 2e 8b 57 29 29 84 fd d8 39 d7 ee c8 54 ea 7c 89 27 d5 a2 2b 97 df 57 23 dc 25 25 23 ee 5d 30 82 da f7 1b ac ba 81 a7 bf 5e e0 c7 c1 45 78 c2 4c 5d 6a 0e 60 b6 80 4c 08 a8 42 fe 26 34 7f 5f 0b 06 c7 64 82 33 8f 68 bc 3d 80 4e 3a 62 c5 34 d3 ee 6f 0f 81 fe 72 5d 61 84 9a e2 84 37 95 6e 0b 6f 82 31 14 1b 0e a0 6c 76 e5 27 47 26 91 29 00 a6 bb 00 55 be e4 41 22 b4 02 4b 03 48 fd 83 d3 38 fe d1 9e a0 7f 86 1e 0b 9f fb d3 85 9b ed 8d 89 db be f5 16 f0 c1 6c 5e d8 da d3 fb 98 a3 29 bb c6 6a Data Ascii: 1:$._rXc1p5<J/m1ahluw:G[I}@""[O.W))9T\|'+W#%%#]0^ExL]j`LB&4_d3h=N:b4or]a7no1lv'G&)UA"KH8l^)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.7	60317	108.138.7.113	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	393	OUT	GET /app/tracker/js/app.tracker-drupal.js?v=1729112303023 HTTP/1.1 Host: web.purolator.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:52 UTC	558	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 102203 Connection: close Last-Modified: Thu, 17 Oct 2024 03:13:33 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: k_NoS7OqJGGgDmwbvN97p3W0UYBPeEuU Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 12:57:53 GMT ETag: "34dbb3704d6be5e1f2f442368e7139a9" X-Cache: RefreshHit from cloudfront Via: 1.1 3a4987afa567e120a2fa0d82969d4c0a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: Az_Kd46hV38FW7cFd8ZUytVx2pJWibzTOCCiK1GOLh0FUS6Jdxulfw==
2024-11-01 12:57:52 UTC	16384	IN	Data Raw: 2f 2f 40 31 37 32 39 31 31 32 33 30 33 30 32 33 0a 76 61 72 20 64 61 74 61 4c 61 79 65 72 3d 76 6f 69 64 20 30 21 3d 3d 64 61 74 61 4c 61 79 65 72 26 26 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 61 70 70 3d 7b 74 72 61 63 6b 65 72 3a 7b 75 69 3a 7b 74 65 6d 70 6c 61 74 65 3a 7b 7d 2c 65 76 65 6e 74 3a 7b 7d 7d 2c 73 74 61 74 75 73 3a 7b 7d 2c 63 6f 6e 66 69 67 3a 7b 7d 2c 69 6e 69 74 3a 7b 7d 2c 73 65 72 76 69 63 65 3a 7b 7d 2c 75 74 69 6c 3a 7b 7d 2c 64 61 74 61 3a 7b 7d 2c 6d 6f 64 65 6c 3a 7b 7d 2c 6d 61 70 55 74 69 6c 3a 7b 7d 2c 71 75 65 75 65 3a 7b 73 75 6d 6d 61 72 79 3a 7b 7d 7d 2c 61 6e 61 6c 79 74 69 63 73 3a 7b 7d 2c 74 69 6d 65 72 3a 7b 61 75 74 68 65 6e 74 69 63 61 74 65 3a 7b 7d 2c 73 75 6d 6d 61 72 79 3a 7b 7d 2c 64 65 74 61 69 6c 3a 7b 7d Data Ascii: //@1729112303023var dataLayer=void 0!==dataLayer&&dataLayer\|\|[],app={tracker:{ui:{template:{},event:{}},status:{},config:{},init:{},service:{},util:{},data:{},model:{},mapUtil:{},queue:{summary:{}},analytics:{},timer:{authenticate:{},summary:{},detail:{}
2024-11-01 12:57:52 UTC	16384	IN	Data Raw: 68 69 70 70 65 72 2e 63 6f 75 6e 74 72 79 43 6f 64 65 3a 22 22 29 3b 72 65 74 75 72 6e 22 22 7d 2c 67 65 74 53 68 69 70 6d 65 6e 74 44 65 73 74 69 6e 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 29 72 65 74 75 72 6e 5b 5d 3b 22 6f 62 6a 65 63 74 22 21 3d 65 26 26 28 65 3d 22 73 74 72 69 6e 67 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 3b 69 3c 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2e 73 68 69 70 6d 65 6e 74 5b 74 5d 2e 70 61 63 6b 61 67 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 Data Ascii: hipper.countryCode:"");return""},getShipmentDestination:function(a,e){if(null==app.tracker.data.shipment)return[];"object"!=e&&(e="string");for(var t=0;t<app.tracker.data.shipment.length;t++)for(var r,i=0;i<app.tracker.data.shipment[t].package.length;i++)
2024-11-01 12:57:52 UTC	16384	IN	Data Raw: 69 74 28 22 3a 22 29 5b 31 5d 2c 22 70 72 65 76 69 6f 75 73 22 29 29 7d 2c 63 62 51 75 65 72 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 69 2e 65 76 65 6e 74 2e 6d 6f 64 61 6c 28 22 23 74 72 61 63 6b 65 72 2d 6d 6f 64 61 6c 2d 6c 6f 61 64 69 6e 67 22 2c 22 68 69 64 65 22 29 2c 75 28 22 23 74 72 61 63 6b 65 72 2d 73 65 72 76 69 63 65 2d 65 72 72 6f 72 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 7d 2c 61 75 74 68 65 6e 74 69 63 61 74 65 53 75 62 6d 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 65 2c 74 3b 6e 75 6c 6c 3d 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 61 74 74 65 6d 70 74 73 26 26 28 61 70 70 2e 74 72 61 63 6b 65 72 2e 61 74 74 65 6d 70 74 73 3d 30 29 2c 61 70 70 2e 74 72 61 Data Ascii: it(":")[1],"previous"))},cbQueryError:function(a,e){app.tracker.ui.event.modal("#tracker-modal-loading","hide"),u("#tracker-service-error").modal("show")},authenticateSubmit:function(){var a,e,t;null==app.tracker.attempts&&(app.tracker.attempts=0),app.tra
2024-11-01 12:57:52 UTC	14808	IN	Data Raw: 6c 65 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 65 6e 5c 2f 2f 69 2c 22 2f 66 72 2f 22 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 66 72 5c 2f 2f 2c 22 2f 65 6e 2f 22 29 3b 75 28 22 23 63 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 41 6e 63 68 6f 72 22 29 2e 61 74 74 72 28 22 68 72 65 66 22 2c 61 29 7d 2c 6d 73 69 65 76 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 28 30 3c 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 54 72 69 64 65 6e 74 2e 2a 72 Data Ascii: le?window.location.href.replace(/\/en\//i,"/fr/"):window.location.href.replace(/\/fr\//,"/en/");u("#changeLanguageAnchor").attr("href",a)},msieversion:function(){return!!(0<window.navigator.userAgent.indexOf("MSIE ")\|\|navigator.userAgent.match(/Trident.*r
2024-11-01 12:57:52 UTC	16384	IN	Data Raw: 69 2e 74 65 6d 70 6c 61 74 65 2e 63 6f 6d 6d 6f 6e 2e 62 75 69 6c 64 46 72 65 69 67 68 74 4c 69 6e 6b 28 29 2b 22 3c 2f 64 69 76 3e 22 2b 22 3c 2f 64 69 76 3e 22 2b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 75 6c 74 69 2d 70 69 6e 2d 69 6e 70 75 74 20 74 72 61 63 6b 65 72 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 27 2b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 27 2b 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 20 66 6f 72 6d 2d 67 72 6f 75 70 20 66 6c 6f 61 74 69 6e 67 2d 6c 61 62 65 6c 22 3e 27 2b 28 27 3c 74 65 78 74 61 72 65 61 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 27 2b 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 74 69 6c 2e 67 65 74 4c 61 62 65 6c 28 22 Data Ascii: i.template.common.buildFreightLink()+"</div>"+"</div>"+'<div class="multi-pin-input tracker-search-container">'+'<div class="row">'+'<div class="col-12 form-group floating-label">'+('<textarea class="form-control" aria-label="'+app.tracker.util.getLabel("
2024-11-01 12:57:52 UTC	16384	IN	Data Raw: 61 21 3d 65 26 26 28 65 3d 61 2c 75 28 22 23 74 72 61 63 6b 65 72 2d 73 65 61 72 63 68 2d 73 69 6e 67 6c 65 70 69 6e 22 29 2e 76 61 6c 28 69 29 2c 61 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 74 69 6c 2e 67 65 74 51 75 65 72 79 50 61 72 61 6d 28 22 73 64 61 74 65 22 29 2c 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 74 69 6c 2e 73 74 61 74 65 4d 61 6e 61 67 65 72 28 61 70 70 2e 74 72 61 63 6b 65 72 2e 64 61 74 61 2c 22 3f 70 69 6e 3d 22 2b 65 2b 22 26 73 64 61 74 65 3d 22 2b 61 2b 22 26 72 65 66 3d 22 2b 69 29 29 2c 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 27 29 3b 69 66 28 70 3d 28 70 3d 28 70 2b 3d 27 3c 64 69 76 20 69 64 3d 22 74 72 61 63 6b 69 6e 67 2d 64 65 74 61 69 6c 22 20 63 6c 61 73 73 3d 22 72 65 Data Ascii: a!=e&&(e=a,u("#tracker-search-singlepin").val(i),a=app.tracker.util.getQueryParam("sdate"),app.tracker.util.stateManager(app.tracker.data,"?pin="+e+"&sdate="+a+"&ref="+i)),'<div class="results-container">');if(p=(p=(p+='<div id="tracking-detail" class="re
2024-11-01 12:57:53 UTC	5475	IN	Data Raw: 6e 28 61 5b 74 5d 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 61 70 70 2e 74 72 61 63 6b 65 72 2e 6f 76 65 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 2b 3d 61 70 70 2e 74 72 61 63 6b 65 72 2e 75 69 2e 74 65 6d 70 6c 61 74 65 2e 73 75 6d 6d 61 72 79 2e 62 75 69 6c 64 4f 76 65 72 28 61 70 70 2e 74 72 61 63 6b 65 72 2e 6f 76 65 72 5b 74 5d 29 3b 72 65 74 75 72 6e 20 65 2b 3d 22 3c 2f 75 6c 3e 22 7d 2c 62 75 69 6c 64 45 78 63 65 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 65 3d 27 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 22 20 64 61 74 61 2d 70 69 6e 3d 22 27 2b 61 2e 70 69 6e 2b 27 22 20 64 61 74 61 2d 65 72 72 6f 72 3d 22 27 2b 61 2e 73 74 61 74 75 73 2b 27 22 3e 27 2c 65 3d 28 65 3d 28 65 3d 28 65 3d 28 65 Data Ascii: n(a[t]);for(t=0;t<app.tracker.over.length;t++)e+=app.tracker.ui.template.summary.buildOver(app.tracker.over[t]);return e+="</ul>"},buildException:function(a){var e='<li class="list-group-item" data-pin="'+a.pin+'" data-error="'+a.status+'">',e=(e=(e=(e=(e

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	60318	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:52 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:52 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:52 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125752Z-16ccfc49897z67z2hC1DFW6cd800000000mg000000009830 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:52 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.7	60325	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	523	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:53 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4779 ETag: "a3612075aea5509a1b689e591f9a0cce" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Fri, 01 Nov 2024 12:57:53 GMT
2024-11-01 12:57:53 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-11-01 12:57:53 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-11-01 12:57:53 UTC	1378	IN	Data Raw: 6f 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 Data Ascii: om()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.one
2024-11-01 12:57:53 UTC	645	IN	Data Raw: 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 62 65 31 38 30 36 36 38 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f Data Ascii: on(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.be180668.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Dispositio

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	60328	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 24f20e23-801e-0078-0539-2bbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125753Z-16ccfc498972q798hC1DFWe4nw00000000mg00000000ffz1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:53 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	60333	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d24b0423-701e-0098-2b81-2a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125753Z-159b85dff8f45jz4hC1DFWb0c80000000130000000004vxb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:53 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.7	60331	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 48ab1ac5-a01e-0070-1038-2c573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125753Z-16ccfc49897vgjnwhC1DFWbx9800000000bg000000001zeb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:53 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	60321	142.250.185.196	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	978	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker&scrsrc=www.googletagmanager.com&frm=0&rnd=2035600518.1730465871&auid=884492963.1730465871&npa=0&gtm=45He4au0v72392466za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&tft=1730465871138&tfd=10323&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:53 UTC	581	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Pragma: no-cache Content-Type: text/plain Cache-Control: no-cache, no-store, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.purolator.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.7	60341	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: e515af6a-f01e-0099-70a8-2b9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125753Z-16ccfc49897z4cgphC1DFWt0y400000000cg0000000029y2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:53 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.7	60344	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:53 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:53 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: dd9de73b-201e-00aa-8011-2c3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125753Z-176bd8f9bc5bc7vmhC1DFWbxbs00000000zg000000003bmw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:53 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	60343	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	661	OUT	GET /f00000000094873/www.purolator.com/themes/custom/purolator_theme/logo-small.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:53 UTC	828	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1642 Connection: close x-amz-id-2: 3RNSxhRczo/y6koCwioWQpPeRTsklKzNUBD9jarX4474xsfWdYND8YA+reAI3jFfDmhegSmNxXE= x-amz-request-id: E3QEV6WNENG5B7ZS Date: Fri, 01 Nov 2024 12:57:50 GMT Last-Modified: Fri, 07 Jun 2024 20:42:08 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "295e04cc4b99728af23978c96761fcf9" x-amz-server-side-encryption: AES256 x-amz-version-id: 918TiJ7CnYWQ0l2t7FDuWQWHqth8hP.i Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 26cdacf328fe4eb4e28173938ab3e92c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: z5FRALYhr4xWCCOfbO2pXI6pMZIXtQjIDVchK8iCSK8SOHCKclR_ug== Age: 3
2024-11-01 12:57:53 UTC	1642	IN	Data Raw: 52 49 46 46 62 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 56 00 00 3b 00 00 41 4c 50 48 18 03 00 00 0d 90 68 db 92 21 59 31 cf b6 6d db b6 6d db b6 6d db b6 6d db b6 6d db 66 44 66 e4 ad fe 80 88 80 e0 b6 8d 24 89 35 99 73 b7 fa ac 6a cf 3c 81 f0 2d 64 9d b2 69 c3 10 51 a7 e1 6c 35 76 e5 55 ad db 96 a2 78 65 86 f1 05 7c 5c 4c ff a5 0e 47 2a a3 f0 d5 3a 0f 71 73 78 4f 6d 49 e5 e2 63 b8 72 b9 88 fb 3d 9e 89 9c 4f 67 0c bc 22 0f 20 61 23 ef a9 19 a9 bc d8 02 d7 95 a4 d1 4c 90 ba 3a 93 e1 15 b1 9c 74 fe 39 53 8d 54 be 4d 87 6b 6a 7a 74 fa eb c5 f0 0a d4 40 7a b6 83 29 40 be d1 73 35 fb 51 6b a3 b3 9b 80 ac 6b ff 6d 06 93 38 be 6f 3c 9a 86 c6 42 de 53 2b 52 b9 7e 1d ff 68 1d 66 61 4b eb 8c 85 57 a2 44 d6 a3 d6 88 54 de ac c1 cf 42 d6 9e 03 34 d1 Data Ascii: RIFFbWEBPVP8XV;ALPHh!Y1mmmmmfDf$5sj<-diQl5vUxe\|\LG*:qsxOmIcr=Og" a#L:t9STMkjzt@z)@s5Qkkm8o<BS+R~hfaKWDTB4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	60345	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	474	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-instagram.png?itok=_EWgc0LP HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1452 Connection: close x-amz-id-2: 8sR6YMyNKcrfusCz9atyiKsmVAks6zSQOK7/NEnFyRcv9atJOGfoC1v3ZjiK7EiuF4OXzjmdI58= x-amz-request-id: 783084Y7XSWSG97Y Date: Fri, 01 Nov 2024 12:57:55 GMT Last-Modified: Thu, 25 Jul 2024 14:37:25 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "02b55647b632c3197616c713651e0987" x-amz-server-side-encryption: AES256 x-amz-version-id: VUDmJpCwMx3nAVHQlG5GZUy8MptPzk0q Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 1b05f9178c1c0be702b00f1d1f0bcff6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: JcnM8ivO_BkOxmotjz8c5FM5aEj1bjWt1YmSTRP66BBKZyIEzqv6QQ==
2024-11-01 12:57:54 UTC	1452	IN	Data Raw: 52 49 46 46 a4 05 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 aa 00 00 00 01 80 64 db b6 69 e7 36 ec db b6 ba f3 cb b6 d1 0e 2b 4e 4a b6 ed a7 06 04 cf 3b 23 a5 54 22 62 02 c8 ef b5 65 fa fb f7 14 c3 29 c9 50 8f 87 c3 9c 4b 8e 63 eb 53 fd 6d 9f a4 e4 27 66 4a 42 f2 13 35 25 a2 f9 c4 75 08 9d 03 3d 0a 18 3e 91 3d bc 12 54 87 37 85 5a e3 9d 42 5d f2 9e a1 5e 79 14 14 c3 63 f0 38 28 ee bf 0e 03 c5 f0 28 bc 67 a8 57 de 29 d4 25 6f 0a b5 c1 ab 40 f5 78 16 a8 00 8f dc 02 bd 12 41 0b 90 4f 88 a4 60 2a 44 3c 05 52 21 52 43 fb 00 c7 09 22 33 50 59 3a 7d a4 38 65 a9 e7 d3 a5 46 84 fc a1 56 50 38 20 d4 04 00 00 b0 18 00 9d 01 2a 31 00 30 00 3e 31 14 89 42 a2 21 21 16 a9 9e 48 20 03 04 b6 00 58 8f 6f 5b 7f ce bf 1a 7d 86 29 ef Data Ascii: RIFFWEBPVP8X0/ALPHdi6+NJ;#T"be)PKcSm'fJB5%u=>=T7ZB]^yc8((gW)%o@xAO`D<R!RC"3PY:}8eFVP8 10>1B!!H Xo[})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	60346	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	473	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-linkedin.png?itok=t2D5awqO HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	840	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 766 Connection: close x-amz-id-2: kKnKF0gL7Q8oZAdf6e0jF4sOZfCZPi2w7VmHj6xL1JBSHUCpI1ZfCDaVKIOmyA7NJWA1kEnx3B5jtiicv7MTP8bKLnKMIBWd x-amz-request-id: 783AFNXRA635H43M Date: Fri, 01 Nov 2024 12:57:55 GMT Last-Modified: Thu, 25 Jul 2024 14:37:24 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "5a95059334505d7d22c64e831e2623fa" x-amz-server-side-encryption: AES256 x-amz-version-id: CHynKMiEVIXi4P6qcOPxSOg42z_6zK8w Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 c72aed82acf017b1476dc574b8d5da80.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: ZLoIDkS3xmH6Pfc4vsLwieew_vn7dWjfdoTgobgBoarBFQ1Dlf3oXw==
2024-11-01 12:57:54 UTC	766	IN	Data Raw: 52 49 46 46 f6 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 30 00 00 2f 00 00 41 4c 50 48 3d 00 00 00 01 3f 40 26 6d 9b 1b 91 30 9f fb 17 11 11 67 0a 35 91 24 29 f3 ac e4 04 9c 37 f2 9f 3d 84 9f 44 f4 7f 02 38 a8 9e 3b a5 80 e5 de 0e b1 69 42 6e 5e ff 56 6c 9a 60 9b 3a a8 6f 91 c2 8b 00 56 50 38 20 92 02 00 00 50 11 00 9d 01 2a 31 00 30 00 3e 29 10 86 42 a1 a1 0f 55 76 00 0c 01 42 5b 00 2f fa 40 0d 65 6e 4b f8 57 f8 cd d1 73 ae 9d d9 c9 cf e4 9b e7 5f 6d 3e fb bf b0 68 a8 f3 01 fa 29 fa 73 ec f5 fa 81 ee 03 f1 9b 85 13 f5 57 d8 03 f4 a3 d3 53 d8 de b2 e5 74 5f d9 b3 20 64 81 7b 01 a2 e9 90 45 9b 1f c6 ff bf 7f cc f5 5c ff 59 c0 00 27 56 ad 69 c6 38 a1 1e d0 90 65 4e f5 69 44 bc 6d 82 7e 69 51 83 e9 6c 58 c7 33 b1 db 3a 7a 30 db 45 93 60 3d 00 Data Ascii: RIFFWEBPVP8X0/ALPH=?@&m0g5$)7=D8;iBn^Vl`:oVP8 P*10>)BUvB[/@enKWs_m>h)sWSt_ d{E\Y'Vi8eNiDm~iQlX3:z0E`=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	60347	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	433	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-location.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 306 Connection: close x-amz-id-2: Neg7KeYkDoLpTwc+kh+fulhtX/T2r/hl046TqTB8jeJsz5lZyf9GiaZkYJZetHxU9rXwIxMn56I= x-amz-request-id: 783139RNZ3ZZKXCC Date: Fri, 01 Nov 2024 12:57:55 GMT Last-Modified: Fri, 07 Jun 2024 21:41:53 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "dc6371e7f75249692103383820237d1b" x-amz-server-side-encryption: AES256 x-amz-version-id: 3OlaG4Z9od.pHL_Dy4mqPdgcxwviv8RF Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 7654e8d5fbf72d40d262281571df7bae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: a1YJMokMZGBpqcRAm20Dpg1W7zXSvAcBexd8R8S6sPHyLN2YUg-FLg==
2024-11-01 12:57:54 UTC	306	IN	Data Raw: 52 49 46 46 2a 01 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 13 00 00 13 00 00 41 4c 50 48 7b 00 00 00 01 77 20 10 20 24 38 f1 3f a8 21 22 12 3f b8 a9 6d 5b 8d c2 cc 0a 22 21 0a 18 ab 48 c8 1a 01 a3 81 51 c5 af a3 22 eb 57 53 a1 02 66 74 11 54 10 d1 ff 09 d8 fd 0b c5 63 91 74 2d 4a 6e 45 e9 ab 08 fc 4b 7e 8a f2 cb fe 91 bf c0 a7 f7 33 77 84 8e eb 98 81 da 22 44 0a 05 d8 59 ad ba cb d5 8a 12 e0 80 40 26 31 62 33 6d cb 16 19 23 c0 21 81 4c 5c df d7 84 cb bf d0 7c 15 01 00 56 50 38 20 88 00 00 00 b0 05 00 9d 01 2a 14 00 14 00 3e 31 14 88 42 a2 21 21 18 04 00 20 03 04 b2 00 3b d0 f9 cf e2 4f 08 09 83 3e 00 0f d6 6f 50 0f ec 1e c0 1f b3 be 89 e0 a0 c9 24 00 00 9b ff ff b6 87 d6 87 d0 e8 11 19 ba fc 32 c1 9e f9 a7 a7 5e bd 34 e1 12 1f ff fe b9 77 ae Data Ascii: RIFFWEBPVP8XALPH{w $8?!"?m["!HQ"WSftTct-JnEK~3w"DY@&1b3m#!L\\|VP8 >1B!! ;O>oP$2^4w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	60348	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	430	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/menu-link-icons/icon-track.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	820	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 940 Connection: close x-amz-id-2: K9GNtlLiqHmQVHCMSyYrXIZFrPsUSoPdkUF09VqkNUU2MQFf8a13PF93COAwHAto/zhtohTtn9k= x-amz-request-id: 7830QNJ0Y4D27Y5Y Date: Fri, 01 Nov 2024 12:57:55 GMT Last-Modified: Fri, 07 Jun 2024 20:47:49 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "ac17fd6f6b966010a8abc60dab53773d" x-amz-server-side-encryption: AES256 x-amz-version-id: uWRQjevfWVCFsSyFRuwOXe.FIXB5bJBU Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 884d101a3faeefd4fb32a5d2a8a076b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: c7PW974Rk61wg2BAhpcJ8IkE_YSvCtsItUUD-jdC9cscJxGPGSU2uw==
2024-11-01 12:57:54 UTC	940	IN	Data Raw: 52 49 46 46 a4 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 1f 00 00 21 00 00 41 4c 50 48 f9 01 00 00 01 90 2b 6d ff e2 2a ef 71 d7 0a 87 9c 45 3b 86 ca b5 4e 1f 6e c2 21 67 70 77 77 77 77 a7 a2 a2 0b ee 17 e0 84 cd 0c d5 f1 19 f2 22 9b 45 2f 20 22 26 80 ff 68 6d 6a 7f e6 73 97 7b 7f 57 cb a1 36 23 7f 53 e5 fa 6e 0b fe 9e e0 a9 6a d7 9d f9 77 7f d3 c8 ac fa a5 b5 19 f6 c6 eb 55 60 70 a8 5e e9 05 bf b2 2c 1c 1c 51 f5 54 f3 f3 00 4a 47 df 8b b3 5c 9f 55 fd b4 5e 6d 05 4a 67 bf d5 38 73 d5 f5 40 d0 a3 d7 8b 60 d0 43 23 0b 71 5a 7b 02 38 a4 b9 26 48 bc 51 6d 2b 30 77 30 34 87 7a 98 ba 36 4d 43 f9 43 f5 e6 88 bd 51 cb 7c 5e 0e 69 6d ab 4b 69 67 23 cc 56 57 15 11 35 59 9d 01 8d 9d 9a 3a a0 37 a1 ec a3 5e 85 02 5c d1 4f c5 70 53 0f 66 34 0d 53 f4 eb Data Ascii: RIFFWEBPVP8X!ALPH+m*qE;Nn!gpwwww"E/ "&hmjs{W6#SnjwU`p^,QTJG\U^mJg8s@`C#qZ{8&HQm+0w04z6MCCQ\|^imKig#VW5Y:7^\OpSf4S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.7	60349	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:53 UTC	419	OUT	GET /f00000000094873/dev.purolator.com/sites/default/files/FSR-Certified_0.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	822	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13586 Connection: close x-amz-id-2: vAyuwar/Y7db3aoAqBPQu3uYqGtwQR0aWoxNhzlxvhGXyYlF13TD4pVNdabNXtkNgKDSu5s+9Fs= x-amz-request-id: 783CV8D20YZKGWN2 Date: Fri, 01 Nov 2024 12:57:55 GMT Last-Modified: Mon, 31 Jul 2023 16:29:48 GMT x-amz-expiration: expiry-date="Wed, 22 Jan 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "5f1315ffd12ed804ab6c3d0a5b023e6e" x-amz-server-side-encryption: AES256 x-amz-version-id: lmbPNzj41Q027zSaX26rpg6V2ydwxJQQ Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 25ef9a7ab53a2ce8c41854fb4c1b243e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: pJBtxtmJRfYQWTeHgseH0cgWPYuKoiRhEc27OQYbapv8hEYrv9HLTw==
2024-11-01 12:57:54 UTC	13586	IN	Data Raw: 52 49 46 46 0a 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 8f 01 00 c2 00 00 41 4c 50 48 e7 1d 00 00 01 f0 c7 ff ff eb a4 fd ff 3d 0e 0a 0e 04 0e 58 57 55 0c 55 c4 0e 35 68 eb 1e a1 ad 5a 17 46 3b 5d 6d 1c 1d 8a 23 da 29 38 62 a7 e2 08 6a 6d dd 80 0a f6 a5 d6 e0 aa 45 c5 50 2b 5a 13 15 ac 82 03 6b 70 bf 0a ea 71 14 05 92 70 ff 23 cf 73 12 b2 38 7f 46 c4 04 90 1f 5e bf 51 d3 f6 1d 62 5e e9 16 3f 6c d2 a4 c9 93 a7 69 e7 24 4a 9c f3 99 76 da e4 49 93 df 1d 3e a0 7b a7 98 98 56 11 f5 48 9e 0e 08 6f fe dc cb f1 6f 7d f4 43 fa d6 df 4f dd b8 2e 3c 7c 6a b7 d9 ac 10 17 2c 12 05 48 b5 d9 6c 4f 1e 96 de bc 74 d4 90 be 7e c1 f8 b7 5e 6b db a2 49 80 bc 53 3f 24 a2 f3 eb e3 17 ae 39 f0 77 c9 ff ab ac 00 04 41 c8 cf ca 32 18 52 26 4c d0 68 34 51 8a a8 28 Data Ascii: RIFF5WEBPVP8XALPH=XWUU5hZF;]m#)8bjmEP+Zkpqp#s8F^Qb^?li$JvI>{VHoo}CO.<\|j,HlOt~^kIS?$9wA2R&Lh4Q(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.7	60362	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	536	OUT	GET /ct/lib/main.be180668.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:54 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27513 ETag: "c5cae4182177ca41c1337703e080917b" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Fri, 01 Nov 2024 12:57:54 GMT
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 1f 8b 08 08 f0 5f 21 67 00 03 6d 61 69 6e 2e 62 65 31 38 30 36 36 38 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 68 7b 33 60 0f 5b 3b 2c dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 34 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 8c 3e 6c a7 ba b1 97 d8 42 35 f3 69 c6 44 91 71 3b 3b 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 ed 26 cd 44 1e 3e 6c b7 2e 83 47 c3 79 bc 5e db 7c 58 b6 bb dc ad af 13 02 37 6b 7a e0 b9 9c 10 dd ba 4d 86 d7 94 b9 c9 70 4e 33 f8 b9 a0 15 32 01 2f 03 ba 64 98 e2 25 d9 6c 3e 5f fe c9 e6 62 b8 60 cb 84 b3 5f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: _!gmain.be180668.js\ob%8,h{3`[;, Pl:Py47>;%4D?C`YHRn3pg>lB5iDq;;)^$:<]&D>l.Gy^\|X7kzMpN32/d%l>_b`_e^v{`fY\|f!b"d[zA<XWo/
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 9a 6a 2d f8 c6 73 20 ff df 09 bb 83 20 77 bf 11 46 04 97 de e5 79 6a 30 b5 5f 28 03 5d 43 d9 6a 99 9d 59 96 23 ea e8 02 b1 a3 4d 67 9a 8e 67 ac db 81 3f 9d 92 fc 2e 11 73 0c 49 1e e6 71 ce ac 38 9f 27 89 15 ca eb 35 c8 22 f7 cb 1b 88 5a e3 ec de 0a 75 bc 3a 95 ad 52 9f 43 7d 39 28 af 7b ca 97 e8 be bf d9 35 1e d5 75 9e 07 fa ad 79 3e 08 6a 0a fe 04 f6 13 35 3d 75 5b 92 09 5e 97 83 ae d8 b7 1a c7 bb 77 ef 7c d5 7c 09 3f 26 e3 ea c9 27 63 d4 32 52 0e a5 07 68 41 c5 a9 0d 7c e3 28 3d 3f a7 77 2c fb 08 a4 6c 02 56 0e 36 2d b5 bc 54 db 34 c9 3e 30 59 c0 40 a0 08 1b 97 ca 77 f2 cd 46 a9 26 27 ef 30 c0 d1 6a 53 ba 08 4b f6 67 75 7f b6 d9 30 b3 e3 cc b8 0e 19 89 a8 b7 f3 2a 4c 17 da 22 6a 73 75 55 3f c6 75 15 54 80 6f 92 8b 52 2f ad 28 97 56 b2 0d a1 a7 54 c6 5e Data Ascii: j-s wFyj0_(]CjY#Mgg?.sIq8'5"Zu:RC}9({5uy>j5=u[^w\|\|?&'c2RhA\|(=?w,lV6-T4>0Y@wF&'0jSKgu0*L"jsuU?uToR/(VT^
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 3f 07 e9 53 af c0 55 e2 d0 d5 16 c5 61 4d 33 08 1b d7 86 0d 5d 44 f4 46 2b 68 4b 64 32 8c 6f 6e d6 f7 b6 7a d2 0c 2c 21 c2 b9 07 8d b8 8f 16 53 72 db 1a d6 ec bc 5c 06 48 f7 ee bd 03 63 56 e2 7f bb fd 36 54 9e 80 ae dc 6f c3 d3 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f fe f4 e9 f4 d7 93 8f 5f 2e 7e 79 ff 3f 17 1f fe f8 72 72 4a 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fd 25 fe a6 ba 60 e2 02 58 76 93 a6 eb d3 e4 df 8c 1e 83 80 c3 fd aa 75 fb d3 9e 04 75 c5 d6 55 21 d1 5e 05 b0 4a cf 4b 23 a4 1a b7 5d c1 Data Ascii: ?SUaM3]DF+hKd2onz,!Sr\HcV6TouzWA@Qpgo_.~y?rrJvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%`XvuuU!^JK#]
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 4e ef b7 55 cb e3 b5 c3 45 59 f4 fc 62 ff 06 fa 60 17 92 4f ba 0e 3c 80 89 16 ee c2 8d 9b 75 c5 f2 d5 bb c6 91 b9 27 2b e4 2d dd 77 6a 75 6a 70 4c d8 c3 4e 0a 21 61 c9 5a ae 6e fa b2 a2 9b ae 0c 36 46 36 aa 63 cb e7 57 c7 30 f5 2a 8b e2 bb 05 02 94 3c 6f bb 1b f7 fc d7 e9 e7 4f 74 2f 3d f3 20 4f 7c e9 93 4c 2e 1e 54 0a 77 6b 27 d2 88 97 45 13 54 9c 8b 38 cb d4 11 47 17 b4 72 3b 55 a5 d1 b1 f7 76 52 9f 0e bd 34 4e 49 8a 1f c0 10 83 f6 75 1e b8 b1 94 09 51 76 43 f4 8a 84 0b e5 df 58 24 9c ae 93 a1 5f b2 7b 3c 2f 84 27 50 e6 73 96 e7 e0 cb ef 53 be d0 0a aa 0f 89 d6 f9 e7 ab 3a 5a 80 d5 7b 66 bc f0 ca 52 f4 5a 4f 13 7d 68 9e 40 7b 55 fa 64 79 c2 20 ed 3a 5b b4 7b 18 72 f7 64 a0 a2 c2 9c ac 0a 14 3a 8f c6 82 df e9 99 a1 81 39 db 8b da 97 80 d5 93 25 3e 99 86 Data Ascii: NUEYb`O<u'+-wjujpLN!aZn6F6cW0*<oOt/= O\|L.Twk'ET8Gr;UvR4NIuQvCX$_{</'PsS:Z{fRZO}h@{Udy :[{rd:9%>
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: af ca 9b 51 36 60 b3 fa d6 41 fe 0d 98 59 c0 c7 ea 3f fe 91 95 28 2b cf 89 a5 03 cc fb d1 64 0a ee 8c e0 09 70 5e e6 41 13 87 9d 57 d5 e2 34 f2 d9 48 9e 48 ec fa 2a 59 1d 17 d3 d9 f7 36 32 ad df d9 e4 4c e8 cf 6b e4 f4 aa ec 2e 73 99 93 82 9c d4 7f f7 a0 29 7b 78 d0 b3 5d f6 f6 3f 57 2f ff d8 43 fb df c4 c0 4f b4 38 56 b7 9b f5 6e 12 ee 9f 3a 95 ab c0 fe 8f bd 6b 6f 6a 1b 59 f6 5f 25 71 65 39 d2 4a 36 7a 3f 00 2d 87 f0 8a 13 02 5c 03 c9 6e 1c a0 14 23 c0 09 48 5e 5b 82 64 b1 bf fb fd f5 cc 48 1a db ca ee 49 d5 bd a7 ea 6c 9d 3f 12 a4 79 f6 f4 f4 f4 43 d3 dd 5e 68 a7 9b 12 3d 72 af 0e 39 1e c2 50 d5 0d 28 08 8c 83 0d 4b 07 10 1e bc b3 14 ea 3b 6e be cc ab 12 74 34 e4 de 68 5a 12 86 7e 3e 17 c2 3f fe 8e 6f 4b f3 2d 21 0b 9a 59 0a ce 62 9f f6 59 5c 16 9b 34 Data Ascii: Q6`AY?(+dp^AW4HH*Y62Lk.s){x]?W/CO8Vn:kojY_%qe9J6z?-\n#H^[dHIl?yC^h=r9P(K;nt4hZ~>?oK-!YbY\4
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 60 6a 7a 53 db 52 f1 b8 7d 17 df 8f 92 2b 95 8f f0 62 b5 93 e3 b0 93 1f ad 58 10 d7 b0 97 f0 22 9f 89 06 4f d0 b8 f6 75 bd 4a 38 dc c5 38 79 96 66 69 9b 51 10 04 4c e5 e3 d6 f9 98 76 81 fb f1 15 a5 78 ca d8 69 12 4d 74 d6 81 67 68 e4 99 c8 44 0c db 6d fc 40 26 ce 12 91 2a ea b3 fb 24 bf cd ae 28 63 99 b2 98 65 50 7d 12 a1 76 29 73 d8 2d e5 f9 fc c7 05 89 7b 1b 14 bb 86 f5 95 a9 1e 59 3a ad 04 9c 76 dc 4f 78 1e 90 da dd 85 ab 0f 4f b3 f5 61 e7 a0 7b 72 1a 3d ed 1d 5f 1e 1c 6d 6f 1d 5c 9e 9c 1e f5 b6 f6 77 d7 9e a0 7c 63 b5 6b a6 61 e8 c5 78 b8 d6 ba 1e 5d 52 9a ab bb 13 40 1e df 24 ad 99 be b3 db eb be 83 e9 bc 7b dc 7d b3 dc 7e 34 4c db c0 d1 f0 21 b9 6a 27 a3 e1 17 74 38 d9 ee 6d 1d ef 5e d2 8c bb 87 bb bd 93 e6 4e 93 c1 38 1e 25 6d 0a b3 4a 52 8a fb 9b Data Ascii: `jzSR}+bX"OuJ88yfiQLvxiMtghDm@&*$(ceP}v)s-{Y:vOxOa{r=_mo\w\|ckax]R@${}~4L!j't8m^N8%mJR
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: b7 bb d7 fd 55 6b ed 7e a5 78 7c 68 72 ff f8 69 f2 0f 71 72 e3 67 3f 4d f4 67 9f 8a fc d9 35 dd 21 b3 aa 16 cb aa 96 b2 b9 a1 d3 70 f2 5a 4c 28 b0 9c a9 f8 cf 33 d0 25 25 31 8c a3 ac d3 53 e8 30 aa eb 69 99 df ad dc d1 b4 e2 ec d4 86 41 d0 6b 24 ff 32 41 4e 8b 71 eb 3c 92 12 c9 aa cd 98 9c 4e 0b ce 2a 99 ac ad 1f 27 e5 e3 66 be 96 28 a6 ad 62 9f 6e 63 cb f5 40 86 fc 9b 1e f1 7a fe c9 93 a7 1e 60 60 e1 50 bd 02 6e fe e4 88 e6 f4 eb 10 59 87 05 73 66 9d 53 12 f8 2c e9 11 f5 3e 6c ee 90 8b 70 57 f6 01 52 8e fb 56 5a ab 2d 95 5c f2 cb 01 4e 1b 06 20 34 90 1c e2 49 11 06 2c ab 5c b5 01 9b 39 ce 5b d5 fd 4b d3 fc b7 25 26 64 95 2e 93 54 ba 0c 84 51 c8 1f db d3 32 a5 43 a1 98 c4 17 0a 05 27 fc 5b d4 37 4d d3 b3 5d cb 31 02 ba 53 0b 1d c7 77 1c 53 b7 0d 27 b4 2d Data Ascii: Uk~x\|hriqrg?Mg5!pZL(3%%1S0iAk$2ANq<N*'f(bnc@z``PnYsfS,>lpWRVZ-\N 4I,\9[K%&d.TQ2C'[7M]1SwS'-
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: a9 1d 81 8b b1 4c 0b 0c 5d d2 40 00 a4 0b f1 09 44 cc 29 23 c0 43 88 26 24 eb 6b bd 04 7b 1a 42 66 db 04 56 ad a2 f8 9e e7 13 86 3d 59 59 81 36 0c c9 ed 04 24 35 25 bd 05 ba 02 a4 17 f6 4b 56 61 50 ed 40 19 80 9a 21 6b 33 96 e3 91 0e c0 16 51 2b 36 be 1b d8 50 47 02 59 c7 31 3d 74 f0 43 db 93 b4 1d d3 c4 4e f8 00 c6 91 15 1f 17 c4 e2 90 bb da 9c 0e e4 42 87 30 40 99 ae ac 0e 11 de 03 9a c3 96 35 23 ec 01 06 f3 b1 77 b2 92 04 89 eb d0 b6 11 e9 d5 fa 92 09 f2 f0 dd 10 74 25 ab 4e 58 aa e1 63 eb e6 94 28 40 63 04 1e 84 ad 31 a7 4f 99 84 0d 88 76 7b 4e b5 72 41 d1 2e 4e 87 2f 6b 59 a6 e1 61 6a 83 8e ea 9c be 45 52 9d 54 2b 49 f5 32 1d db c2 99 05 10 b2 16 66 3a 1e b4 0a 13 7b 26 29 64 81 8b 53 13 02 a1 92 6a 86 13 05 45 01 1b 61 49 5a 1a b6 17 20 e2 f4 b8 92 Data Ascii: L]@D)#C&$k{BfV=YY6$5%KVaP@!k3Q+6PGY1=tCNB0@5#wt%NXc(@c1Ov{NrA.N/kYajERT+I2f:{&)dSjEaIZ
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: 8b ab aa fa 77 5e fd bb 56 94 d5 e0 1f 0f 55 f5 6f bc fa 37 2d 2e ab c1 52 be 55 d5 1f 78 f5 07 ed ba ac 06 97 79 ac aa df f3 ea f7 da a4 ac 06 e3 21 ea f9 0b fb 7f 2c ec ff b9 8f 74 79 25 ab 17 ec 6a a2 ed f1 a2 47 70 02 0e 55 dd 20 29 82 3f 0b d4 92 d5 ae 08 3e 5d e2 33 a8 ca de 95 b4 c0 0d 7f 45 b0 ee 12 75 cc b2 57 04 13 2f 11 66 5b 55 e1 6f 25 39 40 b5 ab 0a 3f 94 f4 a0 3b f5 44 ef 4b 82 a0 ef 8a 94 97 e8 c7 be 09 2c ba 5e 14 d2 ad 38 cf 4c 88 c3 f3 7f e0 4d 50 fd e6 fa 38 7a ae 24 74 d7 af 3f 4d e4 5f e7 28 a2 a2 bc 2d 9f e9 e9 da d2 b7 9c 42 f8 14 54 bf 7e 0e 71 42 de 05 f4 19 24 99 77 e5 28 3d 07 f4 eb c5 1f 17 49 4a ff 81 a2 f2 1f 28 1a fd 07 c6 b5 ff c0 6c bd c1 1f 63 3a a5 9f 0f fe 61 47 82 f8 ef e6 48 10 2f 38 12 d0 dd 59 ba c2 7e f5 7e 29 c0 Data Ascii: w^VUo7-.RUxy!,ty%jGpU )?>]3EuW/f[Uo%9@?;DK,^8LMP8z$t?M_(-BT~qB$w(=IJ(lc:aGH/8Y~~)
2024-11-01 12:57:54 UTC	1378	IN	Data Raw: d7 42 13 9a b0 75 e9 4a 23 1d 27 28 0f 43 14 bd 22 44 52 6f 18 f9 9b 1a a3 d3 76 d8 c4 30 8e 1b 5d 15 38 ea c6 d3 b7 61 02 bb 79 98 77 dc cb 56 3f 08 17 d1 7b e0 f1 d4 98 d1 7f 0e c5 ce 48 bd 98 f9 9e 95 a4 c9 9c 03 ed 1c 91 73 25 ab 44 09 d0 fd 0d ff c0 87 a9 90 37 79 cf af fa cb 78 85 76 91 b8 56 18 3a c1 9f 22 c3 b1 dc 8a d3 30 cc 3d e8 60 9c 28 e4 98 46 b2 09 6a 96 da b1 28 e8 91 6a 52 c3 7d 8d b2 08 68 39 75 e5 9d 10 00 4e 5d c0 0a 5e d8 6a 69 bc 91 12 0f 76 07 33 41 8e a4 30 60 a2 21 e3 32 8c d1 f2 cd d7 e5 aa bd 5e 21 b0 94 72 a8 95 b5 27 1d 9a e4 e0 e9 5a 54 2c 6f 4d 89 4d 10 c1 6a 30 2d 25 f7 60 9c a0 95 3d 30 09 4d 5d 83 59 a4 c1 56 de 84 2c a5 5a 28 dd cf 6f 26 ea 86 8d 73 3d 8a b8 8c ce 01 db 60 81 81 70 fc ad af a8 f2 57 ea 26 6d 65 08 64 b2 Data Ascii: BuJ#'(C"DRov0]8aywV?{Hs%D7yxvV:"0=`(Fj(jR}h9uN]^jiv3A0`!2^!r'ZT,oMMj0-%`=0M]YV,Z(o&s=`pW&med

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.7	60350	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	711	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/purolator_logo.png?itok=BZVqdFyF HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 9440 Connection: close x-amz-id-2: 9yP45mpQvQYBDuBwkCYLDDqfHUq7s+IIw+oq2Z51YEfpYPWZgEaTME2wCwTf5xKnE0CrnDUogFk= x-amz-request-id: E926CZFASQ3MMGJM Date: Fri, 01 Nov 2024 12:57:56 GMT Last-Modified: Thu, 25 Jul 2024 14:52:54 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "90c44babbc654052f7916a89503ddccb" x-amz-server-side-encryption: AES256 x-amz-version-id: nilEBWo8PAa0iZa5ID616U3YMSveWRow Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 58a361324cd2b1576fcc05c5471b9b12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: e0utUEz04n2w1cytaXWkQ7ViQc96O3DsehocgjArdpl3OLxSqQUcuQ==
2024-11-01 12:57:55 UTC	9440	IN	Data Raw: 52 49 46 46 d8 24 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 4b 01 00 33 00 00 41 4c 50 48 07 0a 00 00 01 f0 7f fe ff 3e c5 ff ff 5d 24 c9 48 92 95 95 95 35 92 95 95 95 64 25 23 eb 71 90 ac c7 91 95 95 95 3c 0e 56 d6 4a 92 e4 71 b0 8c ac b5 92 24 59 2b 79 1c ac 24 2b 49 92 64 65 24 19 63 8c 71 77 73 f9 73 ae 3f dc ae d7 db fd 7e 9b c7 b3 e7 f1 0f 11 31 01 f8 ff d5 33 07 09 59 57 96 5c ea bc f5 33 53 96 4f b6 e7 47 ff 0d d1 77 4d 11 91 65 a5 26 69 f7 60 d7 25 43 ba f5 ae 7f 33 e4 eb e2 33 e7 7d ef d2 b8 61 6b 96 59 88 08 5f fc 7b a1 24 ea 1a fc 6b 49 7b 02 bb 22 59 73 f1 a6 f8 66 b7 4e 7f a6 71 5a 16 cf e8 5f df 24 df 53 61 b7 f7 95 4b e3 c6 ad 49 66 26 ec b9 11 3a ce 28 6a 0d 0d 3b 91 88 ca e9 9b a4 2c ea ef f0 cf 25 ed 25 ec 92 44 7c 73 13 b4 Data Ascii: RIFF$WEBPVP8XK3ALPH>]$H5d%#q<VJq$Y+y$+Ide$cqwss?~13YW\3SOGwMe&i`%C33}akY_{$kI{"YsfNqZ_$SaKIf&:(j;,%%D\|s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.7	60351	13.227.219.96	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	712	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2019-10/icon-googleplay.png?itok=WiZy8Q41 HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	853	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 8650 Connection: close x-amz-id-2: jh9UTN7yzRwnpUr8AZVK0S14YhwYK+pv9y660BHeRt4khkf0c57X5iWtDcjmO+RQsOtv4iiKVQaA41YZu9+F5cn3V7pIYZAtg3EtVFw4o7I= x-amz-request-id: E92548BS2KN3EW5E Date: Fri, 01 Nov 2024 12:57:56 GMT Last-Modified: Thu, 25 Jul 2024 14:26:49 GMT x-amz-expiration: expiry-date="Sat, 17 Jan 2026 00:00:00 GMT", rule-id="delete-old-images" ETag: "c66a12cacad31c032608cfabe9797b1a" x-amz-server-side-encryption: AES256 x-amz-version-id: i3bZ_7of5LXHDYbybmoQysAZ_kDVr3m3 Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 b8eaad25e4131c15c21d3d50aac2684c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: Fy4WvBflje0zjMglFr7O2VdW2Uejwr8nBJ00SP0O06LOxLeYqWJ3jg==
2024-11-01 12:57:55 UTC	8650	IN	Data Raw: 52 49 46 46 c2 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 33 02 00 a7 00 00 41 4c 50 48 01 01 00 00 01 7f a0 30 92 24 33 75 6f db 8c 88 80 ff f7 1e 3d 67 ef b5 94 94 02 6a ad 6d 8f a2 97 9c 83 45 d1 c2 58 d2 3a 2c 43 09 9b 34 75 d0 c5 e6 42 a8 80 12 7e 70 d8 cd f9 9f 3c 63 1f f7 47 f4 7f 02 94 39 bc de 42 b8 2c a9 e8 93 0d 30 34 93 7c c3 53 80 e2 26 d7 47 00 e3 2a c7 2e c0 71 94 e1 59 1e 4c 29 ed 35 00 f2 2c c5 0b 88 34 a5 c4 11 89 a0 97 f8 63 e2 46 d2 79 00 65 55 7a a6 a2 2b 7d 51 e1 4b 96 8a bd d6 01 96 e5 5b 2e 1a 07 2e 3a cf 5c 0c de b8 18 7f 70 e1 7f 39 ff 39 ff 39 ff 39 ff 39 ff 39 ff 39 ff 39 ff 39 83 7c 80 f1 c6 c5 f8 99 8b c1 81 8b ce 2d 17 8d 35 17 65 59 2a f6 d2 17 15 be f4 4c 45 57 3a a7 a2 2a e9 8f 89 1b 49 3a 32 d1 4b 78 48 98 Data Ascii: RIFF!WEBPVP8X3ALPH0$3uo=gjmEX:,C4uB~p<cG9B,04\|S&G.qYL)5,4cFyeUz+}QK[..:\p999999999\|-5eYLEW:*I:2KxH

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	60364	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:54 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:54 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f2a95d3-901e-00ac-5b08-2cb69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125754Z-16ccfc498972c2r2hC1DFWxq6800000000g000000000apvt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:54 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.7	60369	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:54 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: fd45401a-201e-005d-6808-2cafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125754Z-16ccfc498972q798hC1DFWe4nw00000000pg000000009cbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:54 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	60367	216.239.34.181	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	1299	OUT	POST /g/collect?v=2&tid=G-65SMPXQ279&gtm=45je4au0v9128867181z872392466za200zb72392466&_p=1730465866795&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&cid=1665380416.1730465873&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1730465873&sct=1&seg=0&dl=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&dt=Track%20a%20Package%20or%20Shipment%20%7C%20Purolator&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=12238 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	848	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.purolator.com Date: Fri, 01 Nov 2024 12:57:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.7	60366	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:54 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:54 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a77738ad-c01e-0066-3708-2ca1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125754Z-16ccfc49897d998fhC1DFWbah400000000n000000000ex8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:54 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.7	60365	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:54 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 39dce960-f01e-0085-6108-2c88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125754Z-16ccfc49897bnsqjhC1DFWhxb800000000h000000000h632 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	60355	108.138.6.136	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	533	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 20427 Connection: close Last-Modified: Tue, 22 Oct 2024 21:10:56 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QpoobFxu.qHBGIYRLNj8wglfi4825oSF Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3296b04068551f925d5fafd1b785ff30.cloudfront.net (CloudFront), 1.1 c0c6d7afa25d841027d75444425d2010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Date: Fri, 01 Nov 2024 12:57:55 GMT ETag: "391dd673bf3b0837320a35aa7a940bf2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: ss_bSetRwj2Hk7rQT-WpPKR4oOjhtURhAjyMpH0lPMZ_rw8Vf1tNQg==
2024-11-01 12:57:55 UTC	15714	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 35 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 5, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";
2024-11-01 12:57:55 UTC	4713	IN	Data Raw: 5f 41 4d 41 5a 4f 4e 5f 43 4f 4e 53 45 4e 54 5f 54 43 46 5f 46 49 45 4c 44 5f 4e 41 4d 45 5d 3d 74 68 69 73 2e 61 6d 61 7a 6f 6e 43 6f 6e 73 65 6e 74 2e 74 63 66 29 2c 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 61 6d 61 7a 6f 6e 43 6f 6e 73 65 6e 74 2e 67 70 70 26 26 28 6e 5b 46 2e 41 49 50 45 53 5f 41 4d 41 5a 4f 4e 5f 43 4f 4e 53 45 4e 54 5f 47 50 50 5f 46 49 45 4c 44 5f 4e 41 4d 45 5d 3d 74 68 69 73 2e 61 6d 61 7a 6f 6e 43 6f 6e 73 65 6e 74 2e 67 70 70 29 2c 65 5b 46 2e 41 49 50 45 53 5f 41 4d 41 5a 4f 4e 5f 43 4f 4e 53 45 4e 54 5f 43 4f 4e 53 45 4e 54 5f 46 49 45 4c 44 5f 4e 41 4d 45 5d 3d 6e 2c 74 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 3d 65 7d 72 65 74 75 72 6e 20 74 2e 68 61 73 68 65 64 52 65 63 6f 72 64 73 2e 6c 65 6e 67 74 68 3e 30 3f 74 68 69 Data Ascii: _AMAZON_CONSENT_TCF_FIELD_NAME]=this.amazonConsent.tcf),void 0!==this.amazonConsent.gpp&&(n[F.AIPES_AMAZON_CONSENT_GPP_FIELD_NAME]=this.amazonConsent.gpp),e[F.AIPES_AMAZON_CONSENT_CONSENT_FIELD_NAME]=n,t.consentString=e}return t.hashedRecords.length>0?thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	60360	18.210.77.166	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	543	OUT	GET /collect.js HTTP/1.1 Host: 100008210.collect.igodigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	204	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:54 GMT Content-Type: application/javascript Content-Length: 8440 Connection: close Last-Modified: Thu, 31 Oct 2024 19:14:05 GMT Vary: Accept-Encoding
2024-11-01 12:57:55 UTC	8440	IN	Data Raw: 69 66 20 28 22 75 6e 64 65 66 69 6e 65 64 22 20 3d 3d 3d 20 74 79 70 65 6f 66 28 5f 65 74 6d 63 29 29 20 7b 0a 20 20 76 61 72 20 5f 65 74 6d 63 20 3d 20 5b 5d 3b 0a 7d 0a 0a 69 66 20 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 29 20 7b 0a 20 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 72 67 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 72 67 29 20 3d 3d 3d 20 27 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 27 3b 0a 20 20 7d 3b 0a 7d 0a 0a 76 61 72 20 5f 65 74 6d 63 5f 74 65 6d 70 20 3d 20 5f 65 74 6d 63 3b 0a 76 61 72 20 5f 65 74 6d 63 20 3d 20 7b 0a 0a 20 20 64 65 62 75 67 3a 20 66 61 6c 73 65 2c 0a 0a 20 20 73 65 74 75 70 3a Data Ascii: if ("undefined" === typeof(_etmc)) { var _etmc = [];}if (!Array.isArray) { Array.isArray = function(arg) { return Object.prototype.toString.call(arg) === '[object Array]'; };}var _etmc_temp = _etmc;var _etmc = { debug: false, setup:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	60353	157.240.0.6	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	538	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-rTLPXWaW' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-01 12:57:55 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-01 12:57:55 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-01 12:57:55 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-11-01 12:57:55 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-11-01 12:57:55 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-11-01 12:57:55 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-11-01 12:57:55 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-11-01 12:57:55 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-11-01 12:57:55 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-11-01 12:57:55 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	60361	18.158.246.206	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	533	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	1259	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:55 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5 Set-Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-11-01 12:57:55 UTC	1658	IN	Data Raw: 36 37 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 55 45 7a 38 67 43 36 61 4c 7a 5a 30 58 6a 45 43 6c 58 37 75 70 71 58 51 4e 68 61 76 42 37 5f 36 75 74 4f 44 50 31 6d 34 5a 71 59 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 Data Ascii: 673(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "UEz8gC6aLzZ0XjEClX7upqXQNhavB7_6utODP1m4ZqY" var userIdCookieV
2024-11-01 12:57:55 UTC	2895	IN	Data Raw: 62 34 38 0d 0a 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 69 73 44 65 73 6b 74 6f 70 3d 21 31 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6d 54 61 70 73 2b 2b 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 74 65 72 61 63 74 69 6f 6e 50 61 72 61 6d 73 28 29 7b 72 65 74 75 72 6e 22 26 6e 5f 63 3d 22 2b 6e 75 6d 43 6c 69 63 6b 73 2b 22 26 6e 5f 74 3d 22 2b 6e 75 6d 54 61 70 73 2b 22 26 6e 5f 73 3d 22 2b 6e 75 6d 53 75 62 6d 69 74 73 2b 22 26 6e 5f 62 3d 22 2b 6e 75 6d 42 6c 75 72 2b 22 26 6e 5f 6d 3d 22 2b 6e 75 6d 4d 6f 75 73 65 4d 6f 76 65 2b 22 26 69 73 5f 64 3d Data Ascii: b48umentElement&&(isDesktop=!1,document.addEventListener("pointerup",function(e){numTaps++}))}catch(e){console.log(e)}function getInteractionParams(){return"&n_c="+numClicks+"&n_t="+numTaps+"&n_s="+numSubmits+"&n_b="+numBlur+"&n_m="+numMouseMove+"&is_d=
2024-11-01 12:57:55 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 67 65 74 28 22 73 61 2d 72 2d 64 61 74 65 22 29 3b 72 65 74 75 72 6e 20 74 26 26 22 22 21 3d 74 26 26 6e 26 26 22 22 21 3d 6e 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 74 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 72 2d 73 6f 75 72 63 65 22 29 2c 6e 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 72 2d 64 61 74 65 22 29 29 2c 74 7c 7c 28 6e 3d 74 3d 22 22 29 2c 22 26 6c 5f 73 72 63 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2b 22 26 6c 5f 73 72 63 5f 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 2b 22 26 75 5f 73 72 63 3d 22 2b 65 6e 63 6f 64 65 55 52 Data Ascii: b50get("sa-r-date");return t&&""!=t&&n&&""!=n\|\|"undefined"==typeof localStorage\|\|(t=localStorage.getItem("sa-r-source"),n=localStorage.getItem("sa-r-date")),t\|\|(n=t=""),"&l_src="+encodeURIComponent(t)+"&l_src_d="+encodeURIComponent(n)+"&u_src="+encodeUR
2024-11-01 12:57:55 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 43 6f 6f 6b 69 65 73 2e 5f 67 65 74 4b 65 79 56 61 6c 75 65 50 61 69 72 46 72 6f 6d 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 74 5b 6e 5d 29 3b 76 6f 69 64 20 30 3d 3d 3d 6f 5b 72 2e 6b 65 79 5d 26 26 28 6f 5b 72 2e 6b 65 79 5d 3d 72 2e 76 61 6c 75 65 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 43 6f 6f 6b 69 65 73 2e 5f 67 65 74 4b 65 79 56 61 6c 75 65 50 61 69 72 46 72 6f 6d 43 6f 6f 6b 69 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 74 3d 28 74 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 29 3c 30 3f 6f 2e 6c 65 6e 67 74 68 3a 74 3b 74 72 79 7b 72 65 74 75 72 6e 7b 6b 65 79 3a 64 65 63 6f 64 65 Data Ascii: b50e.split("; "):[],n=0;n<t.length;n++){var r=Cookies._getKeyValuePairFromCookieString(t[n]);void 0===o[r.key]&&(o[r.key]=r.value)}return o},Cookies._getKeyValuePairFromCookieString=function(o){var t=(t=o.indexOf("="))<0?o.length:t;try{return{key:decode
2024-11-01 12:57:55 UTC	2889	IN	Data Raw: 62 34 32 0d 0a 3f 73 69 64 3d 22 2b 6f 2b 22 26 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 2b 22 26 74 3d 22 2b 67 65 74 54 69 74 6c 65 28 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 2b 67 65 74 4c 61 73 74 53 6f 75 72 63 65 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 29 26 26 2d 31 3c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 2e 69 6e 64 65 78 4f 66 28 67 6c 6f 62 61 6c 73 2e 73 61 5f 64 65 62 75 67 5f 6b 65 79 29 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 41 2f 4c 41 4c 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 44 72 74 28 65 2c 6f 29 7b 72 65 74 75 72 6e 20 Data Ascii: b42?sid="+o+"&url="+encodeURIComponent(n)+"&t="+getTitle()+"&tip="+tip+getLastSource(),document.body.appendChild(t),current_window_url_param)&&-1<current_window_url_param.indexOf(globals.sa_debug_key)&&console.log("SA/LAL")}function loadDrt(e,o){return
2024-11-01 12:57:55 UTC	2895	IN	Data Raw: 62 34 38 0d 0a 5f 70 78 6c 3f 75 69 64 3d 22 2b 65 2b 22 26 69 73 5f 6a 73 3d 74 72 75 65 26 6c 61 6e 64 69 6e 67 5f 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 26 74 3d 22 2b 67 65 74 54 69 74 6c 65 28 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 2b 22 26 68 6f 73 74 3d 22 2b 67 6c 6f 62 61 6c 73 2e 68 6f 73 74 2b 74 2b 67 65 74 4c 61 73 74 53 6f 75 72 63 65 28 29 3b 74 72 79 7b 76 61 72 20 61 3d 61 70 70 65 6e 64 53 61 43 6f 6f 6b 69 65 73 54 6f 55 72 6c 28 65 29 2c 65 3d 61 5b 31 5d 3f 61 5b 30 5d 3a 61 70 70 65 6e 64 53 61 4c 6f 63 61 6c 53 74 6f 72 61 67 65 54 6f 55 72 6c 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 63 72 65 61 74 65 43 4f 52 53 52 65 71 75 65 73 74 28 22 47 45 54 22 2c 65 2c 66 75 6e 63 74 69 6f 6e Data Ascii: b48_pxl?uid="+e+"&is_js=true&landing_url="+encodeURIComponent(r)+"&t="+getTitle()+"&tip="+tip+"&host="+globals.host+t+getLastSource();try{var a=appendSaCookiesToUrl(e),e=a[1]?a[0]:appendSaLocalStorageToUrl(e)}catch(e){}createCORSRequest("GET",e,function
2024-11-01 12:57:55 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 70 6f 6e 65 6e 74 28 22 73 61 2d 75 73 65 72 2d 69 64 2d 76 33 22 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 73 65 72 69 64 76 33 29 29 3b 76 61 72 20 74 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 63 61 6d 70 2d 6c 69 73 74 2d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 29 3b 69 66 28 22 22 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 74 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 74 72 79 7b 22 22 21 3d 3d 28 6c 6f 63 61 6c 53 74 6f 72 65 64 43 61 6d 70 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 72 5b 61 5d 29 29 26 26 28 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6c 6f 63 61 Data Ascii: b50ponent("sa-user-id-v3")+"="+encodeURIComponent(useridv3));var t=localStorage.getItem("sa-camp-list-localStorage");if(""==t)return o;for(var n,r=t.split(";"),a=0;a<r.length;a++){try{""!==(localStoredCamp=localStorage.getItem(r[a]))&&(n=JSON.parse(loca
2024-11-01 12:57:55 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 65 2c 6f 29 7b 76 61 72 20 74 3b 69 66 28 65 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5f 61 72 72 61 79 4c 69 6b 65 54 6f 41 72 72 61 79 28 65 2c 6f 29 3a 22 4d 61 70 22 3d 3d 3d 28 74 3d 22 4f 62 6a 65 63 74 22 3d 3d 3d Data Ascii: b50pt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}function _unsupportedIterableToArray(e,o){var t;if(e)return"string"==typeof e?_arrayLikeToArray(e,o):"Map"===(t="Object"===
2024-11-01 12:57:55 UTC	362	IN	Data Raw: 31 36 33 0d 0a 6c 6f 61 64 43 6f 6e 76 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 63 61 73 65 22 74 73 22 3a 72 65 74 75 72 6e 20 6c 6f 61 64 54 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 64 65 66 61 75 6c 74 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 75 6e 6b 6e 6f 77 6e 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 7d 3b 66 6f 72 28 76 61 72 20 78 3d 73 61 5f 70 61 72 61 6d 73 2e 71 75 65 75 65 2e 73 6c 69 63 65 28 29 2c 79 3d 30 2c 7a 3d 78 2e 6c 65 6e 67 74 68 3b 79 3c 7a 3b 79 2b 2b 29 73 61 5f 70 61 72 61 6d 73 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 73 61 5f 70 61 72 61 6d 73 2c 78 5b 79 5d 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 2e 73 74 61 63 6b 29 2c 6d 61 6b 65 43 6f 72 73 52 65 71 75 65 73 74 28 22 Data Ascii: 163loadConv.apply(this,t);case"ts":return loadTs.apply(this,t);default:console.log("unknown function")}}};for(var x=sa_params.queue.slice(),y=0,z=x.length;y<z;y++)sa_params.callMethod.apply(sa_params,x[y])}catch(e){console.log(e.stack),makeCorsRequest("
2024-11-01 12:57:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.7	60368	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:54 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:55 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:55 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 4e409c6c-b01e-003d-22c3-2bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125755Z-16dc884887b99jtmhC1DFWc1qc00000000e00000000042yr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:55 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	60370	216.58.206.66	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	1002	OUT	GET /td/ga/rul?tid=G-65SMPXQ279&gacid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=170407035 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 01 Nov 2024 12:57:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 01-Nov-2024 13:12:55 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-01 12:57:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-11-01 12:57:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	60373	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	505	OUT	GET /f00000000094873/www.purolator.com/sites/default/files/styles/inline_image/public/images/2024-07/purolator-tracker-banner-image-phone-location.png?itok=GXOYW421 HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	821	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2538 Connection: close x-amz-id-2: sHA7vr623vWx8vdDfSadk6te+8osaJkDS0exaQvBvGS6ZDCuNIXvER2RkKFmF9u0A5qEOBwQrNs= x-amz-request-id: 4HBTF8783KFEQJPZ Date: Fri, 01 Nov 2024 12:57:57 GMT Last-Modified: Thu, 04 Jul 2024 21:23:10 GMT x-amz-expiration: expiry-date="Sat, 27 Dec 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "090ace433b65792bf872bd905a910807" x-amz-server-side-encryption: AES256 x-amz-version-id: dwqHZ_5c4u_OtaBCR9KQkjqlmEJrbN4. Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 1f2188741578a30afe87356d2b5507e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: vKVF0_1HZsrYkH_B3luDcaKDnv4it9Ne2qXwUdDFK8SYnIu3lYEG1w==
2024-11-01 12:57:56 UTC	2538	IN	Data Raw: 52 49 46 46 e2 09 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 6a 00 00 79 00 00 41 4c 50 48 95 02 00 00 01 a0 53 6d 7b 55 db fa 24 44 02 12 22 21 12 90 10 09 58 88 04 24 20 01 09 91 80 04 ca 5d a6 dc d5 5b 7c 4c d6 58 f0 ef 73 bf 44 c4 04 e8 7b e7 f6 f4 3a e9 a5 a9 0d 5e d8 f3 2b f2 c1 4b eb 0b a6 c1 6b eb f3 3a fe f3 7c f6 b8 20 3f ad f2 e6 fe b4 e3 55 e4 67 25 de bd 3c ab bc e8 07 b0 fd 2a 4e a0 ff 93 c5 fa 0b c9 fc 42 f6 5f 49 ff 33 6d e4 5f 08 23 fd 42 28 bf 4d f6 5f 49 0e af dc 51 0b 24 4f 5f ab c0 74 a7 04 d2 a1 a7 7b 19 a0 dc a9 81 9c c0 7a ef b0 e5 46 1a 81 e0 e5 ce 02 30 a6 1b 1b 81 ec 76 dc 48 c3 66 dd ec 91 a4 13 a0 7e 6a 00 5d 41 69 b6 f3 43 1a 36 85 a5 0e 50 af 16 80 4d b1 e4 5b c5 ce ab d3 26 4b ad 1f 4b 08 87 24 9d 7d cb a6 0e 50 Data Ascii: RIFFWEBPVP8XjyALPHSm{U$D"!X$ ][\|LXsD{:^+Kk:\| ?Ug%<*NB_I3m_#B(M_IQ$O_t{zF0vHf~j]AiC6PM[&KK$}P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	60382	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	636	OUT	GET /user/?tid=2612460264689&pd=%7B%22np%22%3A%22gtm%22%7D&cb=1730465873992&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVptTTBZamRpTUdZdE1EZGlaaTAwTlRreExXSXlaRFF0WVdabVpETmxaRGt4TURSaQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.purolator.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1625506173782129 x-pinterest-rid-128bit: 4953a6bfd2a0229de19594870ce1cfdd Date: Fri, 01 Nov 2024 12:57:55 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b218925b9f1d26340084c4ce1e3a371e6eb7a251
2024-11-01 12:57:55 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.7	60384	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	722	OUT	GET /user/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22event_id%22%3A%22e64fb249-8519-4815-8909-466fe3d12ae4%22%7D&tid=2612460264689&cb=1730465873995&dep=5%2CEVENT_TAGS_ABSENT HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 327 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU0yWmhNak14TTJFdE0yVXhaUzAwTWpobExUZ3lNbUV0T0RJeE4yTTJZVE5pTTJVeQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.purolator.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7175968565490127 x-pinterest-rid-128bit: ca4cd9a7bd9641b563962963f16892a1 Date: Fri, 01 Nov 2024 12:57:55 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b218925b9f1d26340084c4ce1e3a371e6eb7a251
2024-11-01 12:57:55 UTC	327	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 66 61 6c 73 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 Data Ascii: {"aemEnabled":false,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":false,"isUtilizingAdvertiser1pE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.7	60383	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	1390	OUT	GET /v3/?tid=2612460264689&pd=%7B%22np%22%3A%22gtm%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1730465874000 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	716	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.purolator.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 01 Nov 2025 12:57:55 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 6522111897856746 x-pinterest-rid-128bit: 18d77cdecf951ab85a8332372919a56f Date: Fri, 01 Nov 2024 12:57:55 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 9307983e5ca8a96143dc7de431bc2aad2c49e75a
2024-11-01 12:57:55 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.7	60377	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	715	OUT	GET /app/tracker/css/app.tracker-drupal.css?v=1693107538556 HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.884492963.1730465871; _ga_65SMPXQ279=GS1.1.1730465873.1.0.1730465873.60.0.0; _ga=GA1.1.1665380416.1730465873
2024-11-01 12:57:56 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 59458 Connection: close Date: Fri, 01 Nov 2024 12:57:57 GMT Last-Modified: Thu, 17 Oct 2024 04:43:54 GMT ETag: "d45fde8e1dd8129930e76fc5f5533449" x-amz-server-side-encryption: AES256 x-amz-version-id: g1BqXEgl.RoE5EXu8OPIPMTYzYhkyaBK Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f61953901038b0c4b4c82c311140f1b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: EX8pRTeywIMV6x7Rx5VkRG-oSeuA-Posyf_bHMzZb3P0YsjoXFeidg==
2024-11-01 12:57:56 UTC	16384	IN	Data Raw: 2f 2a 40 31 37 32 30 38 31 32 39 36 34 36 37 33 2a 2f 0a 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 66 6f 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 66 6f 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 6d 73 2d 63 6f 6e 74 65 6e 74 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 77 69 64 74 68 3a 31 30 30 25 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 66 6f 72 6d 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 Data Ascii: /@1720812964673/section[data-apps="tracker"] .forms-container{margin:0;padding-bottom:1rem}section[data-apps="tracker"] .forms-container .forms-contents{display:flex;justify-content:flex-end;width:100%}section[data-apps="tracker"] .forms-container .for
2024-11-01 12:57:56 UTC	577	IN	Data Raw: 6f 2d 73 69 67 6e 61 74 75 72 65 2d 62 6c 6f 63 6b 20 2e 66 61 2d 70 69 63 74 75 72 65 2d 6f 7b 63 6f 6c 6f 72 3a 23 65 30 65 30 65 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 75 74 68 2d 6c 6f 61 64 2d 73 70 69 6e 6e 65 72 7b 77 69 64 74 68 3a 33 72 65 6d 3b 68 65 69 67 68 74 3a 33 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 39 35 33 31 72 65 6d 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 75 74 68 2d 6c 6f 61 64 2d 73 74 61 74 65 7b 6f 70 61 63 69 74 79 3a 35 30 25 7d 73 65 63 74 69 6f Data Ascii: o-signature-block .fa-picture-o{color:#e0e0e0;font-size:6rem}section[data-apps="tracker"] .results-container #auth-load-spinner{width:3rem;height:3rem;font-size:1.19531rem}section[data-apps="tracker"] .results-container .auth-load-state{opacity:50%}sectio
2024-11-01 12:57:56 UTC	16384	IN	Data Raw: 2d 73 69 7a 65 3a 2e 37 31 37 31 39 72 65 6d 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 73 70 61 6e 2e 61 63 74 69 76 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 33 34 33 37 72 65 6d 3b 66 6f 6e 74 2d 77 Data Ascii: -size:.71719rem}section[data-apps="tracker"] .results-container span{font-size:inherit;color:inherit}section[data-apps="tracker"] .results-container span.active{font-weight:600}section[data-apps="tracker"] .results-container h2{font-size:1.43437rem;font-w
2024-11-01 12:57:56 UTC	1024	IN	Data Raw: 20 2e 73 68 69 70 6d 65 6e 74 2e 41 54 54 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 75 6d 6d 61 72 79 2d 76 69 65 77 20 2e 72 65 73 75 6c 74 73 2d 6c 69 73 74 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 2e 74 72 61 63 6b 65 72 2d 63 68 69 6c 64 2d 70 61 63 6b 61 67 65 20 2e 73 68 69 70 6d 65 6e 74 2e 44 45 4c 20 68 33 2c 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 75 6d 6d 61 72 79 2d 76 69 65 77 20 2e 72 65 73 75 6c 74 73 2d 6c 69 73 74 20 2e 6c Data Ascii: .shipment.ATT tr:first-child{color:#dc3545}section[data-apps="tracker"] .results-container .summary-view .results-list .list-group-item .tracker-child-package .shipment.DEL h3,section[data-apps="tracker"] .results-container .summary-view .results-list .l
2024-11-01 12:57:56 UTC	12792	IN	Data Raw: 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 75 6d 6d 61 72 79 2d 76 69 65 77 20 2e 72 65 73 75 6c 74 73 2d 6c 69 73 74 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 2e 74 72 61 63 6b 65 72 2d 63 68 69 6c 64 2d 70 61 63 6b 61 67 65 20 2e 73 68 69 70 6d 65 6e 74 2e 44 45 4c 20 64 69 76 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 Data Ascii: :nth-child(3){background-color:#28a745}section[data-apps="tracker"] .results-container .summary-view .results-list .list-group-item .tracker-child-package .shipment.DEL div.progress-bar:nth-child(4){background-color:#28a745}section[data-apps="tracker"] .r
2024-11-01 12:57:56 UTC	6282	IN	Data Raw: 77 20 2e 73 68 69 70 6d 65 6e 74 2e 41 54 54 20 64 69 76 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 65 74 61 69 6c 65 64 2d 76 69 65 77 20 2e 73 68 69 70 6d 65 6e 74 2e 41 54 54 20 64 69 76 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 64 65 74 Data Ascii: w .shipment.ATT div.progress-bar:nth-child(1){background-color:#dc3545}section[data-apps="tracker"] .results-container .detailed-view .shipment.ATT div.progress-bar:nth-child(2){background-color:#dc3545}section[data-apps="tracker"] .results-container .det
2024-11-01 12:57:56 UTC	6015	IN	Data Raw: 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 78 63 65 70 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 3a 30 20 30 20 32 72 65 6d 20 30 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 78 63 65 70 74 69 6f 6e 73 20 68 32 7b 63 6f 6c 6f 72 3a 72 65 64 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 22 74 72 61 63 6b 65 72 22 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 78 63 65 70 74 69 6f 6e 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 Data Ascii: ="tracker"] .results-container .exceptions{margin:0 0 2rem 0}section[data-apps="tracker"] .results-container .exceptions h2{color:red;font-family:"Open Sans", sans-serif}section[data-apps="tracker"] .results-container .exceptions .list-group{margin-top:1r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.7	60376	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	712	OUT	GET /app/tracker/css/bootstrap-datepicker.standalone.css HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.884492963.1730465871; _ga_65SMPXQ279=GS1.1.1730465873.1.0.1730465873.60.0.0; _ga=GA1.1.1665380416.1730465873
2024-11-01 12:57:56 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 19171 Connection: close Date: Fri, 01 Nov 2024 12:57:57 GMT Last-Modified: Sat, 05 Jun 2021 05:10:33 GMT ETag: "671ebbb61e4f44f13b60351737afaa02" x-amz-server-side-encryption: AES256 x-amz-version-id: YJxXD7UoWV3VXiX2ZJzYBGVZOu0o0izA Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 c0c6d7afa25d841027d75444425d2010.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: GitRW6nInr4nFT9KeHoLbz2-VM-vjJDq3lRzt7FFBFebr5kzHrFhyw==
2024-11-01 12:57:56 UTC	8411	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 66 6f 72 20 42 6f 6f 74 73 74 72 61 70 20 76 31 2e 39 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 78 73 6f 6c 75 74 69 6f 6e 73 2f 62 6f 6f 74 73 74 72 61 70 2d 64 61 74 65 70 69 63 6b 65 72 29 0d 0a 20 2a 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 29 0d 0a 20 2a 2f 0d 0a 0d 0a 20 2e 64 61 74 65 70 69 63 6b 65 72 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a Data Ascii: /! Datepicker for Bootstrap v1.9.0 (https://github.com/uxsolutions/bootstrap-datepicker) * * Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0) */ .datepicker { padding: 4px; -webkit-border-radius:
2024-11-01 12:57:56 UTC	8192	IN	Data Raw: 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 72 61 6e 67 65 2e 74 6f 64 61 79 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2e 61 63 74 69 76 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 66 65 32 34 62 20 5c 39 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 2e 73 65 6c 65 63 74 65 64 2e 64 69 73 Data Ascii: td.range.today.disabled.active, .datepicker table tr td.range.today.disabled:hover.active { background-color: #efe24b \9; } .datepicker table tr td.selected, .datepicker table tr td.selected:hover, .datepicker table tr td.selected.dis
2024-11-01 12:57:56 UTC	2568	IN	Data Raw: 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 3a 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2e 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 0d 0a 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 Data Ascii: sabled:active, .datepicker table tr td span.active.disabled:hover:active, .datepicker table tr td span.active.active, .datepicker table tr td span.active:hover.active, .datepicker table tr td span.active.disabled.active, .datepicker table t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.7	60378	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	633	OUT	GET /app/tracker/js/labels.tracker.en.json?null HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.purolator.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	787	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 20212 Connection: close Date: Fri, 01 Nov 2024 12:57:57 GMT Access-Control-Allow-Origin: https://www.purolator.com Access-Control-Allow-Methods: GET, POST Access-Control-Max-Age: 3600 Access-Control-Allow-Credentials: true Last-Modified: Sat, 13 Jul 2024 02:04:57 GMT ETag: "544f5a015788f889a5ab3f3fd2116e62" x-amz-server-side-encryption: AES256 x-amz-version-id: pskeZkY_g5uAqz3W59ne4pPKwa23jf6b Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 22ec86e3f4ec676e17ef8eea76eefba2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: gRlE39UTMURRB-RV83QcJQzojf5nxjKV8aRaupzx_xro8czpoXhPtA==
2024-11-01 12:57:56 UTC	6396	IN	Data Raw: 7b 22 73 65 61 72 63 68 22 3a 7b 22 68 65 61 64 65 72 22 3a 22 54 72 61 63 6b 20 61 20 53 68 69 70 6d 65 6e 74 22 2c 22 74 6f 6f 6c 74 69 70 22 3a 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 27 3e 70 75 74 20 68 74 6d 6c 20 68 65 72 65 3c 2f 64 69 76 3e 22 2c 22 69 6e 73 74 72 75 63 74 69 6f 6e 73 22 3a 22 45 6e 74 65 72 20 6d 75 6c 74 69 70 6c 65 20 50 49 4e 73 20 26 6e 62 73 70 3b 6f 72 20 52 65 66 65 72 65 6e 63 65 73 20 73 65 70 61 72 61 74 65 64 20 62 79 20 63 6f 6d 6d 61 73 2e 22 2c 22 69 63 6f 6e 22 3a 7b 22 70 61 74 68 22 3a 22 2f 61 70 70 2f 74 72 61 63 6b 65 72 2f 69 6d 67 2f 74 72 61 63 6b 65 72 2d 69 63 6f 6e 2e 70 6e 67 22 2c 22 61 6c 74 22 3a 22 54 72 61 63 6b 20 61 20 53 68 69 70 6d 65 6e 74 22 7d 2c 22 70 Data Ascii: {"search":{"header":"Track a Shipment","tooltip":"<div class='display: none'>put html here</div>","instructions":"Enter multiple PINs  or References separated by commas.","icon":{"path":"/app/tracker/img/tracker-icon.png","alt":"Track a Shipment"},"p
2024-11-01 12:57:56 UTC	1796	IN	Data Raw: 27 3e 4a 65 72 73 65 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4a 4f 27 3e 4a 6f 72 64 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4b 5a 27 3e 4b 61 7a 61 6b 68 73 74 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4b 45 27 3e 4b 65 6e 79 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4b 49 27 3e 4b 69 72 69 62 61 74 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4b 57 27 3e 4b 75 77 61 69 74 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4b 47 27 3e 4b 79 72 67 79 7a 73 74 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 4c 41 27 3e 4c 61 6f 73 3c 2f Data Ascii: '>Jersey</option><option value='JO'>Jordan</option><option value='KZ'>Kazakhstan</option><option value='KE'>Kenya</option><option value='KI'>Kiribati</option><option value='KW'>Kuwait</option><option value='KG'>Kyrgyzstan</option><option value='LA'>Laos</
2024-11-01 12:57:56 UTC	8192	IN	Data Raw: 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 57 27 3e 50 61 6c 61 75 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 41 27 3e 50 61 6e 61 6d 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 47 27 3e 50 61 70 75 61 20 4e 65 77 20 47 75 69 6e 65 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 59 27 3e 50 61 72 61 67 75 61 79 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 45 27 3e 50 65 72 75 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 48 27 3e 50 68 69 6c 69 70 70 69 6e 65 73 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 27 50 4c 27 3e 50 6f 6c 61 6e 64 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f Data Ascii: tion value='PW'>Palau</option><option value='PA'>Panama</option><option value='PG'>Papua New Guinea</option><option value='PY'>Paraguay</option><option value='PE'>Peru</option><option value='PH'>Philippines</option><option value='PL'>Poland</option><optio
2024-11-01 12:57:56 UTC	3828	IN	Data Raw: 72 65 63 69 70 69 65 6e 74 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 74 69 74 6c 65 22 3a 22 4d 65 73 73 61 67 65 22 2c 22 62 6f 64 79 22 3a 22 3c 61 20 68 72 65 66 3d 27 7b 55 52 4c 7d 27 20 63 6c 61 73 73 3d 27 63 75 72 72 65 6e 74 2d 75 72 6c 27 3e 43 6c 69 63 6b 20 68 65 72 65 3c 2f 61 3e 20 74 6f 20 67 65 74 20 61 64 64 69 74 69 6f 6e 61 6c 20 64 65 74 61 69 6c 73 20 66 6f 72 20 50 75 72 6f 6c 61 74 6f 72 20 50 61 63 6b 61 67 65 3a 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 63 75 72 72 65 6e 74 2d 70 69 6e 27 3e 7b 50 49 4e 7d 3c 2f 73 70 61 6e 3e 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 3c 61 20 68 72 65 66 3d 27 7b 55 52 4c 7d 27 20 63 6c 61 73 73 3d 27 63 75 72 72 65 6e 74 2d 75 72 6c 27 3e 43 6c 69 63 6b 20 68 65 72 65 3c 2f 61 3e 20 74 6f 20 67 65 Data Ascii: recipient","message":{"title":"Message","body":"<a href='{URL}' class='current-url'>Click here</a> to get additional details for Purolator Package: <span class='current-pin'>{PIN}</span>","summary":"<a href='{URL}' class='current-url'>Click here</a> to ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	60394	151.101.192.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	346	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:55 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4779 ETag: "a3612075aea5509a1b689e591f9a0cce" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Fri, 01 Nov 2024 12:57:55 GMT
2024-11-01 12:57:55 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-11-01 12:57:55 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-11-01 12:57:55 UTC	1378	IN	Data Raw: 6f 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 Data Ascii: om()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.one
2024-11-01 12:57:55 UTC	645	IN	Data Raw: 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 62 65 31 38 30 36 36 38 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f Data Ascii: on(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.be180668.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Dispositio

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.7	60391	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 951c16f0-d01e-002b-20ad-2a25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-159b85dff8f9mtxchC1DFWf9vg00000002bg000000008150 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	60385	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 40399abd-801e-00ac-2328-2cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-176bd8f9bc598x8vhC1DFWq73s00000000w000000000636p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	60386	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:55 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5d06de89-b01e-0084-7008-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125755Z-16ccfc49897kh956hC1DFW2afc00000000n000000000p34c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	60390	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e3e0e02d-201e-003f-52b1-2b6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16ccfc49897hshbrhC1DFW7g1c00000000eg00000000b8kd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	60388	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:55 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 44d502e9-701e-000d-5c08-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16dc884887bj2dr2hC1DFWk11000000000n0000000009y3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.7	60399	13.224.245.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	424	OUT	GET /f00000000094873/www.purolator.com/themes/custom/purolator_theme/logo-small.png HTTP/1.1 Host: marvel-b1-cdn.bc0a.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	841	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1642 Connection: close x-amz-id-2: +HHnSz6umMObK3nEaWkYWsMxKIgiLmOrXxkUBPQpy59DZdjg2sZ6A5dPEhJK9/TyMbqxReMKXS2gmTWay39C3FMVwRWEO/Ye x-amz-request-id: 4HBRW93GYJ3M7S3S Date: Fri, 01 Nov 2024 12:57:57 GMT Last-Modified: Fri, 07 Jun 2024 20:42:08 GMT x-amz-expiration: expiry-date="Sun, 30 Nov 2025 00:00:00 GMT", rule-id="delete-old-images" ETag: "295e04cc4b99728af23978c96761fcf9" x-amz-server-side-encryption: AES256 x-amz-version-id: 918TiJ7CnYWQ0l2t7FDuWQWHqth8hP.i Accept-Ranges: bytes Server: AmazonS3 Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * X-Cache: Miss from cloudfront Via: 1.1 72284d4e8970ebb6888dfd7f2b2b621c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR62-C3 X-Amz-Cf-Id: 7X5rWX1xd0pEg-5xpat0w-m2Tnlc_vA738GG03bhxJrDuq-0poNA8w==
2024-11-01 12:57:56 UTC	1642	IN	Data Raw: 52 49 46 46 62 06 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 56 00 00 3b 00 00 41 4c 50 48 18 03 00 00 0d 90 68 db 92 21 59 31 cf b6 6d db b6 6d db b6 6d db b6 6d db b6 6d db 66 44 66 e4 ad fe 80 88 80 e0 b6 8d 24 89 35 99 73 b7 fa ac 6a cf 3c 81 f0 2d 64 9d b2 69 c3 10 51 a7 e1 6c 35 76 e5 55 ad db 96 a2 78 65 86 f1 05 7c 5c 4c ff a5 0e 47 2a a3 f0 d5 3a 0f 71 73 78 4f 6d 49 e5 e2 63 b8 72 b9 88 fb 3d 9e 89 9c 4f 67 0c bc 22 0f 20 61 23 ef a9 19 a9 bc d8 02 d7 95 a4 d1 4c 90 ba 3a 93 e1 15 b1 9c 74 fe 39 53 8d 54 be 4d 87 6b 6a 7a 74 fa eb c5 f0 0a d4 40 7a b6 83 29 40 be d1 73 35 fb 51 6b a3 b3 9b 80 ac 6b ff 6d 06 93 38 be 6f 3c 9a 86 c6 42 de 53 2b 52 b9 7e 1d ff 68 1d 66 61 4b eb 8c 85 57 a2 44 d6 a3 d6 88 54 de ac c1 cf 42 d6 9e 03 34 d1 Data Ascii: RIFFbWEBPVP8XV;ALPHh!Y1mmmmmfDf$5sj<-diQl5vUxe\|\LG*:qsxOmIcr=Og" a#L:t9STMkjzt@z)@s5Qkkm8o<BS+R~hfaKWDTB4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.7	60402	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	689	OUT	GET /app/tracker/js/bootstrap-datepicker.min.js HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.884492963.1730465871; _ga_65SMPXQ279=GS1.1.1730465873.1.0.1730465873.60.0.0; _ga=GA1.1.1665380416.1730465873
2024-11-01 12:57:56 UTC	557	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 33700 Connection: close Last-Modified: Sat, 05 Jun 2021 05:10:35 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: zolV7WLXAjiiDNIwa3.SiFDMhylSVaBE Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 01 Nov 2024 12:57:57 GMT ETag: "f5514b1ce3d12a9d2d3407f159ac9fcd" X-Cache: RefreshHit from cloudfront Via: 1.1 f61953901038b0c4b4c82c311140f1b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: 4vGNYnVxjKOcjK-25BMRZiJn1DD9pgSVda17SBwqWErs2mjfrUYZ3w==
2024-11-01 12:57:56 UTC	16384	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 66 6f 72 20 42 6f 6f 74 73 74 72 61 70 20 76 31 2e 39 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 75 78 73 6f 6c 75 74 69 6f 6e 73 2f 62 6f 6f 74 73 74 72 61 70 2d 64 61 74 65 70 69 63 6b 65 72 29 0d 0a 20 2a 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 29 0d 0a 20 2a 2f 0d 0a 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a Data Ascii: /! Datepicker for Bootstrap v1.9.0 (https://github.com/uxsolutions/bootstrap-datepicker) * * Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0) */!function(a){"function"==typeof define&&define.amd?define(["j
2024-11-01 12:57:56 UTC	16384	IN	Data Raw: 73 26 26 28 6a 3d 6a 2e 63 6f 6e 63 61 74 28 6c 2e 63 6c 61 73 73 65 73 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 29 29 29 2c 6c 2e 74 6f 6f 6c 74 69 70 26 26 28 6b 3d 6c 2e 74 6f 6f 6c 74 69 70 29 29 2c 6d 2b 3d 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 6a 2e 6a 6f 69 6e 28 22 20 22 29 2b 27 22 27 2b 28 6b 3f 27 20 74 69 74 6c 65 3d 22 27 2b 6b 2b 27 22 27 3a 22 22 29 2b 22 3e 22 2b 74 2b 22 3c 2f 73 70 61 6e 3e 22 3b 6f 2e 66 69 6e 64 28 22 2e 64 61 74 65 70 69 63 6b 65 72 2d 73 77 69 74 63 68 22 29 2e 74 65 78 74 28 70 2b 22 2d 22 2b 71 29 2c 6f 2e 66 69 6e 64 28 22 74 64 22 29 2e 68 74 6d 6c 28 6d 29 7d 2c 66 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 66 2c 67 3d 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 76 69 65 77 44 61 74 65 29 Data Ascii: s&&(j=j.concat(l.classes.split(/\s+/))),l.tooltip&&(k=l.tooltip)),m+='<span class="'+j.join(" ")+'"'+(k?' title="'+k+'"':"")+">"+t+"</span>";o.find(".datepicker-switch").text(p+"-"+q),o.find("td").html(m)},fill:function(){var e,f,g=new Date(this.viewDate)
2024-11-01 12:57:56 UTC	932	IN	Data Raw: 6f 6e 64 65 6e 73 65 64 22 3e 27 2b 72 2e 68 65 61 64 54 65 6d 70 6c 61 74 65 2b 72 2e 63 6f 6e 74 54 65 6d 70 6c 61 74 65 2b 72 2e 66 6f 6f 74 54 65 6d 70 6c 61 74 65 2b 27 3c 2f 74 61 62 6c 65 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 65 70 69 63 6b 65 72 2d 79 65 61 72 73 22 3e 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 22 3e 27 2b 72 2e 68 65 61 64 54 65 6d 70 6c 61 74 65 2b 72 2e 63 6f 6e 74 54 65 6d 70 6c 61 74 65 2b 72 2e 66 6f 6f 74 54 65 6d 70 6c 61 74 65 2b 27 3c 2f 74 61 62 6c 65 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 61 74 65 70 69 63 6b 65 72 2d 64 65 63 61 64 65 73 22 3e 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 Data Ascii: ondensed">'+r.headTemplate+r.contTemplate+r.footTemplate+'</table></div><div class="datepicker-years"><table class="table-condensed">'+r.headTemplate+r.contTemplate+r.footTemplate+'</table></div><div class="datepicker-decades"><table class="table-condense

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.7	60408	18.158.246.206	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	562	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	1292	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000 Set-Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDUoJO5BjABOgT87-jmQgSZ49ob.ce8kQ9JZDor7ttdh7EDVRwTERc0i4cVO85s2oLk6OaA; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDUoJO5BjABOgT87-jmQgSZ49ob.ce8kQ9JZDor7ttdh7EDVRwTERc0i4cVO85s2oLk6OaA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-11-01 12:57:56 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.7	60407	18.158.246.206	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	1220	OUT	GET /sa.css HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s; sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s
2024-11-01 12:57:56 UTC	222	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/css Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-11-01 12:57:56 UTC	65	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 73 61 2d 75 69 64 3a 20 27 30 2d 62 66 33 38 31 32 30 63 2d 62 33 30 35 2d 35 31 37 62 2d 36 39 33 66 2d 30 34 34 36 62 32 32 34 38 33 64 37 27 3b 0a 7d Data Ascii: :root { --sa-uid: '0-bf38120c-b305-517b-693f-0446b22483d7';}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.7	60404	98.82.154.76	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	639	OUT	GET /iu3?pid=85404e25-ec6a-425a-8e15-a871399e7ad2&event=PageView&ts=1730465871187&uuid=577fb623-22fc-4b29-a1aa-4ad63d483b22 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	817	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Length: 0 Connection: close x-amz-rid: PTPTWFQHMFS0FS6AR68K Set-Cookie: ad-id=A26bD3yYx0Y6tYwvEh0Lkjk\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Jul-2025 12:57:56 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=85404e25-ec6a-425a-8e15-a871399e7ad2&event=PageView&ts=1730465871187&uuid=577fb623-22fc-4b29-a1aa-4ad63d483b22&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.7	60405	174.129.237.167	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	829	OUT	GET /c2/100008210/track_page_view?payload=%7B%22title%22%3A%22Track%20a%20Package%20or%20Shipment%20%7C%20Purolator%22%2C%22url%22%3A%22https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560%22%2C%22referrer%22%3A%22%22%7D HTTP/1.1 Host: nova.collect.igodigital.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:56 UTC	1028	IN	HTTP/1.1 202 Accepted Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Content-Disposition: inline Content-Transfer-Encoding: binary Cache-Control: private Set-Cookie: igodigitaltc2=ea292a92-9850-11ef-a1d1-a65662b3ca56; domain=.igodigital.com; path=/; expires=Fri, 26 Dec 2025 12:57:56 GMT; Secure; SameSite=None; Partitioned Set-Cookie: igodigitalst_100008210=ea293050-9850-11ef-a1d1-a65662b3ca56; domain=.igodigital.com; path=/; expires=Fri, 01 Nov 2024 13:57:56 GMT; Secure; SameSite=None; Partitioned Set-Cookie: igodigitalstdomain=43146; domain=.igodigital.com; path=/; expires=Fri, 01 Nov 2024 13:57:56 GMT; Secure; SameSite=None; Partitioned X-Request-Id: f391e3a1-7f69-447a-939e-89b394b038ab X-Runtime: 0.005025 Vary: Accept-Encoding
2024-11-01 12:57:56 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-11-01 12:57:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	60409	142.251.173.157	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	907	OUT	POST /g/collect?v=2&tid=G-65SMPXQ279&cid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCLnKzQEIitPNARj1yc0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-11-01 12:57:56 UTC	848	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.purolator.com Date: Fri, 01 Nov 2024 12:57:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.7	60411	157.240.0.6	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	1379	OUT	GET /signals/config/728993374121108?v=2.9.175&r=stable&domain=www.purolator.com&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:57 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-kEq36WPk' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-01 12:57:57 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-01 12:57:57 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-11-01 12:57:57 UTC	1491	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 Data Ascii: =typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototyp
2024-11-01 12:57:57 UTC	14893	IN	Data Raw: 20 62 3d 61 2e 74 61 72 67 65 74 3b 61 3d 61 2e 70 69 78 65 6c 3b 72 65 74 75 72 6e 20 69 28 7b 65 78 74 72 61 63 74 6f 72 73 42 79 50 69 78 65 6c 73 3a 67 2c 66 62 71 49 6e 73 74 61 6e 63 65 3a 65 2c 70 69 78 65 6c 3a 61 2c 74 61 72 67 65 74 3a 62 7d 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 69 77 6c 70 61 72 61 Data Ascii: b=a.target;a=a.pixel;return i({extractorsByPixels:g,fbqInstance:e,pixel:a,target:b})})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.iwlparameters");f.registerPlugin&&f.registerPlugin("fbevents.plugins.iwlpara
2024-11-01 12:57:57 UTC	1500	IN	Data Raw: 65 6e 67 74 68 3e 30 3b 66 3d 6e 2e 6c 65 6e 67 74 68 3e 30 3b 69 66 28 6b 7c 7c 66 29 7b 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e 69 64 29 3b 67 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 28 7b 74 79 70 65 3a 22 55 4e 57 41 4e 54 45 44 5f 43 55 53 54 4f 4d 5f 44 41 54 41 22 7d 29 3b 70 3d 7b 7d 3b 6b 26 26 28 70 2e 75 70 3d 6d 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 66 26 26 28 70 2e 72 70 3d 6e 2e 6a 6f 69 6e 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 70 7d 7d 61 2e 70 65 72 66 6f 72 6d 61 6e 63 65 4d 61 72 6b 28 22 66 62 65 76 65 6e 74 73 3a 65 6e 64 3a 75 6e 77 61 6e 74 65 64 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 62 2e Data Ascii: ength>0;f=n.length>0;if(k\|\|f){a.performanceMark("fbevents:end:unwantedDataProcessing",b.id);g.logUserError({type:"UNWANTED_CUSTOM_DATA"});p={};k&&(p.up=m.join(","));f&&(p.rp=n.join(","));return p}}a.performanceMark("fbevents:end:unwantedDataProcessing",b.
2024-11-01 12:57:57 UTC	14884	IN	Data Raw: 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d Data Ascii: xports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.unwanteddata");f.registerPlugin&&f.registerPlugin("fbevents.plugins.unwanteddata",e.exports);f.ensureModuleRegistered("fbevents.plugins.unwanteddata",function(){return e.exports}
2024-11-01 12:57:57 UTC	1500	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 48 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 67 3d 49 5b 62 2e 69 64 5d 3b 64 2e 63 73 5f 65 73 74 3d 21 30 3b 69 66 28 67 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 72 79 7b 69 66 28 74 2e 69 73 4d 61 74 63 68 45 53 54 52 75 6c 65 28 67 2e 63 6f 6e 64 69 74 69 6f 6e 2c 63 29 29 7b 69 66 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 6e 28 67 2e 74 72 61 6e 73 66 6f 72 6d 61 74 69 6f 6e 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 63 21 3d 3d 70 2e 44 45 52 49 56 45 5f 45 56 45 4e 54 29 72 65 74 75 72 6e 3b 63 3d 61 28 7b 7d 2c 64 29 3b 76 61 72 20 68 3d 7b 65 76 65 6e 74 49 44 3a 66 7d 3b 67 2e 72 75 6c 65 5f 69 64 Data Ascii: e}function H(b,c,d,f){var g=I[b.id];d.cs_est=!0;if(g==null)return;n(g,function(g){try{if(t.isMatchESTRule(g.condition,c)){if(g.transformations==null)return;n(g.transformations,function(c){if(c!==p.DERIVE_EVENT)return;c=a({},d);var h={eventID:f};g.rule_id
2024-11-01 12:57:57 UTC	1482	IN	Data Raw: 6e 64 3a 65 73 74 50 61 67 65 56 69 65 77 50 72 6f 63 65 73 73 69 6e 67 22 29 3b 72 65 74 75 72 6e 7b 63 73 5f 65 73 74 3a 21 30 2c 65 73 74 5f 73 6f 75 72 63 65 3a 69 7d 7d 72 65 74 75 72 6e 7b 7d 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 65 73 74 72 75 6c 65 65 6e 67 69 6e 65 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b Data Ascii: nd:estPageViewProcessing");return{cs_est:!0,est_source:i}}return{}})})})();return e.exports}(a,b,c,d)});e.exports=f.getFbeventsModules("SignalsFBEvents.plugins.estruleengine");f.registerPlugin&&f.registerPlugin("fbevents.plugins.estruleengine",e.exports);
2024-11-01 12:57:57 UTC	13402	IN	Data Raw: 64 45 76 65 6e 74 45 76 65 6e 74 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 63 6f 65 72 63 65 2c 67 3d 63 2e 54 79 70 65 64 3b 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 3b 76 61 72 20 68 3d 63 2e 6c 6f 67 55 73 65 72 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 62 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 69 64 3b 61 3d 61 2e 65 76 65 6e 74 4e 61 6d 65 3b 62 3d 64 28 62 2c 67 2e 66 62 69 64 28 29 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 Data Ascii: dEventEvent"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.coerce,g=c.Typed;c=f.getFbeventsModules("SignalsFBEventsLogging");var h=c.logUserError;e.exports=new a(function(a,c){b.listen(function(a){var b=a.id;a=a.eventName;b=d(b,g.fbid());if(b==null)
2024-11-01 12:57:57 UTC	1491	IN	Data Raw: 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 Data Ascii: Modules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("SignalsFBEvents.plugi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.7	60410	108.138.7.87	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	693	OUT	GET /app/tracker/css/print-drupal.css HTTP/1.1 Host: web.purolator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.884492963.1730465871; _ga_65SMPXQ279=GS1.1.1730465873.1.0.1730465873.60.0.0; _ga=GA1.1.1665380416.1730465873
2024-11-01 12:57:57 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 20014 Connection: close Date: Fri, 01 Nov 2024 12:57:58 GMT Last-Modified: Thu, 17 Oct 2024 03:13:53 GMT ETag: "34c9b8753fdd9fed2dd0fc93944e1083" x-amz-server-side-encryption: AES256 x-amz-version-id: o4SIElvjA16ehPHFtVqCuBBh.2qVA1C7 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bfb5bffe90e3b0e760933a7a07d850ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P6 X-Amz-Cf-Id: Br38kXWI7Rv_th3bDK8EItfbcERS92fROMQDshQMMNmUJy1tK2JZYQ==
2024-11-01 12:57:57 UTC	8443	IN	Data Raw: 2f 2a 40 31 37 32 39 31 31 32 33 30 33 30 32 33 2a 2f 0a 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 6e 61 76 2e 6e 61 76 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 25 3b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 6e 61 76 2e 6e 61 76 62 61 72 20 2e 68 65 61 64 65 72 2d 74 6f 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 6e 61 76 2e 6e 61 76 62 61 72 20 2e 68 65 61 64 65 72 2d 74 6f 70 20 2e 72 65 67 69 6f 6e 2d 2d 6e 61 76 62 61 72 2d 61 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 64 69 76 2e 63 6f 6e 74 65 6e 74 5f 5f 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 66 6f 6f 74 Data Ascii: /@1729112303023/@media print{nav.navbar{position:absolute;width:0%;top:0;padding-bottom:.5rem}nav.navbar .header-top{box-shadow:none !important}nav.navbar .header-top .region--navbar-actions{display:none !important}div.content__footer{display:none}foot
2024-11-01 12:57:57 UTC	11571	IN	Data Raw: 75 6c 74 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 64 65 74 61 69 6c 65 64 2d 76 69 65 77 2e 44 65 6c 69 76 65 72 65 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2c 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 74 72 61 63 6b 65 72 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 65 6e 74 73 20 2e 64 65 74 61 69 6c 65 64 2d 76 69 65 77 2e 44 65 6c 69 76 65 72 65 64 20 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 7b 63 6f 6c 6f 72 3a 23 32 38 61 37 34 35 20 21 69 6d 70 6f 72 74 61 6e 74 7d 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 61 70 70 73 3d 74 72 61 63 6b 65 72 5d 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 65 73 75 6c 74 73 2d 63 6f 6e 74 65 6e 74 73 20 2e Data Ascii: ults-contents .detailed-view.Delivered span.active,section[data-apps=tracker] .results-container .results-contents .detailed-view.Delivered .fa-exclamation-triangle{color:#28a745 !important}section[data-apps=tracker] .results-container .results-contents .

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	60413	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 5d06df95-b01e-0084-4008-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16dc884887bbfwjkhC1DFWyza800000000r0000000001422 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	60417	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	517	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: b900ecb1-f01e-0099-29eb-2b9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16ccfc49897cvhbphC1DFWt5d800000000pg00000000etu4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	60414	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: c6a001d5-701e-0050-1608-2c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16ccfc498972mdvzhC1DFWzrms00000000q0000000000p9a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	60416	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:56 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:56 UTC	491	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:56 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: c3d6966f-401e-0016-3ad8-2b53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125756Z-16ccfc49897bnsqjhC1DFWhxb800000000rg0000000038zb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:56 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.7	60421	151.101.192.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	359	OUT	GET /ct/lib/main.be180668.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:57 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27513 ETag: "c5cae4182177ca41c1337703e080917b" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Fri, 01 Nov 2024 12:57:57 GMT
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 1f 8b 08 08 f0 5f 21 67 00 03 6d 61 69 6e 2e 62 65 31 38 30 36 36 38 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 68 7b 33 60 0f 5b 3b 2c dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 34 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 8c 3e 6c a7 ba b1 97 d8 42 35 f3 69 c6 44 91 71 3b 3b 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 ed 26 cd 44 1e 3e 6c b7 2e 83 47 c3 79 bc 5e db 7c 58 b6 bb dc ad af 13 02 37 6b 7a e0 b9 9c 10 dd ba 4d 86 d7 94 b9 c9 70 4e 33 f8 b9 a0 15 32 01 2f 03 ba 64 98 e2 25 d9 6c 3e 5f fe c9 e6 62 b8 60 cb 84 b3 5f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: _!gmain.be180668.js\ob%8,h{3`[;, Pl:Py47>;%4D?C`YHRn3pg>lB5iDq;;)^$:<]&D>l.Gy^\|X7kzMpN32/d%l>_b`_e^v{`fY\|f!b"d[zA<XWo/
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 9a 6a 2d f8 c6 73 20 ff df 09 bb 83 20 77 bf 11 46 04 97 de e5 79 6a 30 b5 5f 28 03 5d 43 d9 6a 99 9d 59 96 23 ea e8 02 b1 a3 4d 67 9a 8e 67 ac db 81 3f 9d 92 fc 2e 11 73 0c 49 1e e6 71 ce ac 38 9f 27 89 15 ca eb 35 c8 22 f7 cb 1b 88 5a e3 ec de 0a 75 bc 3a 95 ad 52 9f 43 7d 39 28 af 7b ca 97 e8 be bf d9 35 1e d5 75 9e 07 fa ad 79 3e 08 6a 0a fe 04 f6 13 35 3d 75 5b 92 09 5e 97 83 ae d8 b7 1a c7 bb 77 ef 7c d5 7c 09 3f 26 e3 ea c9 27 63 d4 32 52 0e a5 07 68 41 c5 a9 0d 7c e3 28 3d 3f a7 77 2c fb 08 a4 6c 02 56 0e 36 2d b5 bc 54 db 34 c9 3e 30 59 c0 40 a0 08 1b 97 ca 77 f2 cd 46 a9 26 27 ef 30 c0 d1 6a 53 ba 08 4b f6 67 75 7f b6 d9 30 b3 e3 cc b8 0e 19 89 a8 b7 f3 2a 4c 17 da 22 6a 73 75 55 3f c6 75 15 54 80 6f 92 8b 52 2f ad 28 97 56 b2 0d a1 a7 54 c6 5e Data Ascii: j-s wFyj0_(]CjY#Mgg?.sIq8'5"Zu:RC}9({5uy>j5=u[^w\|\|?&'c2RhA\|(=?w,lV6-T4>0Y@wF&'0jSKgu0*L"jsuU?uToR/(VT^
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 3f 07 e9 53 af c0 55 e2 d0 d5 16 c5 61 4d 33 08 1b d7 86 0d 5d 44 f4 46 2b 68 4b 64 32 8c 6f 6e d6 f7 b6 7a d2 0c 2c 21 c2 b9 07 8d b8 8f 16 53 72 db 1a d6 ec bc 5c 06 48 f7 ee bd 03 63 56 e2 7f bb fd 36 54 9e 80 ae dc 6f c3 d3 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f fe f4 e9 f4 d7 93 8f 5f 2e 7e 79 ff 3f 17 1f fe f8 72 72 4a 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fd 25 fe a6 ba 60 e2 02 58 76 93 a6 eb d3 e4 df 8c 1e 83 80 c3 fd aa 75 fb d3 9e 04 75 c5 d6 55 21 d1 5e 05 b0 4a cf 4b 23 a4 1a b7 5d c1 Data Ascii: ?SUaM3]DF+hKd2onz,!Sr\HcV6TouzWA@Qpgo_.~y?rrJvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%`XvuuU!^JK#]
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 4e ef b7 55 cb e3 b5 c3 45 59 f4 fc 62 ff 06 fa 60 17 92 4f ba 0e 3c 80 89 16 ee c2 8d 9b 75 c5 f2 d5 bb c6 91 b9 27 2b e4 2d dd 77 6a 75 6a 70 4c d8 c3 4e 0a 21 61 c9 5a ae 6e fa b2 a2 9b ae 0c 36 46 36 aa 63 cb e7 57 c7 30 f5 2a 8b e2 bb 05 02 94 3c 6f bb 1b f7 fc d7 e9 e7 4f 74 2f 3d f3 20 4f 7c e9 93 4c 2e 1e 54 0a 77 6b 27 d2 88 97 45 13 54 9c 8b 38 cb d4 11 47 17 b4 72 3b 55 a5 d1 b1 f7 76 52 9f 0e bd 34 4e 49 8a 1f c0 10 83 f6 75 1e b8 b1 94 09 51 76 43 f4 8a 84 0b e5 df 58 24 9c ae 93 a1 5f b2 7b 3c 2f 84 27 50 e6 73 96 e7 e0 cb ef 53 be d0 0a aa 0f 89 d6 f9 e7 ab 3a 5a 80 d5 7b 66 bc f0 ca 52 f4 5a 4f 13 7d 68 9e 40 7b 55 fa 64 79 c2 20 ed 3a 5b b4 7b 18 72 f7 64 a0 a2 c2 9c ac 0a 14 3a 8f c6 82 df e9 99 a1 81 39 db 8b da 97 80 d5 93 25 3e 99 86 Data Ascii: NUEYb`O<u'+-wjujpLN!aZn6F6cW0*<oOt/= O\|L.Twk'ET8Gr;UvR4NIuQvCX$_{</'PsS:Z{fRZO}h@{Udy :[{rd:9%>
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: af ca 9b 51 36 60 b3 fa d6 41 fe 0d 98 59 c0 c7 ea 3f fe 91 95 28 2b cf 89 a5 03 cc fb d1 64 0a ee 8c e0 09 70 5e e6 41 13 87 9d 57 d5 e2 34 f2 d9 48 9e 48 ec fa 2a 59 1d 17 d3 d9 f7 36 32 ad df d9 e4 4c e8 cf 6b e4 f4 aa ec 2e 73 99 93 82 9c d4 7f f7 a0 29 7b 78 d0 b3 5d f6 f6 3f 57 2f ff d8 43 fb df c4 c0 4f b4 38 56 b7 9b f5 6e 12 ee 9f 3a 95 ab c0 fe 8f bd 6b 6f 6a 1b 59 f6 5f 25 71 65 39 d2 4a 36 7a 3f 00 2d 87 f0 8a 13 02 5c 03 c9 6e 1c a0 14 23 c0 09 48 5e 5b 82 64 b1 bf fb fd f5 cc 48 1a db ca ee 49 d5 bd a7 ea 6c 9d 3f 12 a4 79 f6 f4 f4 f4 43 d3 dd 5e 68 a7 9b 12 3d 72 af 0e 39 1e c2 50 d5 0d 28 08 8c 83 0d 4b 07 10 1e bc b3 14 ea 3b 6e be cc ab 12 74 34 e4 de 68 5a 12 86 7e 3e 17 c2 3f fe 8e 6f 4b f3 2d 21 0b 9a 59 0a ce 62 9f f6 59 5c 16 9b 34 Data Ascii: Q6`AY?(+dp^AW4HH*Y62Lk.s){x]?W/CO8Vn:kojY_%qe9J6z?-\n#H^[dHIl?yC^h=r9P(K;nt4hZ~>?oK-!YbY\4
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 60 6a 7a 53 db 52 f1 b8 7d 17 df 8f 92 2b 95 8f f0 62 b5 93 e3 b0 93 1f ad 58 10 d7 b0 97 f0 22 9f 89 06 4f d0 b8 f6 75 bd 4a 38 dc c5 38 79 96 66 69 9b 51 10 04 4c e5 e3 d6 f9 98 76 81 fb f1 15 a5 78 ca d8 69 12 4d 74 d6 81 67 68 e4 99 c8 44 0c db 6d fc 40 26 ce 12 91 2a ea b3 fb 24 bf cd ae 28 63 99 b2 98 65 50 7d 12 a1 76 29 73 d8 2d e5 f9 fc c7 05 89 7b 1b 14 bb 86 f5 95 a9 1e 59 3a ad 04 9c 76 dc 4f 78 1e 90 da dd 85 ab 0f 4f b3 f5 61 e7 a0 7b 72 1a 3d ed 1d 5f 1e 1c 6d 6f 1d 5c 9e 9c 1e f5 b6 f6 77 d7 9e a0 7c 63 b5 6b a6 61 e8 c5 78 b8 d6 ba 1e 5d 52 9a ab bb 13 40 1e df 24 ad 99 be b3 db eb be 83 e9 bc 7b dc 7d b3 dc 7e 34 4c db c0 d1 f0 21 b9 6a 27 a3 e1 17 74 38 d9 ee 6d 1d ef 5e d2 8c bb 87 bb bd 93 e6 4e 93 c1 38 1e 25 6d 0a b3 4a 52 8a fb 9b Data Ascii: `jzSR}+bX"OuJ88yfiQLvxiMtghDm@&*$(ceP}v)s-{Y:vOxOa{r=_mo\w\|ckax]R@${}~4L!j't8m^N8%mJR
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: b7 bb d7 fd 55 6b ed 7e a5 78 7c 68 72 ff f8 69 f2 0f 71 72 e3 67 3f 4d f4 67 9f 8a fc d9 35 dd 21 b3 aa 16 cb aa 96 b2 b9 a1 d3 70 f2 5a 4c 28 b0 9c a9 f8 cf 33 d0 25 25 31 8c a3 ac d3 53 e8 30 aa eb 69 99 df ad dc d1 b4 e2 ec d4 86 41 d0 6b 24 ff 32 41 4e 8b 71 eb 3c 92 12 c9 aa cd 98 9c 4e 0b ce 2a 99 ac ad 1f 27 e5 e3 66 be 96 28 a6 ad 62 9f 6e 63 cb f5 40 86 fc 9b 1e f1 7a fe c9 93 a7 1e 60 60 e1 50 bd 02 6e fe e4 88 e6 f4 eb 10 59 87 05 73 66 9d 53 12 f8 2c e9 11 f5 3e 6c ee 90 8b 70 57 f6 01 52 8e fb 56 5a ab 2d 95 5c f2 cb 01 4e 1b 06 20 34 90 1c e2 49 11 06 2c ab 5c b5 01 9b 39 ce 5b d5 fd 4b d3 fc b7 25 26 64 95 2e 93 54 ba 0c 84 51 c8 1f db d3 32 a5 43 a1 98 c4 17 0a 05 27 fc 5b d4 37 4d d3 b3 5d cb 31 02 ba 53 0b 1d c7 77 1c 53 b7 0d 27 b4 2d Data Ascii: Uk~x\|hriqrg?Mg5!pZL(3%%1S0iAk$2ANq<N*'f(bnc@z``PnYsfS,>lpWRVZ-\N 4I,\9[K%&d.TQ2C'[7M]1SwS'-
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: a9 1d 81 8b b1 4c 0b 0c 5d d2 40 00 a4 0b f1 09 44 cc 29 23 c0 43 88 26 24 eb 6b bd 04 7b 1a 42 66 db 04 56 ad a2 f8 9e e7 13 86 3d 59 59 81 36 0c c9 ed 04 24 35 25 bd 05 ba 02 a4 17 f6 4b 56 61 50 ed 40 19 80 9a 21 6b 33 96 e3 91 0e c0 16 51 2b 36 be 1b d8 50 47 02 59 c7 31 3d 74 f0 43 db 93 b4 1d d3 c4 4e f8 00 c6 91 15 1f 17 c4 e2 90 bb da 9c 0e e4 42 87 30 40 99 ae ac 0e 11 de 03 9a c3 96 35 23 ec 01 06 f3 b1 77 b2 92 04 89 eb d0 b6 11 e9 d5 fa 92 09 f2 f0 dd 10 74 25 ab 4e 58 aa e1 63 eb e6 94 28 40 63 04 1e 84 ad 31 a7 4f 99 84 0d 88 76 7b 4e b5 72 41 d1 2e 4e 87 2f 6b 59 a6 e1 61 6a 83 8e ea 9c be 45 52 9d 54 2b 49 f5 32 1d db c2 99 05 10 b2 16 66 3a 1e b4 0a 13 7b 26 29 64 81 8b 53 13 02 a1 92 6a 86 13 05 45 01 1b 61 49 5a 1a b6 17 20 e2 f4 b8 92 Data Ascii: L]@D)#C&$k{BfV=YY6$5%KVaP@!k3Q+6PGY1=tCNB0@5#wt%NXc(@c1Ov{NrA.N/kYajERT+I2f:{&)dSjEaIZ
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: 8b ab aa fa 77 5e fd bb 56 94 d5 e0 1f 0f 55 f5 6f bc fa 37 2d 2e ab c1 52 be 55 d5 1f 78 f5 07 ed ba ac 06 97 79 ac aa df f3 ea f7 da a4 ac 06 e3 21 ea f9 0b fb 7f 2c ec ff b9 8f 74 79 25 ab 17 ec 6a a2 ed f1 a2 47 70 02 0e 55 dd 20 29 82 3f 0b d4 92 d5 ae 08 3e 5d e2 33 a8 ca de 95 b4 c0 0d 7f 45 b0 ee 12 75 cc b2 57 04 13 2f 11 66 5b 55 e1 6f 25 39 40 b5 ab 0a 3f 94 f4 a0 3b f5 44 ef 4b 82 a0 ef 8a 94 97 e8 c7 be 09 2c ba 5e 14 d2 ad 38 cf 4c 88 c3 f3 7f e0 4d 50 fd e6 fa 38 7a ae 24 74 d7 af 3f 4d e4 5f e7 28 a2 a2 bc 2d 9f e9 e9 da d2 b7 9c 42 f8 14 54 bf 7e 0e 71 42 de 05 f4 19 24 99 77 e5 28 3d 07 f4 eb c5 1f 17 49 4a ff 81 a2 f2 1f 28 1a fd 07 c6 b5 ff c0 6c bd c1 1f 63 3a a5 9f 0f fe 61 47 82 f8 ef e6 48 10 2f 38 12 d0 dd 59 ba c2 7e f5 7e 29 c0 Data Ascii: w^VUo7-.RUxy!,ty%jGpU )?>]3EuW/f[Uo%9@?;DK,^8LMP8z$t?M_(-BT~qB$w(=IJ(lc:aGH/8Y~~)
2024-11-01 12:57:57 UTC	1378	IN	Data Raw: d7 42 13 9a b0 75 e9 4a 23 1d 27 28 0f 43 14 bd 22 44 52 6f 18 f9 9b 1a a3 d3 76 d8 c4 30 8e 1b 5d 15 38 ea c6 d3 b7 61 02 bb 79 98 77 dc cb 56 3f 08 17 d1 7b e0 f1 d4 98 d1 7f 0e c5 ce 48 bd 98 f9 9e 95 a4 c9 9c 03 ed 1c 91 73 25 ab 44 09 d0 fd 0d ff c0 87 a9 90 37 79 cf af fa cb 78 85 76 91 b8 56 18 3a c1 9f 22 c3 b1 dc 8a d3 30 cc 3d e8 60 9c 28 e4 98 46 b2 09 6a 96 da b1 28 e8 91 6a 52 c3 7d 8d b2 08 68 39 75 e5 9d 10 00 4e 5d c0 0a 5e d8 6a 69 bc 91 12 0f 76 07 33 41 8e a4 30 60 a2 21 e3 32 8c d1 f2 cd d7 e5 aa bd 5e 21 b0 94 72 a8 95 b5 27 1d 9a e4 e0 e9 5a 54 2c 6f 4d 89 4d 10 c1 6a 30 2d 25 f7 60 9c a0 95 3d 30 09 4d 5d 83 59 a4 c1 56 de 84 2c a5 5a 28 dd cf 6f 26 ea 86 8d 73 3d 8a b8 8c ce 01 db 60 81 81 70 fc ad af a8 f2 57 ea 26 6d 65 08 64 b2 Data Ascii: BuJ#'(C"DRov0]8aywV?{Hs%D7yxvV:"0=`(Fj(jR}h9uN]^jiv3A0`!2^!r'ZT,oMMj0-%`=0M]YV,Z(o&s=`pW&med

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.7	60422	151.101.0.84	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	1642	OUT	GET /v3/?event=pagevisit&ed=%7B%22np%22%3A%22gtm%22%2C%22event_id%22%3A%22e64fb249-8519-4815-8909-466fe3d12ae4%22%7D&tid=2612460264689&cb=1730465875458&dep=5%2CEVENT_TAGS_ABSENT&pd=%7B%22np%22%3A%22gtm%22%2C%22pin_unauth%22%3A%22dWlkPVptTTBZamRpTUdZdE1EZGlaaTAwTlRreExXSXlaRFF0WVdabVpETmxaRGt4TURSaQ%22%7D&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%22be180668%22%2C%22is_eu%22%3Afalse%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, not-navigation-source Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-11-01 12:57:57 UTC	1036	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.purolator.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 01 Nov 2025 12:57:57 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None set-cookie: _pinterest_ct_ua="TWc9PSZ0cVJiOUdGVVpwZ2lBNllYbzlReHF2WWUrWUxiaFNsM1VkcUhDUkhsQlFDZ1ZDYnpKcDR3RExOTmdsWXQyM0F4cmcvMTRQZW9SL1o0QmVlOTFBL3ZZOVcvbGhCaXlrdFBHQTBBekM2R1V3MD0mcGt5MGRFbTlnSGZhbHNSRnBTWnJ1UEhoc3pnPQ=="; Expires=Sat, 01 Nov 2025 12:57:57 GMT; Path=/; Domain=ct.pinterest.com; Secure; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1525145129494401 x-pinterest-rid-128bit: 2b19434dee8045e3152a676a2a6e52e9 Date: Fri, 01 Nov 2024 12:57:57 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: b218925b9f1d26340084c4ce1e3a371e6eb7a251
2024-11-01 12:57:57 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.7	60418	18.158.246.206	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	1914	OUT	GET /saq_pxl?uid=pqtuA6772BJLS3IPc6D-RQ,%20qCa8YLMEWX0Q4X5lgYDF6Q&is_js=true&landing_url=https%3A%2F%2Fwww.purolator.com%2Fen%2Fshipping%2Ftracker%3Fpin%3D335008262560&t=Track%20a%20Package%20or%20Shipment%20%7C%20Purolator&tip=UEz8gC6aLzZ0XjEClX7upqXQNhavB7_6utODP1m4ZqY&host=https%3A%2F%2Fwww.purolator.com&l_src=&l_src_d=&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s&sa-user-id-v2=s%253AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc&sa-user-id=s%253A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.purolator.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; sa-user-id=s%3A0-bf38120c-b305-517b-693f-0446b22483d7.d6qqkm8n2JMruxVZ6v9Ew2iShgN0hQGpTiMfyQLPrmE; sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; sa-user-id-v2=s%3AvzgSDLMFUXtpPwRGsiSD163--lI.l9Q20DgqLEQmSehEqpnXdVh5GRVeTEwYqpQbIGYxLAc; sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s; sa-user-id-v3=s%3AAQAKIK4fe9uXkLGni4pEeKB3hqqaM6crvkxy7Elrc814nCA3EHwYBCDToJO5BjABOgT87-jmQgTJABO7.9dJUstsSSmlq5gP5JhQkakTCyAFpQTmo4zHFO5OkX3s
2024-11-01 12:57:57 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:57 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 116 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.purolator.com
2024-11-01 12:57:57 UTC	116	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 59 4d 7a 58 37 41 30 63 67 6f 4d 66 68 74 32 69 37 50 73 4c 45 62 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["YMzX7A0cgoMfht2i7PsLEb"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.7	60428	98.82.154.76	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	686	OUT	GET /iu3?pid=85404e25-ec6a-425a-8e15-a871399e7ad2&event=PageView&ts=1730465871187&uuid=577fb623-22fc-4b29-a1aa-4ad63d483b22&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.purolator.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A26bD3yYx0Y6tYwvEh0Lkjk\|t
2024-11-01 12:57:57 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 01 Nov 2024 12:57:57 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: QDDR0S1HKSYB5141K71T Set-Cookie: ad-id=A26bD3yYx0Y6tYwvEh0Lkjk; Domain=.amazon-adsystem.com; Expires=Tue, 01-Jul-2025 12:57:57 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Tue, 01-Jan-2030 12:57:57 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-11-01 12:57:57 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.7	60427	52.2.40.11	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	366	OUT	GET /collect.js HTTP/1.1 Host: 100008210.collect.igodigital.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-01 12:57:57 UTC	204	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:57 GMT Content-Type: application/javascript Content-Length: 8440 Connection: close Last-Modified: Fri, 01 Nov 2024 12:01:51 GMT Vary: Accept-Encoding
2024-11-01 12:57:57 UTC	8440	IN	Data Raw: 69 66 20 28 22 75 6e 64 65 66 69 6e 65 64 22 20 3d 3d 3d 20 74 79 70 65 6f 66 28 5f 65 74 6d 63 29 29 20 7b 0a 20 20 76 61 72 20 5f 65 74 6d 63 20 3d 20 5b 5d 3b 0a 7d 0a 0a 69 66 20 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 29 20 7b 0a 20 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 72 67 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 72 67 29 20 3d 3d 3d 20 27 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 27 3b 0a 20 20 7d 3b 0a 7d 0a 0a 76 61 72 20 5f 65 74 6d 63 5f 74 65 6d 70 20 3d 20 5f 65 74 6d 63 3b 0a 76 61 72 20 5f 65 74 6d 63 20 3d 20 7b 0a 0a 20 20 64 65 62 75 67 3a 20 66 61 6c 73 65 2c 0a 0a 20 20 73 65 74 75 70 3a Data Ascii: if ("undefined" === typeof(_etmc)) { var _etmc = [];}if (!Array.isArray) { Array.isArray = function(arg) { return Object.prototype.toString.call(arg) === '[object Array]'; };}var _etmc_temp = _etmc;var _etmc = { debug: false, setup:

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	60429	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:57 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8a5e2199-d01e-0014-3f2b-2ced58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125757Z-16ccfc49897wlhjjhC1DFWsx6c00000000gg00000000atw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:57 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	60430	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-01 12:57:57 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-01 12:57:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 12:57:57 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6028abc9-b01e-0002-6508-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241101T125757Z-16ccfc49897xnlwfhC1DFWz50s00000000mg00000000f2vy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-01 12:57:57 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Target ID:	1
Start time:	08:57:35
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:57:38
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2008,i,2931152776266479355,3246117985939233813,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	08:57:40
Start date:	01/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://purolator.com/en/tracker?pin=335008262560"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WLL676
Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-65SMPXQ279&gacid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=170407035
Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WLL676
Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-65SMPXQ279&gacid=1665380416.1730465873&gtm=45je4au0v9128867181z872392466za200zb72392466&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848~101878899~101878944~101925629&z=170407035

Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: No <meta name="author".. found
Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: No <meta name="author".. found

Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: No <meta name="copyright".. found
Source: https://www.purolator.com/en/shipping/tracker?pin=335008262560&sdate=2024-10-29	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.facebook.com/PurolatorInc"> equals www.facebook.com (Facebook)
Source: chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.facebook.com/PurolatorInc"><span class="sr-only">Click to go to our Facebook</span></a><a href="https://www.facebook.com/PurolatorInc"><a href="https://www.facebook.com/PurolatorInc"> equals www.facebook.com (Facebook)
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.linkedin.com/company/8948?trk=tyah"> equals www.linkedin.com (Linkedin)
Source: chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.linkedin.com/company/8948?trk=tyah"><span class="sr-only">Click to go to our LinkedIn</span></a><a href="https://www.linkedin.com/company/8948?trk=tyah"><a href="https://www.linkedin.com/company/8948?trk=tyah"> equals www.linkedin.com (Linkedin)
Source: chromecache_235.3.dr, chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.twitter.com/PurolatorInc"> equals www.twitter.com (Twitter)
Source: chromecache_295.3.dr	String found in binary or memory: <li class="mr-1"><a href="https://www.twitter.com/PurolatorInc"><span class="sr-only">Click to go to our Twitter</span></a><a href="https://www.twitter.com/PurolatorInc"><a href="https://www.twitter.com/PurolatorInc"> equals www.twitter.com (Twitter)
Source: chromecache_293.3.dr, chromecache_372.3.dr, chromecache_280.3.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_280.3.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ia=M.length,la=0;la<ia;la++)if(!v&&c(M[la],I.Qe)){fK("https://www.youtube.com/iframe_api");v=!0;break}})}}else G(t.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},u,v=!1;Y.__ytl=n;Y.__ytl.o="ytl";Y.__ytl.isVendorTemplate=!0;Y.__ytl.priorityOverride=0;Y.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_372.3.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=UA(a,c,e);S(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return S(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},XA=function(){var a=[],b=function(c){return db(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_372.3.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_273.3.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_273.3.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_273.3.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_372.3.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: purolator.com
Source: global traffic	DNS traffic detected: DNS query: www.purolator.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bc0a.com
Source: global traffic	DNS traffic detected: DNS query: ixfd-api.bc0a.com
Source: global traffic	DNS traffic detected: DNS query: marvel-b1-cdn.bc0a.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: web.purolator.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: 100008210.collect.igodigital.com
Source: global traffic	DNS traffic detected: DNS query: analytics.tiktok.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: tags.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: nova.collect.igodigital.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: prod.virtualchatpurolator.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com

Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://purolator.com/en/tracker?pin=335008262560

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Windows Analysis Report
https://purolator.com/en/tracker?pin=335008262560