Edit tour

Windows Analysis Report
https://krtra.com/t/onJtp2YcgmoQ

Overview

General Information

Sample URL:	https://krtra.com/t/onJtp2YcgmoQ
Analysis ID:	1550919
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4128 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 1180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://krtra.com/t/onJtp2YcgmoQ" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-07T10:30:14.669901+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.11	50295	216.239.36.181	443	TCP

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: app.kartra.comConnection: keep-aliveContent-Length: 1550sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://app.kartra.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.kartra.com/error/deactivatedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 07 Nov 2024 09:29:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeexpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no-cache, must-revalidatepragma: no-cacheCF-Cache-Status: DYNAMICStrict-Transport-Security: max-age=0Server: cloudflareCF-RAY: 8dec4d07caf32cd5-DFW

Source: chromecache_304.3.dr, chromecache_333.3.dr	String found in binary or memory: http://bassistance.de/jquery-plugins/jquery-plugin-validation/
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: http://dev.jquery.com/ticket/2752)
Source: chromecache_304.3.dr, chromecache_333.3.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: http://docs.jquery.com/Tutorials:Introducing_$(document).ready()
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: http://groups.google.com/group/jquery-dev/browse_thread/thread/36395b7ab510dd5d
Source: chromecache_327.3.dr, chromecache_374.3.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_327.3.dr, chromecache_374.3.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_484.3.dr	String found in binary or memory: http://kartra.com/agency-dashboard
Source: chromecache_484.3.dr	String found in binary or memory: http://kartra.com/integrations-and-apis/
Source: chromecache_484.3.dr	String found in binary or memory: http://kartra.com/marketplace/
Source: chromecache_484.3.dr	String found in binary or memory: http://kartra.com/partners/
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_327.3.dr, chromecache_374.3.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_280.3.dr, chromecache_493.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_304.3.dr, chromecache_333.3.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_304.3.dr, chromecache_333.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_344.3.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_484.3.dr	String found in binary or memory: http://www.w3schools.com/css/css_syntax.asp
Source: chromecache_421.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_417.3.dr, chromecache_486.3.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_484.3.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com//resources/js/optin_front_javascript?form_id=ddb30680a691d157187ee1cf9e896d03
Source: chromecache_251.3.dr, chromecache_352.3.dr	String found in binary or memory: https://app.kartra.com/analytics/track/
Source: chromecache_484.3.dr, chromecache_251.3.dr, chromecache_352.3.dr	String found in binary or memory: https://app.kartra.com/js/build/front/analytics/track.js
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/js/node_modules/kartra-jquery/jquery-1.11.3/jquery-1.11.3.min.js
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/js/santitation.js
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/login
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/login/
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/process/add_lead/bK5Gni8pPW9c
Source: chromecache_383.3.dr, chromecache_481.3.dr	String found in binary or memory: https://app.kartra.com/process/verifyCaptcha/
Source: chromecache_484.3.dr	String found in binary or memory: https://app.kartra.com/resources/js/analytics/R8g82rqP
Source: chromecache_383.3.dr, chromecache_481.3.dr	String found in binary or memory: https://app.kartra.com/resources/js/optin_fill_in?optin=
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_376.3.dr, chromecache_273.3.dr, chromecache_285.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_484.3.dr	String found in binary or memory: https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/script.js
Source: chromecache_418.3.dr, chromecache_234.3.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_418.3.dr, chromecache_234.3.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_472.3.dr, chromecache_422.3.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_472.3.dr, chromecache_422.3.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_329.3.dr	String found in binary or memory: https://developers.google.com/web/tools/workbox/modules/workbox-sw
Source: chromecache_303.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw0aXpsog.woff2)
Source: chromecache_303.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw2aXpsog.woff2)
Source: chromecache_303.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw3aXpsog.woff2)
Source: chromecache_303.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw5aXo.woff2)
Source: chromecache_303.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw9aXpsog.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_435.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_325.3.dr, chromecache_231.3.dr	String found in binary or memory: https://genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com
Source: chromecache_325.3.dr, chromecache_231.3.dr	String found in binary or memory: https://genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com/js/widget.js
Source: chromecache_346.3.dr	String found in binary or memory: https://github.com/Outfitio/Outfit-Fonts)
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: https://github.com/malsup/form#copyright-and-license
Source: chromecache_348.3.dr, chromecache_407.3.dr	String found in binary or memory: https://github.com/malsup/form/commit/588306aedba1de01388032d5f42a60159eea9228#commitcomment-2180219
Source: chromecache_448.3.dr, chromecache_290.3.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_321.3.dr, chromecache_288.3.dr, chromecache_240.3.dr, chromecache_229.3.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_321.3.dr, chromecache_229.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.28.0/LICENSE
Source: chromecache_288.3.dr, chromecache_240.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.1/LICENSE
Source: chromecache_421.3.dr	String found in binary or memory: https://google.com
Source: chromecache_421.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_234.3.dr	String found in binary or memory: https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=61e6a419-5795-4857-a5b9-22cc888accf9-tucte26
Source: chromecache_417.3.dr, chromecache_486.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_486.3.dr	String found in binary or memory: https://jqueryui.com
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/#/schema/logo/image/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/#breadcrumb
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/#organization
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/#primaryimage
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/#website
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/?s=
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/blog/black-friday-marketing/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/comments/feed/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/dmca/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/dpa/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/eula/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/affiliate-management-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/ai-content-creation/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/appointment-scheduling-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/email-automation-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/form-builder/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/funnel-mapper-simulator/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/helpdesk-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/landing-page-builder/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/lead-management-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/marketing-analytics/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/membership-sites/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/online-course-platform/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/sales-funnel-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/shopping-cart-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/surveys-quizzes/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/video-marketing-software/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feature/webinar-platform/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/feed/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/gdpr/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/learning-center/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/partners/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/plans-and-pricing/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/plans-and-pricing/?click=CTA
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/privacy-policy/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/resources/compare/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/terms-conditions/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/terms-conditions/#r6pvmelnq
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/terms-conditions/#v7gx86cv9
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-consent-mode-3d64
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/inview/bg.js
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/scrollto/ind
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/slidingpanel
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/swiper/init.
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/swiper/swipe
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/video/index.
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/greenshiftwoo/assets/css/swatches.css?ver=1.7
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/nelio-ab-testing/assets/dist/js/public.js?ver=b6ad90526587c27f
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/nelio-session-recordings/assets/dist/js/public.js?ver=c8e9130a
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/apple-touch-icon.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/favicon-16x16.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/favicon-32x32.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/favicon.ico
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/icon.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/pwa-icon-144.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/site.webmanifest
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/site-logo-white.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/site-logo.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/instagram.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/scripts.min.js?ver=1715183705
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/styles.min.css?ver=1715183705
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/themes/kartra/assets/build/vendors/swiper-bundle.min.js?ver=1715183706
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/create-icons-1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/create-icons-3.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/create-icons-4.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/create-icons-5.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/market-icon-1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/market-icon-2.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/market-icon-3.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/market-icon-4.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/market-icon-5.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/scale-icon-1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/scale-icon-2.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/scale-icon-3.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/scale-icon-4.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/02/scale-icon-5.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/03/4436470_1559070824478Kartra_Mini_Commercial_VSL_-_V04_
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/04/77836811581Logo_2x_1__1_.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/04/ai-nav-stroke.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/06/Kartra-logo-icon-blue-transparent.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/07/create-icons-2-2.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/07/create-icons-3.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/certificate-021.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/check-done-011.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/intersect-circle1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/log-in-041.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/puzzle-piece-021.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/08/users-right1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/2024-KARTRA-DEMO-VIDEO-v001b.mp4
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/Frame-44788-1.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/GD-24-04-DOMINICK-PIRONE-KARTRA-ITS-EASY-MONEY-16X9_1.
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/GD-24-04-KARTRA-INTERVIEW-AUDREY-ROSE-AUTOMATION-90SEC
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/GD-24-04-RYAN-TURNER-KARTRA-SUCCESS-SPOTLIGHT-V2-16X9_
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/GD-24-04-SIMON-LOVELL-KARTRA-INTERVIEW-V2-16X9_1.mp4
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/GD-24-04-THOMAS-RAST-GABI-NEUROHR-UNDERDOG-STORY-16X9_
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/Image-card-md-3.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/Image-card-md-4.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/Screenshot-2024-10-31-134328.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/Screenshot-2024-10-31-134439.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/card-ui-2.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/card-ui-3.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/card-ui-4.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/hero-v2.mp4
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/images-1.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/images-2.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/images.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/10/master.png
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-1000x615.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-100x61.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-1024x629.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-146x90.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-200x123.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-300x184.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-400x246.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-500x307.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-600x369.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-700x430.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-768x472.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-800x492.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-900x553.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2-90x55.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Hero-V2.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Image-card-md-2.webp
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Image-card-md-3-1.webp
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/Play-button-2-1.svg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/embed-hero.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-1-1.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-2.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-3.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-4.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-5.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-content/uploads/2024/11/image-6.jpg
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-json/
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fkartra.com%2F
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fkartra.com%2F&format=xml
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/wp-json/wp/v2/pages/7687
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.com/xmlrpc.php?rsd
Source: chromecache_484.3.dr	String found in binary or memory: https://kartra.kartra.com/page/free_trial
Source: chromecache_484.3.dr	String found in binary or memory: https://kartrastg.wpenginepowered.com/wp-content/uploads/GreenShift/fonts/font_1/ttf/Outfit-Variable
Source: chromecache_421.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_376.3.dr, chromecache_273.3.dr, chromecache_285.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_484.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_346.3.dr	String found in binary or memory: https://scripts.sil.org/OFLThis
Source: chromecache_346.3.dr	String found in binary or memory: https://scripts.sil.org/OFLwww.rfuenzalida.comwww.fragtypefoundry.xyzRodrigo
Source: chromecache_273.3.dr, chromecache_387.3.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_376.3.dr, chromecache_285.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_484.3.dr	String found in binary or memory: https://status.kartra.com/
Source: chromecache_395.3.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.3.1
Source: chromecache_329.3.dr	String found in binary or memory: https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-sw.js
Source: chromecache_484.3.dr	String found in binary or memory: https://support.kartra.com/support/home
Source: chromecache_484.3.dr	String found in binary or memory: https://support.kartra.com/support/login
Source: chromecache_326.3.dr, chromecache_409.3.dr, chromecache_427.3.dr, chromecache_406.3.dr, chromecache_494.3.dr, chromecache_241.3.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_376.3.dr, chromecache_273.3.dr, chromecache_285.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_484.3.dr	String found in binary or memory: https://twitter.com/KartraOfficial/
Source: chromecache_465.3.dr, chromecache_489.3.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_484.3.dr	String found in binary or memory: https://www.genesisdigital.co/
Source: chromecache_484.3.dr	String found in binary or memory: https://www.genesisdigital.co/about-us/
Source: chromecache_421.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_490.3.dr, chromecache_264.3.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/820603035/?random
Source: chromecache_414.3.dr, chromecache_295.3.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/975786519/?random
Source: chromecache_421.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_421.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_376.3.dr, chromecache_273.3.dr, chromecache_285.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_484.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_484.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_376.3.dr, chromecache_273.3.dr, chromecache_285.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_484.3.dr	String found in binary or memory: https://www.instagram.com/kartraofficial/
Source: chromecache_484.3.dr	String found in binary or memory: https://www.linkedin.com/showcase/kartra/
Source: chromecache_376.3.dr, chromecache_285.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_257.3.dr, chromecache_393.3.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_376.3.dr, chromecache_285.3.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_484.3.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.11:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.11:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.11:49813 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@21/430@114/41

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://krtra.com/t/onJtp2YcgmoQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4128 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4128 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.1.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://krtra.com/t/onJtp2YcgmoQ	0%	Avira URL Cloud	safe
https://krtra.com/t/onJtp2YcgmoQ	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://kartrastg.wpenginepowered.com/wp-content/uploads/2024/10/Icon-1.svg	0%	Avira URL Cloud	safe
https://kartra.kartra.com/page/free_trial	0%	Avira URL Cloud	safe
https://genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	0%	Avira URL Cloud	safe
https://kartrastg.wpenginepowered.com/wp-content/uploads/GreenShift/fonts/font_1/ttf/Outfit-VariableFont_wght.ttf	0%	Avira URL Cloud	safe
https://support.kartra.com/support/home	0%	Avira URL Cloud	safe
https://d2uolguxr56s4e.cloudfront.net/img/shared/kartra_logo_color.svg	0%	Avira URL Cloud	safe
https://www.kartra.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
tls13.taboola.map.fastly.net	151.101.65.44	true	false	high
dfyypzw6esvc5.cloudfront.net	143.204.98.33	true	false	unknown
krtra.com	104.19.213.33	true	false	high
kartra.kartra.com	104.17.215.242	true	false	unknown
d2uolguxr56s4e.cloudfront.net	18.172.111.130	true	false	unknown
cdn-cookieyes.com	172.67.20.8	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
stats.g.doubleclick.net	108.177.15.154	true	false	high
pagestates-tracking.crazyegg.com	13.35.58.128	true	false	high
scontent.xx.fbcdn.net	157.240.253.1	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.129.44	true	false	high
www.google.com	142.250.185.68	true	false	high
app.kartra.com	104.17.215.242	true	false	high
am-vip001.taboola.com	141.226.228.48	true	false	high
star-mini.c10r.facebook.com	157.240.251.35	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
js.go2sdk.com	18.66.102.43	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
kartrastg.wpenginepowered.com	141.193.213.10	true	false	unknown
wp.wpenginepowered.com	141.193.213.10	true	false	high
analytics-alv.google.com	216.239.36.181	true	false	high
kartra.com	141.193.213.10	true	false	high
googleads.g.doubleclick.net	216.58.212.130	true	false	high
pbaptfmqic.kartra.com	104.17.215.242	true	false	high
genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	162.159.140.147	true	false	unknown
assets-tracking.crazyegg.com	18.66.122.57	true	false	high
td.doubleclick.net	142.250.186.162	true	false	high
log.cookieyes.com	18.203.70.159	true	false	high
fw-cdn.com	18.66.122.4	true	false	high
tracking.crazyegg.com	54.195.145.208	true	false	high
psb.taboola.com	unknown	unknown	false	high
www.kartra.com	unknown	unknown	false	unknown
script.crazyegg.com	unknown	unknown	false	high
trc-events.taboola.com	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
b.clarity.ms	unknown	unknown	false	high
api.nelioabtesting.com	unknown	unknown	false	high
cdn.taboola.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://kartra.com/wp-content/uploads/2024/10/GD-24-04-KARTRA-INTERVIEW-AUDREY-ROSE-AUTOMATION-90SEC-16X9_1.mp4	false		high
https://kartra.com/wp-content/plugins/nelio-ab-testing/assets/dist/js/public.js?ver=b6ad90526587c27fcce4	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg	false		high
https://kartra.com/wp-content/uploads/2024/02/market-icon-3.svg	false		high
https://kartrastg.wpenginepowered.com/wp-content/uploads/2024/10/Icon-1.svg	false	Avira URL Cloud: safe	unknown
https://kartra.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg	false		high
https://kartra.com/wp-content/uploads/2024/10/card-default-1.jpg	false		high
https://kartra.com/wp-content/uploads/2024/02/create-icons-1.svg	false		high
https://pagestates-tracking.crazyegg.com/healthcheck	false		high
https://js.go2sdk.com/v2/tune.js	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/vendors/swiper-bundle.min.js?ver=1715183706	false		high
https://kartra.com/wp-content/uploads/2024/10/card-default-5.jpg	false		high
https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/scrollto/index.css?ver=1.0	false		high
https://app.kartra.com/resources/js/analytics/R8g82rqP	false		high
https://kartra.com/wp-content/uploads/2024/08/log-in-041.svg	false		high
https://kartra.com/wp-content/plugins/nelio-session-recordings/assets/dist/js/public.js?ver=c8e9130a6efe027036b1	false		high
https://kartra.com/wp-content/uploads/2024/02/scale-icon-3.svg	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/site-logo-white.svg	false		high
https://www.clarity.ms/tag/uet/187089157?insights=1	false		high
https://kartra.com/wp-content/uploads/2024/02/create-icons-5.svg	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/styles.min.css?ver=1715183705	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/favicon.ico	false		high
https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/translations/oDd-19x9.json	false		high
https://cdn-cookieyes.com/assets/images/close.svg	false		high
https://app.kartra.com/js/node_modules/kartra-bootstrap/dist/js/bootstrap.min.js	false		high
https://cdn.taboola.com/libtrc/unip/1633491/tfa.js	false		high
https://fw-cdn.com/11133042/3854447.js	false		high
https://kartra.com/wp-content/uploads/2024/08/puzzle-piece-021.svg	false		high
https://pbaptfmqic.kartra.com/a	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/site.webmanifest	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/facebook.svg	false		high
https://d2uolguxr56s4e.cloudfront.net/img/shared/kartra_logo_color.svg	false	Avira URL Cloud: safe	unknown
https://kartra.com/?nab=1	false		high
https://cdn-cookieyes.com/assets/images/revisit.svg	false		high
https://kartra.com/wp-content/uploads/2024/07/create-icons-3.svg	false		high
https://kartra.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false		high
https://www.kartra.com/	false	Avira URL Cloud: safe	unknown
https://kartra.com/wp-content/uploads/2024/10/GD-24-04-SIMON-LOVELL-KARTRA-INTERVIEW-V2-16X9_1.mp4	false		high
https://kartra.com/offline/	false		high
https://kartra.com/wp-content/uploads/2024/10/next-grey.svg	false		high
https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/audit-table/Yq2R5h9W.json	false		high
https://www.facebook.com/tr/?id=289310888271145&ev=ViewContent&dl=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&rl=https%3A%2F%2Fapp.kartra.com%2F&if=false&ts=1730971813047&sw=1280&sh=1024&v=2.9.176&r=stable&ec=1&o=4126&fbp=fb.1.1730971812781.921362576309779732&ler=other&cdl=API_unavailable&cs_est=true&est_source=1050359236401780&it=1730971807415&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://kartra.com/wp-content/uploads/2024/10/section-hero.png	false		high
https://www.facebook.com/tr/?id=289310888271145&ev=PageView&dl=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&rl=https%3A%2F%2Fapp.kartra.com%2F&if=false&ts=1730971813047&sw=1280&sh=1024&v=2.9.176&r=stable&ec=0&o=4126&fbp=fb.1.1730971812781.921362576309779732&ler=other&cdl=API_unavailable&cs_est=true&it=1730971807415&coo=false&rqm=GET	false		high
https://kartra.com/wp-content/uploads/2024/02/market-icon-4.svg	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=289310888271145&ev=ViewContent&dl=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&rl=https%3A%2F%2Fapp.kartra.com%2F&if=false&ts=1730971813047&sw=1280&sh=1024&v=2.9.176&r=stable&ec=1&o=4126&fbp=fb.1.1730971812781.921362576309779732&ler=other&cdl=API_unavailable&cs_est=true&est_source=1050359236401780&it=1730971807415&coo=false&es=automatic&tm=3&rqm=FGET	false		high
https://log.cookieyes.com/api/v1/log	false		high
https://trc-events.taboola.com/1633491/log/3/unip?en=pre_d_eng_tb&tos=5249&scd=0&ssd=1&est=1730971807241&ver=36&isls=true&src=i&invt=3000&msa=5035&rv=1&tim=1730971811852&mrir=tto&vi=1730971807236&ref=https%3A%2F%2Fapp.kartra.com%2F&cv=20241102-3-RELEASE&item-url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ler=other&it=JS_PIXEL	false		high
https://kartra.com/wp-content/uploads/2024/10/images-2.png	false		high
https://kartrastg.wpenginepowered.com/wp-content/uploads/GreenShift/fonts/font_1/ttf/Outfit-VariableFont_wght.ttf	false	Avira URL Cloud: safe	unknown
https://kartra.com/wp-content/themes/kartra/blocks/fonts/Outfit-Bold.17cef4e6.woff2	false		high
https://kartra.com/wp-content/uploads/2024/08/users-right1.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://kartra.com/feature/membership-sites/	chromecache_484.3.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_376.3.dr, chromecache_285.3.dr	false		high
https://kartra.com/#organization	chromecache_484.3.dr	false		high
https://kartra.com/blog/black-friday-marketing/	chromecache_484.3.dr	false		high
https://www.youtube.com/embed/	chromecache_257.3.dr, chromecache_393.3.dr	false		high
https://github.com/zloirock/core-js	chromecache_321.3.dr, chromecache_288.3.dr, chromecache_240.3.dr, chromecache_229.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/03/4436470_1559070824478Kartra_Mini_Commercial_VSL_-_V04_	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-700x430.jpg	chromecache_484.3.dr	false		high
https://kartra.com/feature/webinar-platform/	chromecache_484.3.dr	false		high
https://swiperjs.com	chromecache_326.3.dr, chromecache_409.3.dr, chromecache_427.3.dr, chromecache_406.3.dr, chromecache_494.3.dr, chromecache_241.3.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_304.3.dr, chromecache_333.3.dr	false		high
https://kartra.com/comments/feed/	chromecache_484.3.dr	false		high
https://kartra.com/terms-conditions/	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-consent-mode-3d64	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Image-card-md-3-1.webp	chromecache_484.3.dr	false		high
https://kartra.kartra.com/page/free_trial	chromecache_484.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/microsoft/clarity	chromecache_448.3.dr, chromecache_290.3.dr	false		high
https://kartra.com/privacy-policy/	chromecache_484.3.dr	false		high
https://app.kartra.com/login	chromecache_484.3.dr	false		high
https://kartra.com/resources/compare/	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-300x184.jpg	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-800x492.jpg	chromecache_484.3.dr	false		high
https://schema.org	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/image-4.jpg	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-900x553.jpg	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/10/Image-card-md-3.png	chromecache_484.3.dr	false		high
https://connect.facebook.net/	chromecache_472.3.dr, chromecache_422.3.dr	false		high
https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/pwa-icon-144.png	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/swiper/swipe	chromecache_484.3.dr	false		high
https://twitter.com/KartraOfficial/	chromecache_484.3.dr	false		high
https://kartra.com/terms-conditions/#r6pvmelnq	chromecache_484.3.dr	false		high
https://genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	chromecache_325.3.dr, chromecache_231.3.dr	false	Avira URL Cloud: safe	unknown
https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/slidingpanel	chromecache_484.3.dr	false		high
https://jqueryui.com	chromecache_486.3.dr	false		high
https://kartra.com/#primaryimage	chromecache_484.3.dr	false		high
https://support.kartra.com/support/home	chromecache_484.3.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-600x369.jpg	chromecache_484.3.dr	false		high
https://www.clarity.ms/tag/uet/	chromecache_465.3.dr, chromecache_489.3.dr	false		high
https://www.google.com/pagead/1p-user-list/975786519/?random	chromecache_414.3.dr, chromecache_295.3.dr	false		high
https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=61e6a419-5795-4857-a5b9-22cc888accf9-tucte26	chromecache_234.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-768x472.jpg	chromecache_484.3.dr	false		high
https://kartra.com/wp-content/uploads/2024/11/Hero-V2-1000x615.jpg	chromecache_484.3.dr	false		high
http://docs.jquery.com/Plugins/Validation	chromecache_304.3.dr, chromecache_333.3.dr	false		high
https://kartra.com/wp-content/plugins/nelio-session-recordings/assets/dist/js/public.js?ver=c8e9130a	chromecache_484.3.dr	false		high
https://kartra.com/#website	chromecache_484.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.177.15.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.203.70.159	log.cookieyes.com	United States	16509	AMAZON-02US	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.66.122.4	fw-cdn.com	United States	3	MIT-GATEWAYSUS	false
54.195.145.208	tracking.crazyegg.com	United States	16509	AMAZON-02US	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.122	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.20.8	cdn-cookieyes.com	United States	13335	CLOUDFLARENETUS	false
18.66.122.57	assets-tracking.crazyegg.com	United States	3	MIT-GATEWAYSUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
18.66.102.43	js.go2sdk.com	United States	3	MIT-GATEWAYSUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
162.159.140.147	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
18.66.122.45	unknown	United States	3	MIT-GATEWAYSUS	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
104.19.213.33	krtra.com	United States	13335	CLOUDFLARENETUS	false
13.35.58.128	pagestates-tracking.crazyegg.com	United States	16509	AMAZON-02US	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
13.35.58.40	unknown	United States	16509	AMAZON-02US	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
143.204.98.33	dfyypzw6esvc5.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.212.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.36.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.186.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.172.111.130	d2uolguxr56s4e.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.17.215.242	kartra.kartra.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
141.193.213.10	kartrastg.wpenginepowered.com	United States	396845	DV-PRIMARY-ASN1US	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
141.193.213.11	unknown	United States	396845	DV-PRIMARY-ASN1US	false
151.101.129.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.11

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1550919
Start date and time:	2024-11-07 10:28:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://krtra.com/t/onJtp2YcgmoQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@21/430@114/41
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.110, 74.125.133.84, 142.250.184.227, 34.104.35.123, 142.250.186.138, 172.217.18.3, 172.202.163.200, 2.16.100.168, 88.221.110.91, 192.229.221.95, 20.242.39.171, 172.217.16.200, 52.165.164.15, 216.58.206.40, 104.19.147.8, 104.19.148.8, 142.250.185.234, 142.250.184.202, 172.217.16.138, 216.58.212.170, 142.250.186.170, 142.250.186.42, 142.250.185.202, 142.250.185.138, 142.250.185.74, 142.250.74.202, 142.250.186.74, 142.250.181.234, 172.217.18.106, 142.250.185.170, 216.58.206.74, 172.217.16.155, 172.217.23.123, 142.250.186.91, 142.250.185.251, 142.250.184.219, 142.250.181.251, 142.250.74.219, 216.58.206.91, 142.250.186.187, 172.217.18.123, 142.250.185.219, 216.58.212.187, 142.250.185.155, 142.250.186.59, 142.250.185.91, 142.250.185.187, 142.250.185.232, 13.74.129.1, 4.153.129.168, 204.79.197.237, 13.107.21.237
Excluded domains from analysis (whitelisted): storage.googleapis.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, a767.dspw65.akamai.net, script.crazyegg.com.cdn.cloudflare.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, vmss-clarity-ingest-eus2.eastus2.cloudapp.azure.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, c.bing.com, dual-a-0034.a-msedge.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://krtra.com/t/onJtp2YcgmoQ

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 08:29:14 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.980235586514878
Encrypted:	false
SSDEEP:	48:8Z4dSsTU+uRHP0idAKZdA1nehwiZUklqehLy+3:8ZoMq0y
MD5:	A4881DB3D8972B161AE807C0FA0BA369
SHA1:	47876A13F5F0D743C47F01EA6DAA97373572BE1C
SHA-256:	09983EE36C581AE5F17046B51661969366F6643ECA7471AD4A99AB32D3B3FA5E
SHA-512:	89E0DDDD1233FECFC3490275F58033DD469C0FF15C95AE81E483A22E54C25BB9F9624C133255B2C23AB5F2CF4ABBE86DF4F6F2DD29A2AE85F496C9B420AF4FB9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........0......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VgY.K............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 08:29:14 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9959349193715807
Encrypted:	false
SSDEEP:	48:864dSsTU+uRHP0idAKZdA1geh/iZUkAQkqehky+2:86oMe9QVy
MD5:	63A96F9C534A85460ADB55094B330399
SHA1:	955BC35F63AF1CAB7FF9CDAFC1F4C1BB0477EE4C
SHA-256:	5BDA0229218B16EE18F1142FC454405084781978F8FBC46A98BBA070308808B8
SHA-512:	FC371660F3C2A2B06F3BCAD0C345A105BBFB5AF127F8AC60E17071392E1DB55584EA5C1D7C0698F79F2AC4E3A7ED8ABFB6813A95C75623AEEB934FCF856B954C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H...0......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VgY.K............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 09:52:18 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.0047768477000405
Encrypted:	false
SSDEEP:	48:874dSsTU+uCHP0idAKZdA148eh7sFiZUkmgqeh7s+y+BX:87oMpnoy
MD5:	894F577301862A099A41168891E5E695
SHA1:	A7E16B17BDF91E6CCAB33E1ABFFBCC6918D38452
SHA-256:	24F71215B6B7DD33FDED9B3350E356DCB855F01F78FFC099E91E8A191DBE375C
SHA-512:	FC44D90013387DADC0D32F104D00AD3994DA2609DA616AF7CD6756A2CC3A8D41F495EEECFBC002DE520CF33D5710500DA0FAF7A42B28B3C763DE31A9AC437A61
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s4..z.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.V............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 08:29:14 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9945973815555034
Encrypted:	false
SSDEEP:	48:8K4dSsTU+uRHP0idAKZdA1lehDiZUkwqehAy+R:8KoM72y
MD5:	8E098E95AA77988B7BC5B118FAE52753
SHA1:	58AF8E64CAC0195B0B3874B70D180E6CDC1F9C17
SHA-256:	B6144B56CAE088E4760418ABFB155540B602AA102265DD776057486D734BC098
SHA-512:	7F90F03D56799D8E9EC1E51D4BE8748E2C2615AF7FC509C81B1639CCC2AB8B02C904CA51996CB6183DB15E782A7F1D98C2B98619E31043801061331F54BBB952
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........0......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VgY.K............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 08:29:14 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.982277163353299
Encrypted:	false
SSDEEP:	48:844dSsTU+uRHP0idAKZdA17ehBiZUk1W1qehyy+C:84oMb9Sy
MD5:	AC21D2CF9B9EFCAE7A134EC7E1D7E29F
SHA1:	DDA9AF8BDD1F1B4B8FB1EE08C9D6930D34631BCD
SHA-256:	26B1900EE67E378832C1E03254E4326E2FD44E4162CF8DADA4737E1934DBDC05
SHA-512:	169F159A29620572DBA377C0AC3A67F056B2178389343D51A8FD29738672BEC19298BA11296229153F09CA2BEAF29F41B3DFDE08BFB9F4E27AD83A5413678867
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....w..0......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VgY.K............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Nov 7 08:29:14 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9929623296749237
Encrypted:	false
SSDEEP:	48:8m4dSsTU+uRHP0idAKZdA1duTiehOuTbbiZUk5OjqehOuTboy+yT+:8moMhTLTbxWOvTboy7T
MD5:	1E478F65EC8ED4CD4BEA948E367AF994
SHA1:	1DAF544688CB4FD721FE09EC21464613624E127F
SHA-256:	DEB0E606A91161BBCC2502E4622E97A8795C6D0A664EB5B1C25D80455109748C
SHA-512:	2C4738F43991FAF49D7DB32A2867AF72B9F523083A10D19B00A76B887B2B3CAB3C335B992F2BB1901E1EF269729CB20EB9793515AAA4C498C5F408C9E7D4DB2D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....;..0......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EWXX..PROGRA~1..t......O.IgY.K....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VgY.K....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.V..Chrome..>......CW.VgY.K....M.....................g.u.C.h.r.o.m.e.....`.1.....EW.V..APPLIC~1..H......CW.VgY.K..........................g.u.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VgY.K............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............k.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3762
Entropy (8bit):	4.223382825340393
Encrypted:	false
SSDEEP:	48:AS4+TV9xyBfWGlUiy7YcDUjtRv1bk4JvxnXUwouaxLigXGgDOi9i30NJ1Ur6AnZb:5TYmi/cIL1Y6JXZoXLNS7381UFZ0qf
MD5:	2E4DF113EDE6D5CE8DE2DC1338A3890E
SHA1:	3AF1721CA29F4ADA0CD422206C253CF8EE52781A
SHA-256:	911F58B8D14BD6F73A83FD774E44BEC97E896317C7093DC83E96921E64F1FBD5
SHA-512:	12C975049692F337FCED697963359F535B7D08B4B230447CBA37B6E5C8C1FD31E8F26329A315454C83E51CA41787737428E3932979156E205CF0FEAADDE8FB97
Malicious:	false
Reputation:	low
Preview:	<svg width="78" height="13" viewBox="0 0 78 13" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.48703 1.81738C8.08615 1.81738 10.0289 3.20915 10.659 5.48658H7.74485C7.29854 4.5756 6.45842 4.14542 5.46078 4.14542C3.83304 4.14542 2.70413 5.30944 2.70413 7.182C2.70413 9.05455 3.83304 10.2186 5.46078 10.2186C6.45842 10.2186 7.29854 9.76309 7.74485 8.87742H10.659C10.0289 11.1549 8.08615 12.5466 5.48703 12.5466C2.25782 12.5213 0 10.3198 0 7.15669C0 3.99359 2.25782 1.81738 5.48703 1.81738Z" fill="#293C5B"/>.<path d="M15.9612 12.5738C13.4146 12.5738 11.498 10.929 11.498 8.27203C11.498 5.61503 13.4671 3.97021 16.0137 3.97021C18.5603 3.97021 20.5293 5.61503 20.5293 8.27203C20.5293 10.929 18.5078 12.5738 15.9612 12.5738ZM15.9612 10.347C16.9063 10.347 17.7989 9.66379 17.7989 8.27203C17.7989 6.85496 16.9326 6.19704 15.9874 6.19704C15.016 6.19704 14.1759 6.85496 14.1759 8.27203C14.2022 9.66379 14.9898 10.347 15.9612 10.347Z" fill="#293C5B"/>.<path d="M25.8079 12.5738C23.2612 12.5738 21.3

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	8079
Entropy (8bit):	4.794839293225124
Encrypted:	false
SSDEEP:	192:vIJU+9lLT+tf2UIGAoI8MTq9mIvRbYengwuEV:v8U+9JT+oFGTI8z9NvRb/gwh
MD5:	BFDE792648EC8CB1AA258268227CB35C
SHA1:	0CE4B92B4486941C42F7D6B56A0B4224CD1EFED2
SHA-256:	BE8106D06F3E0B550594DD0C941B122F5B963AE5C2E6F55C7F2865E1C28AFED3
SHA-512:	81ADF4BB79D25631B0BA83A6A64A481B99F760696AF2275D13426F6B4ED7E52435D26FB61CE9570D5743E7E002538A35EA863231F5A07EEC6B6D5C29B685444E
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/audit-table/Yq2R5h9W.json
Preview:	{"cookies":{"cookieyes-consent":{"cookie_id":"cookieyes-consent","duration":"1 year","description":"CookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors."},"_ps_xid_VLPrFw6C_PllY":{"cookie_id":"_ps_xid_VLPrFw6C_PllY","duration":"3 months","description":"Description is currently not available."},"_ps_partner_key_VLPrFw6C":{"cookie_id":"_ps_partner_key_VLPrFw6C","duration":"3 months","description":"Description is currently not available."},"kaff_R8g82rqP":{"cookie_id":"kaff_R8g82rqP","duration":"1 month","description":"Description is currently not available."},"_ps_xid_VLPrFw6C_V65e":{"cookie_id":"_ps_xid_VLPrFw6C_V65e","duration":"session","description":"Description is currently not available."},"_ps_xid_VLPrFw6C_PDGq":{"cookie_id":"_ps_xid_VLPrFw6C_PDGq","duration":"session","description":"Description is currently not avai

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	37740
Entropy (8bit):	7.962615802741316
Encrypted:	false
SSDEEP:	768:BnrxXDJTmA8zx5LFEWj362RiLUs7l1zBYzs9LhISL:BnFhb+xq2RQ/l1zBYo9LhT
MD5:	1CFD0F65CEE82FAFB7D2C2F43ADF1E99
SHA1:	AE30B9628C52DF048B30A3B67B17E0325CED016C
SHA-256:	EF0DAD0F5C0E18F84DF2437F833D8A8A4A032A5F1C18BBE749273BC6CFF866CC
SHA-512:	07A5C1EF12FBC6A06419A00BCF45A8BD5B03E2089D9E46396AD8BA683E550F6EC5CDFB6768107F9CC439239BD2BE6EFA48420CC2A6D30DB39FEF8F4C502AEF92
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-3.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............8........................................................................\|..q.Z43Y@.B..4.b.&3.\|.......b..4.\{.x..<.......f.n.p..`p..HG.pW...,^..,0x..8.N.X!....f......s......;.p....r.\|m.1....4..-ni.O....,-.<aa....n.`.gp.gpn..b..x.p1#.;...../.3..X4C.]...9.@.......KB.s].....o].F.{5..4...;....#..#..0.X}.]......88=...P.f............`.O,\.".........t...{.Q.]..H1....../f...c..@0...3..E.b..,3..n....vn..p.p...C08CR: ..._.p(p9k.P.y`.^..\|@..vv............wP.c..A....{...?5..k.r...\..f7x..x....w..{..w..\8 ........${...+.P.........../.;.o..i..(hR.u.U...A..7..{q..R,2cE.Y..9..z....a..f.ov..f`.....b.W. ... ..Ac>w+....@.h.........}.7.o.4...xV.{..9.*....7.......>c..s...."`...X\g.}.%.Y.;....8<"..n.-`")Y.D.....V....-..h(V.V.'1\!...t.....s......T<_O5.CF....=.....`....b..3..%.E......:.\.P....U...Z.J..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	147776
Entropy (8bit):	5.466366222694911
Encrypted:	false
SSDEEP:	1536:k/w6gUnZSjtDuIogfX8bwzDwAMapgzZkMNeAyiqay86nvofFGlLb8a5t5x7IlSqj:FZD4UDpNuZkAl5bOV+
MD5:	A90D608A69D6BEB077D027E997EC565B
SHA1:	25C19FDC60FE9E9480911D3D43198C3B73247C35
SHA-256:	85A1E4986FD7014028084A6C2B4FB74F66427FD40303737F634B103045B2A172
SHA-512:	7DCDC2C183D0EBF1A5176AB17936AE1E4A856A266C2B5D50FA82B990CEEE53A0D76F56D65196A6A272E6A54CD1C6B211F43EFA99626774D0130E68C324F736E9
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/build/front/analytics/track.js
Preview:	(()=>{var t={82627:(t,e,r)=>{"use strict";var n=r(55936),o=r(2534),i=o(n("String.prototype.indexOf"));t.exports=function(t,e){var r=n(t,!!e);return"function"==typeof r&&i(t,".prototype.")>-1?o(r):r}},2534:(t,e,r)=>{"use strict";var n=r(87043),o=r(55936),i=o("%Function.prototype.apply%"),a=o("%Function.prototype.call%"),u=o("%Reflect.apply%",!0)\|\|n.call(a,i),c=o("%Object.getOwnPropertyDescriptor%",!0),s=o("%Object.defineProperty%",!0),f=o("%Math.max%");if(s)try{s({},"a",{value:1})}catch(t){s=null}t.exports=function(t){var e=u(n,a,arguments);c&&s&&(c(e,"length").configurable&&s(e,"length",{value:1+f(0,t.length-(arguments.length-1))}));return e};var l=function(){return u(n,i,arguments)};s?s(t.exports,"apply",{value:l}):t.exports.apply=l},90958:t=>{"use strict";var e="Function.prototype.bind called on incompatible ",r=Array.prototype.slice,n=Object.prototype.toString,o="[object Function]";t.exports=function(t){var i=this;if("function"!=typeof i\|\|n.call(i)!==o)throw new TypeError(e+i);for(v

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.647053521088557
Encrypted:	false
SSDEEP:	12:tr8oScjtuCP8HQH56Fg8uE7eTRHQHfFS4r+HK1HCzQfdDVW5RxJqFg:tQoSatuI8wHE7uEywHfFStq1HHVs5Rj7
MD5:	9DF16EC1950528DDAAAB7DA2EED5663A
SHA1:	E44EAD945B712D784EE19E7D0A3CA6D9124923DE
SHA-256:	492421B038AB4E0DB4399391A40D63952C352FE5A4C6650FAA1E01BD8ECD5504
SHA-512:	C5682B4BED8528783F958744DDBD182358F937759510321EFA4CC209ED68B8DE87DA3CDFFB78AEA6FB5B7316BF97AAE1CB3448B76752880CB5BC8C6BBEDC59A5
Malicious:	false
Reputation:	low
Preview:	<svg width="522" height="512" viewBox="0 0 522 512" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M210.366 225.046L290.211 131.836H391.586L301.581 224.943L432.77 421.538C474.056 378.702 499.456 320.436 499.456 256.24C499.456 124.659 392.797 18 261.215 18C243.76 18 226.765 19.8921 210.383 23.4548V225.063L210.366 225.046Z" fill="#2E88DC"/>.<path d="M249.768 277.054L210.391 318.307V378.497H134.176V54.6841C67.3718 96.8909 23 171.367 23 256.224C23 387.805 129.659 494.464 261.24 494.464C300.822 494.464 338.136 484.798 370.968 467.734L249.768 277.071V277.054Z" fill="#2E88DC"/>.</svg>.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62898)
Category:	downloaded
Size (bytes):	351274
Entropy (8bit):	5.365673380742743
Encrypted:	false
SSDEEP:	6144:UFqGiEmwCBIrM1/Q47GKeyiSzwyZM86aKSOIOAbn5ONkNWBNOdbxUMLuJz51y:UFcEmdi41yyPp6aKSOIOAbn5+BNOdbxX
MD5:	8FAEDC33AA18BE2CC852BFFB489DCD07
SHA1:	9A95EE94500E7E39984BD538E6669E8FC20895D0
SHA-256:	B15CD545132F15D071B4D914A1C262F0E95E1F2B9E586A335674649419332620
SHA-512:	ECEBB5BCFECB79F76AF6011B9246388CCFBAB3CE76E1742A719A81453CA045BE4064305C04049F6C1C3CF824EFC4D79177C81F445A6F0B3D8EDF3B611E5DA901
Malicious:	false
Reputation:	low
URL:	https://fw-cdn.com/11133042/3854447.js
Preview:	(function(){var fw={};(function(fw,$){if($){window.freshsales=window.freshsales\|\|{};window.freshsales.$=window.freshsales.$\|\|jQuery}var chatSelector=document.querySelector("[chat]");window.hideChatWidget=chatSelector&&chatSelector.hasAttribute("chat")&&chatSelector.getAttribute("chat")==="false";var widgetSelector=document.querySelector("script[widgetId]");window.custWidgetId=widgetSelector&&widgetSelector.hasAttribute("widgetId")?widgetSelector.getAttribute("widgetId"):"";var FreshworksCRM=(function(){let eventListeners={};function FreshworksCRM(){}FreshworksCRM.prototype.identify=function(){let event={name:"identify",args:arguments,origin:window.location.origin,created_by:"fwcrm"};let customEvent=new CustomEvent("fwcrm_event",{detail:event});window.dispatchEvent(customEvent)};FreshworksCRM.prototype.trackCustomEvent=function(){let event={name:"trackCustomEvent",args:arguments,origin:window.location.origin,created_by:"fwcrm"};let customEvent=new CustomEvent("fwcrm_event",{detail:event

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1107
Entropy (8bit):	4.8183362266611995
Encrypted:	false
SSDEEP:	24:2diO4I1zyLkw4vzmgMkM9JwT6fba2aQl5WpUGjvH0yrQnhllor7Ixh:c31egLIwkGHKWpUGDU3
MD5:	333BA1DD96D80DDAA7594378BF14449F
SHA1:	6283B2E0C869D17F383193B33177ABC3B143B8E8
SHA-256:	56A8B7CECC1D30DC3C035C54DB5CAAB1E57BBDAF62EBF029498F5FB7F6A41C7F
SHA-512:	BF5B66D66D5114866D21B1D36FB692669BAD2F7AF4E02F8AAC8CB4719F72F28E22E6834E8ABE8CF5A78D71F10B171EF52724C688330349C5355965B214CDA021
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_272_2238)"><path d="M1.5 8.99968L8.73167 12.6155C8.83006 12.6647 8.87925 12.6893 8.93085 12.699C8.97655 12.7076 9.02345 12.7076 9.06915 12.699C9.12075 12.6893 9.16994 12.6647 9.26833 12.6155L16.5 8.99968M1.5 12.7497L8.73167 16.3655C8.83006 16.4147 8.87925 16.4393 8.93085 16.449C8.97655 16.4576 9.02345 16.4576 9.06915 16.449C9.12075 16.4393 9.16994 16.4147 9.26833 16.3655L16.5 12.7497M1.5 5.24968L8.73167 1.63385C8.83006 1.58465 8.87925 1.56006 8.93085 1.55038C8.97655 1.5418 9.02345 1.5418 9.06915 1.55038C9.12075 1.56006 9.16994 1.58465 9.26833 1.63385L16.5 5.24968L9.26833 8.86552C9.16994 8.91471 9.12075 8.93931 9.06915 8.94899C9.02345 8.95756 8.97655 8.95756 8.93085 8.94899C8.87925 8.93931 8.83006 8.91471 8.73167 8.86552L1.5 5.24968Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><de

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.676287250874529
Encrypted:	false
SSDEEP:	3:YTyLSMiLYVMf88nTgEXdA7EH3DCai+RKYM2ZD9DXga:YWLSVMdi5dAgzCURDdbga
MD5:	93309C994DFE776347F4A35A908677AF
SHA1:	008C8F81AF97911BE5D922B9751D53DDD4199491
SHA-256:	C77D57750DDD61D3E3571A8E665611B27B667F816A2D7C87EA5BA6BFED8C950E
SHA-512:	5D7289BCB91A3539293CE7D7F0DDFF22C17F9F6DC0C8A2BD793C82A0E8010A7ABC31C59D71C3108E9FDC996C6D789B3EAF985E0666E49CC3B9D4C25C7379F185
Malicious:	false
Reputation:	low
Preview:	{"version":"11.5.306","sites_sampling":"%8&4!}%\|%]!}$<$5$4$4$3$6$3$,!}&%%?&$%^!}$<!}%~%?&&,&%?$.%[&&&$!}$,!}&%^%[&&&%]%\|&%%`%=&*%?&,%\|&&!}$<$9$1&6%;"}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2742), with no line terminators
Category:	dropped
Size (bytes):	2742
Entropy (8bit):	5.555171477561272
Encrypted:	false
SSDEEP:	48:npQMK26zAFH1w48t+Rp5Np2om4wZFCm3+tzah5IEuNCRB4SNycGDPzev7gG:nqdA91tdxhm4kxOtH/CRhp4PzeL
MD5:	A7E6926A019D9E005A3465919C4AC1C3
SHA1:	C40C92F4A47A512DBAB11A9114A9486A69130EE5
SHA-256:	466F214D47405D6111D3384B0E4F39EFBE1C0463F04724C626B08798CE1BF440
SHA-512:	4B6BE780A8EEB690FEC1D5A420B0FB480B865245A6D55907460470ECF2C2B905DAEAABC9B603ED09EC05FAA1101591B0AAD0C0BCBCAEF5214655947B3314238E
Malicious:	false
Reputation:	low
Preview:	TFASC.trkCallback({"trc":{"si":"5acc02eb9117b0d389764db5a4810649","sd":"v2_5acc02eb9117b0d389764db5a4810649_61e6a419-5795-4857-a5b9-22cc888accf9-tucte260e23_1730971816_1730971816_CIi3jgYQ09ljGITc1q-wMiABKAMw4QE4kaQOQPzYD0jC2NkDUPsEWABgAGiQgI6I5eeGxhBwAYABAA","ui":"61e6a419-5795-4857-a5b9-22cc888accf9-tucte260e23","plc":"DESK","wi":"-4766578067431891853","cc":"US","route":"LA:LA:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"uvpw":"1","pi":"1633491","cpb":"EhIyMDI0MTEwMi0zLVJFTEVBU0UYASCc__________8BKhlsYS50YWJvb2xhc3luZGljYXRpb24uY29tMg90cmMtdHJhY2tpbmcyMDU4gPT77wpAkaQOSPzYD1DC2NkDWPsEYwjoRBCJWxgwZGMI3V0Q_HoYMmRjCNcWENUfGCNkYwieQRCWWBg2ZGMIlhQQmRwYGGRjCNIDEOAGGAhkYwjcFRD7JRgJZGMIpCcQijUYL2RjCPQUEJ4dGB9keAGAAeIjiAHLmZDSAZABGJgBs6PXr7Ay2wEQAdwB","evh":"-1681676304","evi":{"48":"8808\|11657","50":"11997\|15740","47":"5028\|6794"},"vl":[{"ri":"a66e270d3d5792ba404404e45e40d9e1","uip":"rbox-tracking","ppb":"CK0F","v":[]}],"tslt":{"p-video-overlay":{"can

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	7.503682855881811
Encrypted:	false
SSDEEP:	48:/ZNn2K01J3P5futS5E0APnQf2MaVRz3lpfwAIx:D2JL5fs34nARzVZwt
MD5:	0FCA864384E681E506FB3C2F2E3AB488
SHA1:	FA63E12333229E735FCE992DF0FE0D77998C72DF
SHA-256:	C6C93F8FB2D3849FB7EDDD11D7E7B73A62C6D6875A8273A54A871FC4908A3530
SHA-512:	77E70887AB545C108B2727E3CEE62A1B535FCA4B8C3A4C618ACA909CFA8176D507B3B8E12DB16AA0140869F962BCAC8AE197BE1E363B7DE6CD582D793264EF1F
Malicious:	false
Reputation:	low
URL:	https://d2uolguxr56s4e.cloudfront.net/img/shared/favicon.ico
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:2510D957675211EEA19DF7999091D0F7" xmpMM:DocumentID="xmp.did:2510D958675211EEA19DF7999091D0F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2510D955675211EEA19DF7999091D0F7" stRef:documentID="xmp.did:2510D956675211EEA19DF7999091D0F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.a...-IDATx..[[hTG...l...uA..Z.HE.b.UJ/.T.&.S.....%}...6....P..#.d-.xk6...$..>..D[.Q.D...5....s..uOv.\f&...

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (348), with no line terminators
Category:	dropped
Size (bytes):	348
Entropy (8bit):	4.786377133406922
Encrypted:	false
SSDEEP:	6:yLzCRwlpeXsqbnawvg4zdOjvaByt3trwfKsX67DLkb5MQrS9:uSuIX72sgyd6vmm9UysqLkb5re9
MD5:	B15AD77C086DA19C344758254702B721
SHA1:	8D6B50C745B1F651847B8604B2F95EF5FF19E2A0
SHA-256:	E64D13C19BCBABCE2CCD881184D45D696A312DC04A0E974F233947587D1EC9DB
SHA-512:	0E9FB4D4586D0673A080FD5FB9FCECB42292333CC38D275EECD20200981F1506FB30CEA52C27C9AD2136B612DD10C40C71A2A59EBF83DB70094D3839048DDC01
Malicious:	false
Reputation:	low
Preview:	document.addEventListener("DOMContentLoaded",function(){var e=[].slice.call(document.querySelectorAll(".gs-on-view"));if("IntersectionObserver"in window){let n=new IntersectionObserver(function(e,t){e.forEach(function(e){e.isIntersecting&&(e.target.classList.add("gs-active-view"),n.unobserve(e.target))})});e.forEach(function(e){n.observe(e)})}});

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1276
Entropy (8bit):	4.664818583382343
Encrypted:	false
SSDEEP:	24:2diO4I1zyTL3xZIYGln+FxFTGbit5TF7SxBOTFIwG0uKFt1XEmWklYFAGF3QnhlC:c31yYYGln+f1dTF7SKTFIwXFt1XnWklQ
MD5:	A65FFBF2672C501704BD16AC4EB97B28
SHA1:	9B6CD282677F56B981E45CCABF5541B2BCAF8AF4
SHA-256:	0359C761DE3E37E68B79B46D5D590EC7E7F7C6F99CDEAFD27B82869FFF75FF5B
SHA-512:	ED697194B3933233C2A87090A7D1104DF29093AF46ABCD0B5573AD1053A5554EDB75C386EAEF41CE3F42420ED72CB798F954BA7EB8ECC5D12FB6EE615BBB04A8
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/check-done-011.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_952_731)"><path d="M4.5 11.25L6 12.75L9.375 9.375M6 6V3.9C6 3.05992 6 2.63988 6.16349 2.31901C6.3073 2.03677 6.53677 1.8073 6.81901 1.66349C7.13988 1.5 7.55992 1.5 8.4 1.5H14.1C14.9401 1.5 15.3601 1.5 15.681 1.66349C15.9632 1.8073 16.1927 2.03677 16.3365 2.31901C16.5 2.63988 16.5 3.05992 16.5 3.9V9.6C16.5 10.4401 16.5 10.8601 16.3365 11.181C16.1927 11.4632 15.9632 11.6927 15.681 11.8365C15.3601 12 14.9401 12 14.1 12H12M3.9 16.5H9.6C10.4401 16.5 10.8601 16.5 11.181 16.3365C11.4632 16.1927 11.6927 15.9632 11.8365 15.681C12 15.3601 12 14.9401 12 14.1V8.4C12 7.55992 12 7.13988 11.8365 6.81901C11.6927 6.53677 11.4632 6.3073 11.181 6.16349C10.8601 6 10.4401 6 9.6 6H3.9C3.05992 6 2.63988 6 2.31901 6.16349C2.03677 6.3073 1.8073 6.53677 1.66349 6.81901C1.5 7.13988 1.5 7.55992 1.5 8.4V14.1C1.5 14.9401 1.5 15.3601 1.66349 15.681C1.8073 15.9

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7638), with no line terminators
Category:	downloaded
Size (bytes):	7638
Entropy (8bit):	5.668274910495291
Encrypted:	false
SSDEEP:	192:yayKgxyl0XzzEMXzxEchXzNfEEdXzME4XzsEs1pxNh1pzb1pNfYd1psD1pMJkz84:yLKg4iXz4MXzu+XzqUXzb4Xz7sTFTfT9
MD5:	E1823E7D17F57725EF633DE34A593A29
SHA1:	C0D603E3520A64E39CB5D91C852B74C9DE505906
SHA-256:	0AD7B6EB8F211301B57A37684F840F36A39D54338B098A5448BDC27E5B6ED99A
SHA-512:	2CB61F24954FB55257B72A12B65B5DC53525E9B8E8358A9BCE39B04DF8B9C39A703B1204D27F44C8EE6D5E2352780A8245542E6CBD3832C0472C34489F3929AA
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/975786519?random=1730971806551&cv=11&fst=1730971806551&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v9175625129z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":46656000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"4s1770602244.1730971805","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=4s1770602244.1730971805\u0026ig_key=1sNHMxNzcwNjAyMjQ0LjE3MzA5NzE4MDU!2safRyow!3sAAptDV7XUMdU","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1si0_UrA!2safRyow!3sAAptDV7XUMdU"],"userBiddingSignals":[["477701277","8484517239","866798974","8497859104","596502284","8542727374"],null,1730971811747519],"ads":[{"renderUrl":"https://tdsf.doublecli

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators
Category:	dropped
Size (bytes):	100172
Entropy (8bit):	5.415367347426381
Encrypted:	false
SSDEEP:	1536:1raqv7/yKuNSmtnhVKq3yKFZTd7Pn0QtMvMTN5rlbmjAwpCevtdROx:1R7/yKdmt/3yGBSCrQOx
MD5:	49DD2C7834183777E0D8E51C5825AED7
SHA1:	184D092A026802C39DBF8B45BEED71A37D2EC7A7
SHA-256:	9DC033F30E8065F92EB089CFEA816897D79EC26CEA21257419AA673913CD3F56
SHA-512:	21E8C3B788E938CC6E42189A54D5DFD51C7F011D2A0392D1CC3B184E9E567D505175D7919533F3E5CC5F964694F5270BEE9547C0CE17EA64951E9120767975D0
Malicious:	false
Reputation:	low
Preview:	!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element"in t){var e="classList",r="prototype",n=t.Element[r],o=Object,i=String[r].trim\|\|function(){return this.replace(/^\s+\|\s+$/g,"")},s=Array[r].indexOf\|\|function(t){for(var e=0,r=this.length;e<r;e++)if(e in this&&this[e]===t)return e;return-1},a=function(t,e){this.name=t,this.code=DOMException[t],this.message=e},c=function(t,e){if(""===e)throw new a("SYNTAX_ERR","An invalid or illegal string was specified");if(/\s/.test(e))throw new a("INVALID_CHARACTER_ERR","String contains an invalid character");return s.call(t,e)},u=function(t){for(var e=i.call(t.getAttribute("class")\|\|""),r=e?e.split(/\s+/):[],n=0,o=r.length;n<o;n++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},f=u[r]=[],l=function(){return new u

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (733)
Category:	dropped
Size (bytes):	312860
Entropy (8bit):	4.841684315417049
Encrypted:	false
SSDEEP:	6144:yuNjeFkS+W8Ic0qnOUurKG39Gn6M/w0LqIZN+2:LjeFi
MD5:	567E0DBA309714716A5370F01F87D865
SHA1:	E6B08BF71258A8578128B01DB22134F9952C46F1
SHA-256:	52D930641477A30CFD3194EF0BE7AD8C6F43F8D7A07665325532AD0B5ACBE6F5
SHA-512:	8138578A7E27A691A911A727846A0117113E3F55FF595FAC04460AE28614622FCBDB72CB225DCDE617EB1E383BFAFF93C889AFE7F581349BE664E94F16B0E52A
Malicious:	false
Reputation:	low
Preview:	/****/ (function() { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// "./assets/src/js/partials sync recursive \\.js$":./!*******************************************!\. !* ./assets/src/js/partials/ sync \.js$ !. \*****************************************/./*/ (function(module, __unused_webpack_exports, __webpack_require__) {..var map = {.."./popup.js": "./assets/src/js/partials/popup.js",.."./site-scripts.js": "./assets/src/js/partials/site-scripts.js",.."./topbar.js": "./assets/src/js/partials/topbar.js".};...function webpackContext(req) {..var id = webpackContextResolve(req);..return __webpack_require__(id);.}.function webpackContextResolve(req) {..if(!__webpack_require__.o(map, req)) {...var e = new Error("Cannot find module '" + req + "'");...e.code = 'MODULE_NOT_FOUND';...throw e;..}..return map[req];.}.webpackContext.keys = function webpackContextKeys() {..return Object.keys(map);.};.webpackContext.resolve = webpackContextResolve;.module.exports

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24512
Entropy (8bit):	7.989223056004494
Encrypted:	false
SSDEEP:	384:n1EeMoaOrSn8ySaz3g//NUtNh/yMU/LiQYT8iJ28TDWffbopNY5Ee2oxUaFXc0:n1CoaOWnX+1UtNh/yM0YT1ZTSffMpNYX
MD5:	D6F5110673F5B20DB22286916486576E
SHA1:	B9A87CB2BD2FDAACECAE446F45E64C5D277CCE47
SHA-256:	581E0E5EA9AF55528F7EF0BF14EC20550CFC3663CF497BF6D50A114F0B785032
SHA-512:	DCBEA2E151262428FA7B42AF911251DD7FD0B768C551D408FD9D567FE2B086FD8A2E08A9A2B00DDFC3BD3EAA4C2E28F58E627FE67491E4C39B88C0AF78B458E3
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/images-2.png
Preview:	RIFF._..WEBPVP8L._../..@.M@l.F..;y./......u.....^..y3_.y C..(u....[..4..../B.l...j...D .Tu'....%h..O.-.`.O@.C..@.49.<..<`........pF.#Io,..z..n;.]..Q...q ..$A;{2K....\."q.$.V...v.....ad;N..(....?N......H.T0.f..}...+$.'...<.}..J.^...u].,.Mk..`...-...B...q#=.c.....O..^j......F.$Gv...c...6..p..b$n..../7..h$.......9....l..aq..asyas.\.?.h.EH.%..H ....fQH.. .Y..............+-...4X..... .X.Y..ZxB .\..2...t.y..$..@..K...!em.B._}....f...2H ..g.H...C%d..d....D.g..n.......8....w.#+....l......../.ef.q......x..J...2..o{..\].A.=;...!.. A.......).H~4.....e0..\',.rm<...M...4h..~C....j.>.sm .l$....V+(...)....9&.A.R.D.H{)H.HP.l..oL.L..sc..Y1...=.-)e.Z-S..1..~:........o..u.....J ......x.6..].GB..`(m.]....m..a..C\|....m7...g..........mx..x;..!...c..T...w......?n?....v....cx.LWJ....:}.c......f...B_U..`k."V...f>Z..k.Q.......@X..q.$....-u.M.....$......u.n.k..z..Y..{...5...Q>.....ry.KS7..k..}~[.P../........$.q......../.........eP=...Z9^...Du.o.\o..zg...Q...sg.P....*..:.,

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15454
Entropy (8bit):	7.959219704433267
Encrypted:	false
SSDEEP:	384:9yRMlTVtLfcXjhEmaZ7XbbGwPZvpIWoVZpT75qvAK6y+rFV6g:ZlBpcX45PGkBIZpT75JK6DrFcg
MD5:	1F2D9CBA0B91C12BECB8B297E1C306EA
SHA1:	3409573955E5F1D94EDF9753E1E2CD9B289C084A
SHA-256:	8D0B96FF8D1CA2FF2393A2CE3B08F6C755464E3A532A8C2E09DA1F967E8A9EB9
SHA-512:	D520E19CAE918E46FB3B07B2E5993D73F4D4A49582E517E37F763ACB53A70D2C1F6C57FE37E96DBEFBFDDBEF32C9529C8FC392DEF1DC703777F62D844EEC7F44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a...<.IDATx...=hSQ........8UD..8I.....q.Am..V.g..$.VGA..~@..KA.H,..E.B]...41i.nn..{.K..X;....w9..v..cDDDDDDDDDDDDDD./....F.s.M...`...".\....".Y~..`..b..... ..Ht...k.}...@..... .5.. f..C$z>...F.1....SD...b.1&f.%1...Z.@$z.B.pPAh'..x..}.A..s..!cL.....+A....&.q..A..H.0. ....Z.^.}...IRN..t6..G.L<.".B..an..o...j8.,w.<f..+.MM'.....V...........<.cC......'h..S#..;B.Ze5.n.cco.....u..0d....t..s....f../.....U..4....\.q...]....>.n...$..%./._.6..K9*U...).?....l.s.o....G&..X..L-.\,.P,...=.[...(.+4....r....1....8...I]..-,....9i.j....Ds..([1.F..\"Gj.u.DSI..WC).Q.yQ].j.....a.. .%I;.'......$..<p..9.......?.d..[Cw% .P......F.@...oAo.....N.......8>.%..,ML..b%.2...c2c.b3TY....a<x..F.B..a..XU..yF$h..IZ....X....-.i..2.n..ef..+6aC....:.c..{..0...[.b.8R.I@....)X+..5.../..5.\|C..MOK.a.. D.....,IT..=^.".a.'.......4.g.....7......x8...}.FOP.t...Cl_.BS{7.<.A....W;.Qd..=.Wr....S...P......i9...K@..._.`..Q\z....t(u....h4.[.,)

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	34159
Entropy (8bit):	7.951487397569978
Encrypted:	false
SSDEEP:	768:rizNJik7Amax1Wz/jVx3Dsj7E2WNnTQaH4sqXYXp5DTx2+f:riBP7Af1O/ji7E2WNnkC4Da/R2+f
MD5:	A31ABE53ADE8BCC3FB5915F567B1F1FD
SHA1:	F89229C9CB1F416AF18E182A2F287836E8344AD7
SHA-256:	78F2C0479C22E1C71816F2206439621C4960DB36699634211D22AC1DA5E69F84
SHA-512:	4427B13220D61AF54A7C973C8C6ED9E068A4CA3BE323D0E4C43B89281A7635480196C69C3F83FB8ECCA5E6D5B30A91FCA5F82E7A6CBC866C6C01253EE62EEDBA
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-default-4.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............5...................................................................?j\|-.R.tP.5..ul.7=.....]...^..nV..Z....m.%..[...Z.......j].e.k^...^....~=.5.G..y.OW-'W..OT.5..[.r.w.j.z......wZ.bEl..l..+.e.j...\....v......N:.m:8...v.X.R.+..C.]...k^.u.^.e.v.e......+:.Kn+...Z..v...r..].r...?..?.=..oG>......8..uQ..Cok...kZ..]..{-..u.7r.k+7u.nT..o$.v.w.2.q..5.sNzR......>.].%........us.....m..W-K[l[.e.u..[.f].[.u.WZ.TU...K-...-E.......5E.m.~.....=#...G>.=}'...oO>....z9W..F.-]...[..nk.d.....kf..m.f...f.].k...n;.....F.m.W...#....]}.z.y.......=..}......u[Z.k....k.M.k.u...r.tn..W..v.n.e...]..]..l+7.&.._...$........u.s....C..z}\S...-.R../e.e...v..[.oER.[6.R.mKj.mGeT.6..t.t%7B.i.L...A..`.......v....}.g...._..j..T....l.i...].....k..-E.T.u.z.W.K.T..].f..t..%6..q

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	4.098333406891474
Encrypted:	false
SSDEEP:	24:tYmJuZTPX1zQbJ4OTMQRvos3CCug2g6GKYgLkVQxyC1Ml/jULmK:D4TPX1UbJNwGGCug2BGKB4akC1ojU6K
MD5:	D0021C64DEE0811DDFAE606EC12E0CC6
SHA1:	F3CC9C08F745E926DCCE6EF3E9B4247EB8985586
SHA-256:	01B33FA13A67DE314953C880C8AB8D0E2DA350B8F9061CD322BD00716F77682A
SHA-512:	498F701109DFA5598F884D4000F262311FCBDAE593CF599DECFE2F0ECCF6C68B56FBBAC9C20F11634248831B707102837DEC0A2D5CE840ED19EDB2B1995B08BE
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg
Preview:	<svg width="24" height="20" viewBox="0 0 24 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M7.55016 20.0073C16.6045 20.0073 21.5583 12.504 21.5583 5.99919C21.5583 5.78825 21.5536 5.57262 21.5442 5.36168C22.5079 4.66479 23.3395 3.80158 24 2.81262C23.1025 3.21192 22.1496 3.47271 21.1739 3.58606C22.2013 2.97023 22.9705 2.0028 23.3391 0.863091C22.3726 1.43588 21.3156 1.83994 20.2134 2.05793C19.4708 1.26889 18.489 0.746441 17.4197 0.571375C16.3504 0.39631 15.2532 0.578375 14.2977 1.08942C13.3423 1.60047 12.5818 2.41203 12.1338 3.39864C11.6859 4.38524 11.5754 5.49194 11.8195 6.54762C9.86249 6.44941 7.94794 5.94103 6.19998 5.05542C4.45203 4.16982 2.90969 2.92676 1.67297 1.40684C1.0444 2.49057 0.852057 3.77297 1.13503 4.99342C1.418 6.21386 2.15506 7.28077 3.19641 7.97731C2.41463 7.95249 1.64998 7.742 0.965625 7.36325V7.42418C0.964925 8.56147 1.3581 9.66391 2.07831 10.5441C2.79852 11.4243 3.80132 12.0279 4.91625 12.2523C4.19206 12.4505 3.43198 12.4793 2.69484 12.3367C3.00945 13.31

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	735720
Entropy (8bit):	7.891095551621689
Encrypted:	false
SSDEEP:	12288:Ihlp31bjM+Dtake5i1aqYI684Y6tFHXRpcwqAZTzKC6+wMHeq2Ozj1+z:kHtxiIl4Y6tFHXUrw6eZHA
MD5:	005F5717284A905F7BB1A04A58D60A8A
SHA1:	703227BD5636A64258A6FAC612D52C195870ABAC
SHA-256:	1F19CEADE69699A5F5279EB4BC55B400AAB21C43B613D6DC67B9C340D8E0E555
SHA-512:	B9ACF9326474CC00F515496B941370DDF2FFCAD9BEED0EAB367BE2B2B8797BF2F679D1D77644CE3CB7DCE52E811FF34E0F26B41EF99A8DA265613616AAC8ACEC
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/GD-24-04-THOMAS-RAST-GABI-NEUROHR-UNDERDOG-STORY-16X9_1.mp4:2f84e58f6e9119:0
Preview:	....ftypmp42....mp42mp41..}gmoov...lmvhd.....H...H...._..vz.................................................@.................................//trak...\tkhd.....H...H...........vrD................................................@....B...D.....$edts....elst.........vrD............mdia... mdhd.....H...H....]............@hdlr........vide.............Mainconcept Video Media Handler...?minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ......-.stbl....stsd............avc1.........................B.D.H...H.........AVC Coding............................,avcC.M@.....gM@....B."\|.@.......!...h. ....stts....................stsc...................... lstsz..............C............b...........>...t...........2.......-.......@.......M...........8...W...............7...P...............{..V........5...a...M.......7...................4.......[..........;....3...C...A.......'.......................M...'......C............................n.......

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25414
Entropy (8bit):	7.987551092601463
Encrypted:	false
SSDEEP:	768:/8EeBohs7sFP0Gbqy6WTug3eGvMLXt+nh+XL/:MDfITF3zvMR+YL/
MD5:	B9ABD8EF325B9505AB3B71042944F1EA
SHA1:	DDEE4FADA4B99891468DAFB97F1A4999941CB158
SHA-256:	4FBEDA51BCEF35D9B6B99CD1F8DC9B12734B499758BA30065DC478E7FE4D3D78
SHA-512:	F5A967813727DFE4770DC2E30129536DA656A22647738C35187FCB0A0F704F29416B01BADAC9D1E82E8645D217AD4A62810F4FF7C66FCAD11637715FCFB7BD13
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-ui-3.png
Preview:	RIFF>c..WEBPVP8L1c../..@.M@.d+l3w(....`... .....4.A..r...q.S.......Z.b,.....w.S.x...L.?.......V.[j....W...hG.gv{!.@.Ed.UI.P.I...%T ...-.o.6.[..;.Y.........z...........#..5.Z.[..3u.Fb..>?...H..\|.:.&...../..y.....\U..U..$..6........3.9M .......HT..m.3-....l.>...$.7a....1.,G.T....1.g8.......f...1_...?...W.m.@.J.....5.&......u.....hQ.d.!..^.8.h..O....Q3.....%U.9.?C...IL...Kt>4 .t.....p\|...b.%1.......>...%r.a.Z.Y....TrN....-..../...&.../Z..+...bXR[.e.kQ.....9y._....:].-Z....d.V...g..=...N..T..N."\%..J..(...d.lr........?.._n]m..0.....g.c...+0,...a1.....:..8..-z.R.N.$N.W...a..B$RSO..4...4r..&.=.?..x.":.Z(~S..%10.[N..%\|.Vv......!..jO..t./v%' . ..........i..+..lL.b.B...Vo`.... .D.....W..`a>#....U............mY......../[%~......./Z.#4........,..U.Xt:.).i.C..aQ.....pw.~...Z..e.[.6.1_.Li6...u..(a...ZN.....j?T.PF...h....?....o...g>.s}..0.`%.....HR.._.. .c.... ..2S5...m....DS...P.J....9T..k-...J..r..>.2L...(...J.)..G....j..h..s.Z;w.@..b

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	249595
Entropy (8bit):	5.548547003993285
Encrypted:	false
SSDEEP:	3072:L+wizDGLETudoNn0j5mptcY0/H8+ARrrOS2WrDmKD0C8rT/FXK:kGLgudoQczRiSRx0C8rT/Fa
MD5:	17D201DD55426644B1C29EFDBC2C336A
SHA1:	016485326E18D761099FE53D2AD7D827A83ECA85
SHA-256:	29D3D6EE0C75DF3758B3FE7768F7DAA4559ABE286C81F0A5BEA3B24CF13331AE
SHA-512:	89BCD55C50908385E4B0A678EA1B80AB6927724C51DF5F6406AC4FC131B66437731F566E64D4ED89438A45AED30973FA64489768FA9ED3C793A939A598E4A352
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	13617
Entropy (8bit):	4.300417048081442
Encrypted:	false
SSDEEP:	384:eg+tvTZjxGdoduU7i28Hiu3zSjighskM7lND:ovTZw28Hiu3zSjige7lND
MD5:	8025FA3C792C66A53637687E226E9228
SHA1:	4B12F3737EC8EC0F615EE140FD9E57E38096D3E6
SHA-256:	43802D11DE47A2E38169B141C7136CCAB74D242EAD165DEE37D81E1D726DC1C6
SHA-512:	938A87D97F2FDE4E273814FF39D72FC00F84147A44541458C013533D995BA0CF13C4FCDD61D36F38ABCF7041DAF61AE2130FFC79627914934DC37A7999D1EEFF
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/resources/js/analytics/R8g82rqP
Preview:	if (typeof window['kartra_tracking_loaded'] === 'undefined') {. window['kartra_tracking_loaded'] = true;. window['processed_assets'] = [];.. (function(window){. var replaceUrl = false;. var url = new URL(window.location.href);. var searchParams = new URLSearchParams(url.search);.. if ('undefined' === typeof window.kuuid) {. setUuidParam();. }.. if ('undefined' === typeof window.kll) {. setKllParam();. }.. if ('undefined' === typeof window.kref) {. setKrefParam();. }.. setKaffParam();.. if (replaceUrl) {. window.history.replaceState(. null,. null,. url.toString(). );. }.. function getCookie(name) {. var cookieRegex = '(?:(?:^\|.; )' + name + ' = ([^;]).$)\|^.*$';. var cookie = document.cookie.match(cookieRegex)[1];.. if (cookie) {. return decodeURIComponent(cookie);. }. }.. function setCookie(name, value, options) {.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1249
Entropy (8bit):	4.098333406891474
Encrypted:	false
SSDEEP:	24:tYmJuZTPX1zQbJ4OTMQRvos3CCug2g6GKYgLkVQxyC1Ml/jULmK:D4TPX1UbJNwGGCug2BGKB4akC1ojU6K
MD5:	D0021C64DEE0811DDFAE606EC12E0CC6
SHA1:	F3CC9C08F745E926DCCE6EF3E9B4247EB8985586
SHA-256:	01B33FA13A67DE314953C880C8AB8D0E2DA350B8F9061CD322BD00716F77682A
SHA-512:	498F701109DFA5598F884D4000F262311FCBDAE593CF599DECFE2F0ECCF6C68B56FBBAC9C20F11634248831B707102837DEC0A2D5CE840ED19EDB2B1995B08BE
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="20" viewBox="0 0 24 20" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M7.55016 20.0073C16.6045 20.0073 21.5583 12.504 21.5583 5.99919C21.5583 5.78825 21.5536 5.57262 21.5442 5.36168C22.5079 4.66479 23.3395 3.80158 24 2.81262C23.1025 3.21192 22.1496 3.47271 21.1739 3.58606C22.2013 2.97023 22.9705 2.0028 23.3391 0.863091C22.3726 1.43588 21.3156 1.83994 20.2134 2.05793C19.4708 1.26889 18.489 0.746441 17.4197 0.571375C16.3504 0.39631 15.2532 0.578375 14.2977 1.08942C13.3423 1.60047 12.5818 2.41203 12.1338 3.39864C11.6859 4.38524 11.5754 5.49194 11.8195 6.54762C9.86249 6.44941 7.94794 5.94103 6.19998 5.05542C4.45203 4.16982 2.90969 2.92676 1.67297 1.40684C1.0444 2.49057 0.852057 3.77297 1.13503 4.99342C1.418 6.21386 2.15506 7.28077 3.19641 7.97731C2.41463 7.95249 1.64998 7.742 0.965625 7.36325V7.42418C0.964925 8.56147 1.3581 9.66391 2.07831 10.5441C2.79852 11.4243 3.80132 12.0279 4.91625 12.2523C4.19206 12.4505 3.43198 12.4793 2.69484 12.3367C3.00945 13.31

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	69517
Entropy (8bit):	5.325781518558043
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPN:RIT7Vs9ZVKBYj8wKcHPN
MD5:	F99F08437A30CEEFADBEAB48BC46B9A8
SHA1:	9FCFF3A3C213D4993D1738E770F9F0B9AC779595
SHA-256:	79DEDDC37E226691FA25713E9CABC7B9AB91806DF44653726EB3174199F4B800
SHA-512:	0164618494299824B574AA0D5C93C61C55149CC9D48C38D1B136467C5DD0A6F606CEC1D675423FF2F40152D07A8EDB021C9730066578830434792E070B1AB0D0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1605947379693172?v=2.9.176&r=stable&domain=kartra.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57765)
Category:	downloaded
Size (bytes):	112427
Entropy (8bit):	4.925295015861728
Encrypted:	false
SSDEEP:	1536:pZeJWfZglWQg5MG7+qehN2pUkxWLZQql3Pq:pZeJwkWQg5MG7+qehN2pUk4LaU3Pq
MD5:	319580D7D8944A1A65F635E0D11E5DA5
SHA1:	E23BC18EF1B0F78F7010E3C16E4C5E1F333248BD
SHA-256:	FB3A89CC6347E098063BD15F285BC90411846DDCE6F17812364FEEDAB67A67F5
SHA-512:	743825EAEA11208277528E506C115EC786AB060095AE4250C65A9B02FE9E5CB2AC5AC386532486A2678B9615490CE75BA096A9FD2041200989AD07A726B5D9D0
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio :where(figcaption){margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	103360
Entropy (8bit):	5.432870280542499
Encrypted:	false
SSDEEP:	1536:1oynXQX5XkXpWY8j7di+rpsm+RBugsbecqIiDl3wrI5ZYWIh:1jKV+V8j7d5umwBfsSVg
MD5:	3CD9E20878EC5B1599B187673C886EB4
SHA1:	B87EACCCB331874CFB4EAD1F02C5B7A6E6CF08B2
SHA-256:	D6D029F5076282FC2EAF0DDED0AABBA95F22B016AAA98631DE3CDE5C164863E8
SHA-512:	E28080465023E762BD8BC8336ED9758312A0DC368A8DB46702CD8675A0D130A6847E75CF99CD0F71DD46A265F32FF3FB3E6E0856E36824A0FAD043B5739EE514
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={2151:e=>{var t={utf8:{stringToBytes:function(e){return t.bin.stringToBytes(unescape(encodeURIComponent(e)))},bytesToString:function(e){return decodeURIComponent(escape(t.bin.bytesToString(e)))}},bin:{stringToBytes:function(e){for(var t=[],n=0;n<e.length;n++)t.push(255&e.charCodeAt(n));return t},bytesToString:function(e){for(var t=[],n=0;n<e.length;n++)t.push(String.fromCharCode(e[n]));return t.join("")}}};e.exports=t},3939:e=>{var t,n;t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",n={rotl:function(e,t){return e<<t\|e>>>32-t},rotr:function(e,t){return e<<32-t\|e>>>t},endian:function(e){if(e.constructor==Number)return 16711935&n.rotl(e,8)\|4278255360&n.rotl(e,24);for(var t=0;t<e.length;t++)e[t]=n.endian(e[t]);return e},randomBytes:function(e){for(var t=[];e>0;e--)t.push(Math.floor(256Math.random()));return t},bytesToWords:function(e){for(var t=[],n=0,r=0;n<e.length;n++,r+=8)t[r>>>5]\|=e[n]<<24-r%32;return t},wordsToBytes:function(e){for(var t=[],n=0;n<32e

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4148)
Category:	dropped
Size (bytes):	36425
Entropy (8bit):	5.332174087233619
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwxAHXUpxbY/Y3YOgQxz0SYeYZYHYZYVY+YSYQ84OKOzOVD+CzjQ3uy:RIT76HXsZwuvLqS54WAcl/C
MD5:	6EC2438E07F00B225420A7B386C9433F
SHA1:	968F0FA71607B142941C71DDA14C9008B1294365
SHA-256:	4AC72D4F35094C36F31D578EAE5D8D658829614BD537732BF58B4BE23FCA2AAD
SHA-512:	8B792DEA4ECFD57F7912EC41540AC66D9E60C334867B0F36C308756801EC78B0B346518FD40135E260FCEF48D58072CA8F2006513EF5285BB5E842C6494EE31C
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4934), with no line terminators
Category:	dropped
Size (bytes):	4934
Entropy (8bit):	5.137860905068029
Encrypted:	false
SSDEEP:	48:UMw1Y+KIYrCKNt/wqNvHbIfHXqlpQnqbJPLuWCWqIX7uNpuGqlin0MMFjP5gCQ2p:GsLsQ1iWCIruNp7pMFjhdWFh+uUSLsye
MD5:	1CC5122662DE98010BFC684D0AFCD2EB
SHA1:	37F64F3079789623BBFD72DFCFA513A480BE6879
SHA-256:	3C1D852C5BA8DE125D67D9C8FA2B144D3C70AB5F5DF587BCFD6FC882B5675932
SHA-512:	44423292C9F67C7EC9D2149B16454498D5F5279C469CA2BBB2AAEFCF08C9DB2B470AF89996CA80CD3D33ECB4ED097BD07AD87C1B2E764B57AE77AFDE615D73B6
Malicious:	false
Reputation:	low
Preview:	"use strict";let YTAPI=!1,ytPlyaerInterval;function GS_Videos_Init(e=document){let t=e.getElementsByClassName("gs-video-element");for(let a of t){var o,s=a.dataset.provider,i=a.dataset.overlay,r=(a.dataset.lightbox,a.nextSibling);if("false"===i)switch(s){case"video":let d=document.body;a.getAttribute("src")?getGSHostedVideo(a):(d.addEventListener("mouseover",getGSHostedVideo(a),{once:!0}),d.addEventListener("touchmove",getGSHostedVideo(a),{once:!0}),d.addEventListener("scroll",getGSHostedVideo(a),{once:!0}),d.addEventListener("keydown",getGSHostedVideo(a),{once:!0}));break;case"youtube":getGSYoutubeVideo(a);break;case"vimeo":getGSVimeoVideo(a)}else r.onclick=function(){let e=this.previousSibling,t=this.dataset.type,a=this.dataset.lightbox,s=this;if("true"!==a){switch(t){case"video":getGSHostedVideo(e);break;case"youtube":getGSYoutubeVideo(e);break;case"vimeo":getGSVimeoVideo(e)}this.remove()}else{let i=e.closest(".gs-video"),r=i.getAttribute("id"),d=SimpleLightbox.open({content:e,eleme

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	4.678626467860632
Encrypted:	false
SSDEEP:	48:YU9EDHL0Zo7URDUTpF2MXaE9mT4oWOo70u5MwYI:pEDrcUlFfX9FOE0YMw1
MD5:	F2A2D634E8D671F4D42A4CF9ECB7D7ED
SHA1:	D4D3C74CF6470FA9B7C57B11C507ED4F9C410C4F
SHA-256:	14612FAEFC54E67007084332E850F554CA6BA980BEBD2F88BEB4051DFFA87D61
SHA-512:	33504CEB09E899B2DA21828D466D647A758E64B4AC18347A3351CE4F7C755554484DD5AA77D6FEFC904A350E2D6A6C4D1103818B130533E3479B0FD7C1DBAC1B
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/translations/oDd-19x9.json
Preview:	{"cky_notice_title":"We value your privacy","cky_notice_description":"<p>We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking \"Accept All\", you consent to our use of cookies.</p>","cky_notice_close_label":"Close","cky_readmore_text":"Cookie Policy","cky_readmore_privacyLink":"","cky_revisit_title":"Consent Preferences","cky_video_placeholder_title":"Please accept cookies to access this content","cky_accept_text":"Accept All","cky_reject_text":"Reject All","cky_settings_text":"Customize","cky_preference_title":"Customize Consent Preferences","cky_preference_description":"<p>We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.</p><p>The cookies that are categorized as \"Necessary\" are stored on your browser as they are essential for enabling the basic functionalities of the site. </p><p>We also use thir

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	753
Entropy (8bit):	4.694435671403857
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjgQ0ulJ7+indc6pq8Eci9h0VqJwW0Bt/adkkDgFG7BhdOXe2LC3I1U:2diO4f1Qt0ulNnnRpq1nUCkkD/7h+b2z
MD5:	1978489E57D641B67562DCFC62D4C156
SHA1:	0287AD88EF4BEE189B95652594B68C172CF44D61
SHA-256:	0D4F021D20587502333196E06DDF215BB39501501384919E2BE3CB80D0FD4C3C
SHA-512:	0A32314E3B7E28DBD4EB986D793A7E76A44AC607D10D6C0AE9272E87E9B7E00072D55361D12D210811EDAD4CE46F3969F40C860CC31FA43F2AE6B1B4E059796D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M14.584 15.75L16.834 13.5M16.834 13.5L14.584 11.25M16.834 13.5H12.334M11.959 2.46807C13.0584 2.91311 13.834 3.99098 13.834 5.25C13.834 6.50902 13.0584 7.58689 11.959 8.03193M9.33398 11.25H6.33398C4.93616 11.25 4.23725 11.25 3.68593 11.4784C2.95085 11.7828 2.36683 12.3669 2.06235 13.1019C1.83398 13.6533 1.83398 14.3522 1.83398 15.75M10.459 5.25C10.459 6.90685 9.11584 8.25 7.45898 8.25C5.80213 8.25 4.45898 6.90685 4.45898 5.25C4.45898 3.59315 5.80213 2.25 7.45898 2.25C9.11584 2.25 10.459 3.59315 10.459 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4815), with no line terminators
Category:	dropped
Size (bytes):	4815
Entropy (8bit):	5.145011640514708
Encrypted:	false
SSDEEP:	48:JntrXvwVxTQl4gGZh/H/yhaDX2MxmQEDqNEBDJqzBA6XDG2JzzO6DJ1zNBDJS669:p1IHQ+zLDfTlalElAZqCOG4vAgYQw
MD5:	8BAB30715931D06D174B378652BE2347
SHA1:	EAC7F02A197B0C8ECCE39FB3613BBA97363B6F5C
SHA-256:	127B18100F391519107151277A6DEB3A77F422AA752B38E1293EDEFA9E453AB6
SHA-512:	8D74510DC706A294794BAC5F9EBD48871D83E3E2A6B8BC9DCE6AD27D2B06F4B6432A6AFE8D3DAD9827A7B3172D14AD474B40A9FD0FE94AB5D5C57B602A97C10D
Malicious:	false
Reputation:	low
Preview:	"use strict";function GSPBtoggleBgScroll(e){"block"!=e&&"modal"!=e&&document.body.classList.toggle("scrollhidden")}function GSPBtogglemodaldialog(e,t,l="toggle"){"modal"==t&&(e.open&&"toggle"==l\|\|"close"==l?e.close():e.showModal())}function GSPBSlidingPanelInit(e=document){let t=e.getElementsByClassName("gspb_button_wrapper");for(let l=0;l<t.length;l++){let a=t[l],i=a.dataset.paneltype;if(void 0===i)continue;let o=a.getAttribute("id"),n=a.querySelector(".gspb_slidingPanel"),s=n.dataset.hover,c=document.documentElement.clientWidth,d=n.dataset.autotrigger,g=n.dataset.closeintent,r=n.dataset.closeintentonce,v=n.dataset.autotriggertime,p=n.dataset.placebody,u=n.dataset.clickselector,S=n.dataset.closeselector,f=n.dataset.dynamicbefore,L=n.dataset.dynamicafter,y=a.querySelector('[data-panelid="'+o+'"]');y\|\|(y=e.querySelector('[data-panelid="'+o+'"]'));let m=a.querySelector(".gspb_slidingPanel-close"),B=a.querySelectorAll(".gspb-custom-close");if(S&&(B=e.querySelectorAll(S)),f\|\|L){let k=y.que

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	27984
Entropy (8bit):	7.961470708160992
Encrypted:	false
SSDEEP:	768:tT3CSRtxMZ6bMSDlMwFwq8SvGokLZjZIGQvCQ2Or:tT3CXngXvzk9VTQ6nOr
MD5:	194A36A630EA6FDD3782D148F1C0EE9F
SHA1:	BC2A3B5573A8C051D55DCD8747F5E2FD09CC550A
SHA-256:	44FD9104386739754AD010A92C0848B6AC708FEF4F2815A370CE97A72CC25DF1
SHA-512:	B46AABFF3789DF1341D44F84E0768905551C50A43A4BC5D7EE437FC91A7332F83EA1D5268563997389A2E0F36A80AA8F9A8770066517EE97BA846D45D8C92E5F
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............7.....................................................................W..~..a..K..k..f..U'lC.f..Ha.%K.\Sb..r.....2.......3....s.g...J1...U(..P.v.3..t...o....'~..D.Tvv;m.....I....ls..S.9.h..P...:.U..(..k..}..!\|.l...r..T...T..S=.L.e............it..F...R.lq...3g.0\|3g..v..".......t..jGF.:.P..h3)m..0......@UL...S!Y..j..........G..mt.R.....lC..X..-..!.;.aC...U.XU..(.R......b..uf..\B..@@(4..4.'.d..o.z..zq..Wd..E..QA....m....m..Z1.s8....P.u.......Pkb......r..T...U(.E...i.F..........vN...u..p...9.'1.. ..1b..f.E.wZ..ac..v...lC....Use#.%IWU!2).".l....3...~z..}..=H.w..v.....M...;P.;lHb.....`.3.X;.qVZ8..am...j5....Ub........Qr..f.y.h.42.4(....?.}^~..t.N...Vp...U..!..v..RI..0f...]..U.....T.:...v.E...s.,......T.2#..0f....B......7..\|.;%......\.`.M....uk..;...(..h.qWZ8...]...P.l.*..c.I

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	40428
Entropy (8bit):	7.963812615141882
Encrypted:	false
SSDEEP:	768:F7Xbp87lq3O0GdQ/7YfSO+rnIF5V/bT7rSlnDgJVC9CiTw/fTo7MaI3R8I:1Xbp0Ucw7Y9+rIF5CgJVCLTwjRPhJ
MD5:	C073FA5AB616CFDD3F7EB4EF2EA87874
SHA1:	84A78C32B5FEC4B1A3E59A894FA5920CFC0B0465
SHA-256:	739CF240A4C47533FE5516365CD60934C2276CC3A7D967D0920F17F63A77DD63
SHA-512:	0A03AC2BB89C160BFBD9A1E3BF718CB97212337D587DDB1410EBA305E89243C062842FBD32CC3889867B1C42AFECA32A9AB49A7ABFC7365584DD5FB72EA63502
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-default-6.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............7..........................................................................;...gzg...I...Y.w#.3....cV.L.. K9..L..0HP.hv).Z.b.RkF. .Ra....C5N.`m.A....hn...7._.V....MS.3.w.}5O...L...r.U.....chs...?bX.$...r.a.6....j.W`&.U....Wb.........s.l.am.......W+T........W>.g.L.(K0;U...... .....m..b...1..K..a.]..].....Y...5$.............~......K..tY..g[%.T.*.Ms.]OZ.Y.X.....`b...w7.....@.;..a.;..3..3Fhf.b....K1m..7..s6.%..+....~U........Y..g.T.,.US.]5...Vr.Wp%...wm..v~..h8[..H...m.....&...;U......cW<x....Xs.a'..........M..u.]WK..t.....l.....8;U...0......{7...n.A H6.0..`......43U.A...[f...v XIQu..........m..=7J...t].....C...=].w)h...A....l;1.A.c..9......1X.....Gj9..1..n.1.V[3.#....TN..[.'..FW.=WK..t........v...6z...c.chb..a..........s......f#.K.4.........{2..e..ub.".f.f.....W......C..E...c

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4850), with no line terminators
Category:	dropped
Size (bytes):	4850
Entropy (8bit):	5.8229609740798915
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU4Dl:1DY0hf1bT47OIqWb1dDl
MD5:	77AF1446740B9FCD1E26ED8F72F41A2A
SHA1:	06A7AE7972E13C5C750CA3B2ADC5BA61F9CE9083
SHA-256:	653715CFF474431D5DA547B8BA15A83FA019BA97A274E88ABBB455AD44FA1A91
SHA-512:	5841BD8924D04284468E6B19BB85C0F8B5D394FFBC6226014E48E44EB1028D8B2D611B683D756BDCB5DCAE61D54DB6DCC8A8DF48664699B9088E37827B8F24A7
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7070)
Category:	downloaded
Size (bytes):	7118
Entropy (8bit):	5.142201280292554
Encrypted:	false
SSDEEP:	192:6HdKXm7gwD2m2AIe3lOXn9QDS7u4zfMl/9lAby/gQyw:6UXm7HD3lOtQDS7uEfMlllAW/gy
MD5:	CFA4EAAFBFE2AEF6C745A8CFC2C6E7D8
SHA1:	2A88CD565A63A72495A8C567A67C798D576C0F51
SHA-256:	4A65F2FD0EA5184AA5A653DBC0276D9744F7AADB1D6E34962D8B8342027741DA
SHA-512:	85524E389745314DA0087FEBC3FF00B814CFCF6CB3ABCD783D6EFDD0053DF9402E5865F9E1399ADEBAB2894A6FA4D1503EFD9F971B51F44089B1D2036C1B2161
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-core.prod.js
Preview:	self.babelHelpers={asyncToGenerator:function(e){return function(){var r=e.apply(this,arguments);return new Promise(function(e,t){return function n(o,i){try{var c=r[o](i),l=c.value}catch(e){return void t(e)}if(!c.done)return Promise.resolve(l).then(function(e){n("next",e)},function(e){n("throw",e)});e(l)}("next")})}}},this.workbox=this.workbox\|\|{},this.workbox.core=function(){"use strict";try{self.workbox.v["workbox:core:3.3.1"]=1}catch(e){}var e={debug:0,log:1,warn:2,error:3,silent:4};const r=(e,...r)=>{let t=e;return r.length>0&&(t+=` :: ${JSON.stringify(r)}`),t};class t extends Error{constructor(e,t){super(r(e,t)),this.name=e,this.details=t}}const n={prefix:"workbox",suffix:self.registration.scope,googleAnalytics:"googleAnalytics",precache:"precache",runtime:"runtime"},o=e=>[n.prefix,e,n.suffix].filter(e=>e.length>0).join("-"),i={updateDetails:e=>{Object.keys(n).forEach(r=>{void 0!==e[r]&&(n[r]=e[r])})},getGoogleAnalyticsName:e=>e\|\|o(n.googleAnalytics),getPrecacheName:e=>e\|\|o(n.preca

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
URL:	https://psb.taboola.com/topics_api
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65461)
Category:	downloaded
Size (bytes):	195991
Entropy (8bit):	5.549574226546899
Encrypted:	false
SSDEEP:	3072:zobrvEuC57CwCDJprU3o2LBJtRnJ8w/6Vhj3/ZIybKFk5ImrdqNpUaWB4qayYTea:zCFZLrUVmYqayYqkVA4z6rkAi
MD5:	BA69D73ABE876D25A6C05341AFAB7B1D
SHA1:	49A31B35FA42A2AAA1BE93381CF5687D96DF213C
SHA-256:	A9605C7EDC7DE78B3B7AF9034078FBFFA946DF7EC6AB30227A04763C0B758642
SHA-512:	057A6117DFFEC5532BD544C66AF7C783C503B4AD37C0EA3812081A6A3DBDDE5101D16933404A061DC2B3C365AB3F33B28B68773C44506BC8D02645CE3867FA58
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/scripts/addons/1.0.112/cta.js
Preview:	/! For license information please see cta.js.LICENSE.txt /.(()=>{var e={2703:(e,t)=>{var n;!function(){"use strict";var r={}.hasOwnProperty;function i(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArray(n)){if(n.length){var s=i.apply(null,n);s&&e.push(s)}}else if("object"===o){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var u in n)r.call(n,u)&&n[u]&&e.push(u)}}}return e.join(" ")}e.exports?(i.default=i,e.exports=i):void 0===(n=function(){return i}.apply(t,[]))\|\|(e.exports=n)}()},2790:e=>{var t,n,r=e.exports={};function i(){throw new Error("setTimeout has not been defined")}function o(){throw new Error("clearTimeout has not been defined")}function s(e){if(t===setTimeout)return setTimeout(e,0);if((t===i\|\|!t)&&setTimeout)return t=setTimeout,setTimeout(e,0);try{return t(e,0)}catch(n){try{return t.call(null,e,0)}cat

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	69517
Entropy (8bit):	5.325781518558043
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPN:RIT7Vs9ZVKBYj8wKcHPN
MD5:	F99F08437A30CEEFADBEAB48BC46B9A8
SHA1:	9FCFF3A3C213D4993D1738E770F9F0B9AC779595
SHA-256:	79DEDDC37E226691FA25713E9CABC7B9AB91806DF44653726EB3174199F4B800
SHA-512:	0164618494299824B574AA0D5C93C61C55149CC9D48C38D1B136467C5DD0A6F606CEC1D675423FF2F40152D07A8EDB021C9730066578830434792E070B1AB0D0
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	32252
Entropy (8bit):	7.987938063424357
Encrypted:	false
SSDEEP:	768:/MqrqSfb+0IjMQF/7yOXHIsT5lHrE+WR9wxCYJm0yLwD7KJ02:/MY3fbyjV/uyHjr+9wg6ZyQD2
MD5:	859567DE31D79152B81E587ABF55241B
SHA1:	8BF00ED3B0910C28BAC1AECF50A0C1206FC877F8
SHA-256:	A6104638D841F9FA8809089A3745BCADD7B145DC49859B3C42346C713EDBEDA5
SHA-512:	9A347FDFE18D95ACEEBF5F91C86D6E42E35DF869308AF26A0E11BD9DB56BADC82811A2C23B9B52D4C88049FBB7F5769E2BFCDAAA838D63C4FF7C5D619C09B85E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a...}.IDATx....KTQ....9W..e5.{9i..r..D.....$.h.hSbRQ.H.F._ A.jQ!J8N.P.\.-..L..2su.4s..].3........w....#.........6v-..Y_..%0.BJ........b@_...D...\......p(...AD....dD..@DY......E.S "7.A!3:.e,.....h-....!.0.L2.;."..!......A......m4.KE"w.A........A.ti.R.....2myk.n......~;... J.:.p.9P.v7.m..B.@....4.U.......6..6.UP2g4..m.".._.$AD.......C.o......;.......,+.m..._.=8n..x..-.....K@D.U...o.X.h.p>...G.....'.\|l.......'.e..L.=Z8..t.....hk..;5m..PK .?~..K,./4..(../..>/~..,./u....hs...s..;.....Mg...m.$.p.h:R....S.'@D...'.../.....J%.....`.n...~....}......Z..BO"...\..Dc...Cx...........8.:hL..aX..%k#...cM.3...u.E..........d..#.7..9[...J.j.C....Z.....3.K......}........w....c{.p..s.~..w..{.M.e ....2.9..]ZQ.n..A.%.KY.;...R..)bF..Rn...jG..0........o1E...(.v.*S.r.....;...;...G..2<...RP.],.r.<XDR...N...7..@..LQ..Y..].,5...h.1!.C..w.n .D.h..aM.v.,b\|{........C.H.R.Dj.&.. ....s....0..V..+bMb... ..g../-..Np..~.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2815)
Category:	downloaded
Size (bytes):	2866
Entropy (8bit):	5.054658023249169
Encrypted:	false
SSDEEP:	48:plXeR326OJgkCLfIOr8FscNQ6VRIOkbBOmWTTpxFz3jXVeeIuQ85ngqpfBrzmGbt:plOuggBscS67VkbUmWTTpxFz3rVt5gK1
MD5:	28757903F470E97B2D93A0A2D47B192B
SHA1:	EE88F5D8EA7F0D4975C552FE6E373AF506CD6296
SHA-256:	F5CAD353136A157EF610CC26AFD14CA4B06392D79E770D353331F8F2CC8D2D1D
SHA-512:	10435837C51B066A1D7AE1ED4450B2402AEBC381810DBE3C3E9D847859ADD1003781E1757328B35834CB234FF2ED64653737FEDF1E0BAA3E4E7F2D872FD5F6A7
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-routing.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.routing=function(t,e){"use strict";try{self.workbox.v["workbox:routing:3.3.1"]=1}catch(t){}const r="GET";var s=t=>t&&"object"==typeof t?t:{handle:t};class n{constructor(t,e,n){this.handler=s(e),this.match=t,this.method=n\|\|r}}class o extends n{constructor(t,e,r){super(({url:e})=>{const r=t.exec(e.href);return r?e.origin!==location.origin&&0!==r.index?null:r.slice(1):null},e,r)}}class i{constructor(){this.t=new Map}handleRequest(t){const e=new URL(t.request.url);if(!e.protocol.startsWith("http"))return;let r=null,s=null,n=null;const o=this.e(t,e);if(s=o.handler,n=o.params,r=o.route,!s&&this.r&&(s=this.r),!s)return;let i;try{i=s.handle({url:e,event:t,params:n})}catch(t){i=Promise.reject(t)}return i&&this.s&&(i=i.catch(r=>this.s.handle({url:e,event:t,err:r}))),i}e(t,e){const r=this.t.get(t.request.method)\|\|[];for(const s of r){let r=s.match({url:e,event:t});if(r)return Array.isArray(r)&&0===r.length?r=void 0:(r.constructor===Object&&0===Object.key

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.995165268475116
Encrypted:	true
SSDEEP:	24576:Fz9FOVD9bNT5PuZCSTBUBALrTcUvsi9Ek13ubDrRIgMXZ3BEI:LFOfNT1aC+UBMoiS6iRcpxEI
MD5:	80A8B885761132C5F318B0AADEC45E9C
SHA1:	B90831FD0ABF77647F748EF2ED9635A23F27D53D
SHA-256:	83DE44D9BEB095C815DF0B06893A300DF1C8A725D3A005999455FF5436041A1B
SHA-512:	9376D2859540204F4B68FF8823A2FD16452F3332C04BF349BDC3C7A95DDF4B7834C1AFD2FCD9CCA93B425E1C6794F39A89F623A07239B352C0CBC3A48A0712E2
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/hero-v2.mp4:2f84e58f4d445d:0
Preview:	....ftypmp42....mp42mp41...umoov...lmvhd.....IUX.IUX.._.....................................................@...................................trak...\tkhd.....IUX.IUX............................................................@........8.....$edts....elst.......................9mdia... mdhd.....IUX.IUX..]...P........@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url .......^stbl....stsd............avc1...........................8.H...H.........AVC Coding............................0avcC.M@)....gM@).R...O.5...@...@...!...h..5 ....stts...........\........stsc...............\........stsz...........\...x...h..............P...F.......y..-............6..1....<.......}..........]...w...E.......F..-........c......(D...7..........'>.......h......)`...#..........%........#...X...x...............:...e...4...........F.......q...,..........&........J...c...........b...........

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 1827x630, components 3
Category:	downloaded
Size (bytes):	42474
Entropy (8bit):	7.830367648678715
Encrypted:	false
SSDEEP:	768:UQgBvt9txA0ysk8EbJDaIDBmMNvFVduV0k11j1sJj45WFrB5biR2Ips/BXFlvBwT:UJBvt9tQ8EUI1rNcVX/1sJs4/bvIps/Q
MD5:	88A7E16D99E55EBB2F556DE2105124D1
SHA1:	9820913294F3340DE97EF8272167666AB158B6C6
SHA-256:	DFB794DAFCDA8A7744C9E019D4337E1AF148F0A2E2A341CC686DD909EC8955A1
SHA-512:	6883AC595AF76597E407EFF0128B383BD92BE94F852C778DFEC63078270457FA65410E60CB2B37B01BCEC7114F2629CC5D67F682480B35B9CA0407E1E6E13E78
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/11/image-1.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................v.#.............0.................................................................(3s.,..&R......1.b.f.......u...F`I`...-.WS:.q......7eS`...dY..A...+-...w.]M.....o=..Y...0..2..[.N.....$.q-..B.y..n.W9...e.-.....,.2.)...k7@.Sy.....%.....l...,.H.Endb.2CmM..D.1..Z.l.k0.t.....%.g.<.....2....d.......^....++.j.s:.E......P.....L...Z..f.(( ..K........f.,...F..Z......3..7...k.s..:g..S.s.3.{.Df...S .:.n.n...........d....s......%...n".......Hd.a..).%K&n.....H......M\.^ZD......J..X.Fu.m................(RK...3f....Vn..i...... .u4.w.Y%.[d.+Z.,...@SS:.Y...jMX.U.."..w4.......2....M..rbVC..n..o8....8.....7......!...u.Id.cZ.....1@3u.h.......(..&@...........K5WRKr........V...7.....7...`..^..s....%.@.6jY.....g8.(....jh.!7..B......:fjj..M...f.....k<...*!&Hi..:...3B..h.s@..-..I..c[...d..2.Ky.E....5.....o9.-.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37003)
Category:	dropped
Size (bytes):	380446
Entropy (8bit):	5.566521186789659
Encrypted:	false
SSDEEP:	3072:1SVBXwpr27wizDGbETIdoCn0Q5mptcY0/H8+ARPrOS2WrDmKD0C8rT/ka9lyK:1S3XWr2VGbgIdoQcz1iSRx0C8rT/ZlZ
MD5:	FC0830E0274C3FB4D74D38B598F5ACB8
SHA1:	AFFB15157CD0B6BCE446B9C10E1E701EA2C02A7D
SHA-256:	04E560A99F04AC320D3345A82860C569411B4632B8052784D534D0A954428C80
SHA-512:	EC66FDBAACABA29ED60AFF002530B3846EFEFB2A73709267821E64CCE1C7A674ADA50C44871EDC65323E3B8E3BBC7FF35323AD2E96498007E80E0D31FDF4ECB2
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"315",. . "macros":[{"function":"__k","vtp_decodeCookie":false,"vtp_name":"unique_id"},{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"QUERY","vtp_queryKey":"pro","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=(new Date).toISOString().split(\".\")[0].replace(\/\\-\|T\|:\|\/g,\"\");return a+",["escape",["macro",3],8,16],"})();"]},{"function":"__e"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=JSON.parse(localStorage.getItem(\"params\"));return null!==a\|\|void 0!==a\|\|void 0!==typeOf(a)?a:\"empty\"})();"]},{"function":"__k","convert_null_to":"empty","convert_undefined_to":

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	103060
Entropy (8bit):	5.3527719690725295
Encrypted:	false
SSDEEP:	1536:ep1/q1cPC+clo7tUa6yuq7UUtEU7MFsO4BQCDBlUvoXJN:ep1/scK/lKN57RFqvo5N
MD5:	186F72B75FEA4324088C40C7A0726D7A
SHA1:	60E283F6C1ACB1CF0E32CAA7B4278EA7B90E9A7D
SHA-256:	8200C2C5836A6F781C6E2B16F1F4CFA5319643A9D97E549E8C07FCF490390C50
SHA-512:	ABA3159AB08563FEB6CD5688AC0786BE7D92B0EF30087F84BD3D9B695A736E423B28CD876F126AC758CD7C06B60E8A8D68B6852BB87FC6061EC47ED665778BF5
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/banner.js
Preview:	!function(){var t={5666:function(t){var e=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i="function"==typeof Symbol?Symbol:{},c=i.iterator\|\|"@@iterator",a=i.asyncIterator\|\|"@@asyncIterator",u=i.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function f(t,e,r,n){var i=e&&e.prototype instanceof g?e:g,c=Object.create(i.prototype),a=new L(n\|\|[]);return o(c,"_invoke",{value:j(t,r,a)}),c}function l(t,e,r){try{return{type:"normal",arg:t.call(e,r)}}catch(t){return{type:"throw",arg:t}}}t.wrap=f;var p="suspendedStart",d="suspendedYield",v="executing",y="completed",h={};function g(){}function b(){}function m(){}var _={};s(_,c,(function(){return this}));var x=Object.getPrototypeOf,k=x&&x(x(A([])));k&&k!==r&&n.call(k,c)&&(_=k);var w=m.prototype=g.prototype=Object.create(_);functi

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.47539981859334
Encrypted:	false
SSDEEP:	24:2diO4I1z8GGeiUngo1oEjYGwjTIaqoadFNn+/aQt4o+IEnVRcivwQE+jS/Qnhlle:c31YGGeRTYbjTIZo6n+/ai4o/EYWwQEB
MD5:	18E3BCA58F8E841FAE0F7D6E260A8411
SHA1:	26519CA3A61249DCBAEB12B0DC433EA51244543D
SHA-256:	806182E5D33A77217DC33C80AB6F9CC8E19C5873C1CB9214B2D2B27C90EA5EE3
SHA-512:	0158324C4851C0F7D1A13C6B27DBC49DE62E34DD469BAC0E0133FC69991DF51A58BB7E5C7FE092672DA2B6591B7B973F7E62D8C25483B1CA99ACF6A7CE713C2A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.8175 6.75C6.99383 6.24875 7.34186 5.82608 7.79997 5.55685C8.25807 5.28762 8.79667 5.1892 9.32038 5.27903C9.84409 5.36886 10.3191 5.64114 10.6613 6.04765C11.0035 6.45415 11.1908 6.96864 11.19 7.5C11.19 9 8.94 9.75 8.94 9.75M9 12.75H9.0075M5.85 15.75H12.15C13.4101 15.75 14.0402 15.75 14.5215 15.5048C14.9448 15.289 15.289 14.9448 15.5048 14.5215C15.75 14.0402 15.75 13.4101 15.75 12.15V5.85C15.75 4.58988 15.75 3.95982 15.5048 3.47852C15.289 3.05516 14.9448 2.71095 14.5215 2.49524C14.0402 2.25 13.4101 2.25 12.15 2.25H5.85C4.58988 2.25 3.95982 2.25 3.47852 2.49524C3.05516 2.71095 2.71095 3.05516 2.49524 3.47852C2.25 3.95982 2.25 4.58988 2.25 5.85V12.15C2.25 13.4101 2.25 14.0402 2.49524 14.5215C2.71095 14.9448 3.05516 15.289 3.47852 15.5048C3.95982 15.75 4.58988 15.75 5.85 15.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-lin

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Reputation:	low
URL:	https://pagestates-tracking.crazyegg.com/healthcheck
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	760
Entropy (8bit):	4.715867651371347
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjidvyl8ODWmZtk7H5zNLCGXxLqBGZQcfHMxgOb5LFfPqI1VQ6hllo/:2diO4I1zecP9tkz5zNLRXxLqIZFHMxnC
MD5:	99A2AC4ED574E95D2B8F07A312B13171
SHA1:	6B8AC97D7208226608377E2714E79ABB34A578FA
SHA-256:	E3CEC87B98D94095C1ED4E01BD6DBAB91E29D2E7C35FAD710895F4B8EE8EC2A5
SHA-512:	41FD1E4BD793D287E4C24C9A0627D0DAE26F2DD021B800DC4DFE742177686E5DB8567AFCBFA6548AFE3FBA3F472DB97066E7581ABDC6A693D93E1C2393D58E32
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/scale-icon-3.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 15.75H3.45C3.02996 15.75 2.81994 15.75 2.65951 15.6683C2.51839 15.5964 2.40365 15.4816 2.33175 15.3405C2.25 15.1801 2.25 14.97 2.25 14.55V2.25M15.75 5.25L11.6743 9.32574C11.5258 9.47424 11.4515 9.5485 11.3659 9.57632C11.2906 9.60079 11.2094 9.60079 11.1341 9.57632C11.0485 9.5485 10.9742 9.47424 10.8257 9.32574L9.42426 7.92426C9.27576 7.77576 9.2015 7.7015 9.11588 7.67368C9.04057 7.64921 8.95943 7.64921 8.88412 7.67368C8.7985 7.7015 8.72424 7.77576 8.57574 7.92426L5.25 11.25M15.75 5.25H12.75M15.75 5.25V8.25" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22656, version 1.0
Category:	downloaded
Size (bytes):	22656
Entropy (8bit):	7.989822777122932
Encrypted:	false
SSDEEP:	384:CG09aB5OeGN80J1VphK+amA6QnR9r7OvE2WZ2zDY7zxw2XBBiYGBxqoTwBBnT:I9aHZGN8uhti9eML2+JiYno8DT
MD5:	E73B4E9381FEB38BFB00647C6DC17515
SHA1:	A47E1F6215C42DC7AFA374960B3CDCE2293814AD
SHA-256:	A2CE2036590967FB6010678AB93F2C7E0104A5CC7CFCD2DCD186F23892BAF4E4
SHA-512:	70C8ADB11FCE59D20DBB254BEF59BF61409FB2769519664093FD9B40D4837536469097E9D2B547A5D02FBDF51AAA17D22924CFCE196025664F077A7D9E0875D8
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/blocks/fonts/Outfit-Bold.17cef4e6.woff2
Preview:	wOF2......X........D..X.........................?FFTM...R...~....`..F.....P.....B..6.$.... ..Q........w.6..q_.F.....n.E......6.B.......q`c@......~R.1.n.].1@Q....P#..4..P.....!.\.cY}...l+V..!....3...^.......f..Z...r...3w.@1..%...=P.+7.s..]......T...8..Q.(.H'.nS..M.q.q..h..RV.....{.........74q..e.....&......?]..1.C...v.c.'.(..C...M..yz.....yLx...t..0..,U....E.Y..F.=......D.&.....?........L'..."..).H.#.......K+..!..H.%.....J..".(].hG..""./6.h..o.A.."v..9.k.". ...GD..(.`!.H...&... V.5.-5...7m..m.I....mu.....Rs.E.R.E!=......{.&.D. .(. .x.w\|..xE....^g.M..8...:......}.'%Q@i+M0hQ...m.tv~..V.Y..=........... .L...X..f{.7.R.1..+\'... ..1.....\+....<5..6.zN....#.U....ZL^,.. .y..k1...%z.e).CX.C,.y.C...r....M.-s].6....BJi......f.$.1B....B.....R{\..<7...c+.....#{`..yJ/P...hcN..nn..@.y....D.......D..8\.S.-.&.,./K..........BV..1!k.1V.6)w..y...:0"........c.}..i_\|M.H..@u"...F.Q.E.(.F.p.......h4..FQ.{..~.`...&.."b...\|.....EQ.EQ.EQ.E..\|.;.y..h4T6w. ....@$..w+._.'..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2658
Entropy (8bit):	4.354726623867422
Encrypted:	false
SSDEEP:	48:eB4m0+3+a4Za68X5m5zklPCPFOF1dNLNAz6xd9iX/aDTIfm:k4mPD446Gm5zG/Fmeft
MD5:	F3CAED592963881BAEA5B9D4963B8C98
SHA1:	F6ED9797777886E374817A950EE6D54A46DE24F6
SHA-256:	B850877EFB16CCC960D33B3CC3B856F4220D06135A5F131B5DCD8937516FD1DD
SHA-512:	8CC4B084A6CD5F360BB4702CB6AE5160722E23527CFAE928FB269EB7CFC9F7484520D9B71E708ADB764B6C037D0466FA6B1DB586D10E426C39CA48D38BD9E275
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/site-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="194" height="38" viewBox="0 0 194 38" fill="none">.<path d="M99.6697 28.2592H95.9717L95.9809 9.59471C95.9809 9.57093 106.64 9.58679 110.958 9.60132C115.17 9.61585 116.872 14.1489 116.872 16.2984C116.872 17.9116 116.872 21.6744 113.736 22.8384L118.395 28.2592H114.005L109.974 23.3761H101.91L101.896 20.2184C101.896 20.2184 107.885 20.2158 110.243 20.2158C112.485 20.2158 113.159 17.9896 113.174 16.7344C113.2 14.4831 112.259 12.9373 110.064 12.9373C108.359 12.9373 99.671 12.9347 99.671 12.9347V28.2566L99.6697 28.2592Z" fill="#2E88DC"></path>.<path d="M168.332 28.2599C168.332 28.2599 178.403 12.1282 179.62 10.2521C180.695 8.5953 182.039 8.50546 182.98 10.2521C183.92 11.9987 194 28.2599 194 28.2599H189.564L187.1 24.1299L177.037 24.1206L178.986 20.9167L185.38 20.926L181.29 14.3914L172.9 28.2599H168.332Z" fill="#2E88DC"></path>.<path d="M146.087 28.2592H142.389L142.398 9.59471C142.398 9.57093 153.058 9.58679 157.375 9.60132C161.587 9.61585 163.289

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28345)
Category:	downloaded
Size (bytes):	28884
Entropy (8bit):	5.071200132131638
Encrypted:	false
SSDEEP:	768:ECkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:O8ZMSmZ7z
MD5:	B63AD4872174EF872657385E4AC15D51
SHA1:	A9D0D57293BA0857B08E966A1C9E4E9111E21E59
SHA-256:	035987520D452EF505B8B4D3651B9CE03729B59B977226188B8F87FE3F23E043
SHA-512:	652CF291B27942EDB52552E5A4D19CBE4F08975C3D0E67A856765832058FE82C3D6C19D07411D835D71007B38A58B46918583E557C1E64896EAC8123F71D3BCC
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/node_modules/kartra-bootstrap/dist/js/bootstrap.min.js
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2013 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.//Edited the support.transition function to auto-execute once is created because of issues of conflicting $(document).ready()..!function(a){(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})()}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"clic

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51878
Entropy (8bit):	7.991867377893422
Encrypted:	true
SSDEEP:	1536:rtp3ktDw8qh4qOEkISe4MIMjSu9oiJdCvI9IDp8146K1E:ZpUta6EvaMHS6+GYE
MD5:	EFFF1DC36A9179E7A093782D50E97359
SHA1:	2D5F4B81FB4F1F0920083849CA2937FE588E93EF
SHA-256:	184B2065368CB16FEB4EF03C3B613F78CA42AD9657213D85F398157DE8601EE4
SHA-512:	D2FC4B6AD2194FC07C16205F56EF062A0DB4614AE317E3E2443ECB3190ED21811B8305D852F801322B088E7EF66BC9167BCC1BE9407D40D4B8A77D85D858C860
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a....PIDATx.....a...cb.a..d...?....N......;/...,...F;m.,...Vk..k..d.1.yg....%. .d....../.....G...M....P.....u.:oy.d{C....f.X/...4$k....Ed..zf..& ..Z.E.oR.u.EFr.zi.....l.B...Y.4."...Z(.....".Ej=A...[.("..[.Q.$.QD....B......eL...;.W.."....;..)"....B%..K..U8gm.}..BDV.ey8..v.D....z.k..s.gQ."..)...:.U.N..a.~.N.0..TJe+...$....}.cQ).x.9... ..Ko.hBD.B.i.".Jd..8......[......\4..@..&...._.7......$\|._.n.......j...Xg$r..9......q.2...i.s...~..L.$H...{.k..Q.T.9..0.....\..n.R..5....?.. . .4..9.-.Qt.j.?.7..8.(...f...$..B2......D.q.d..y.QP.A._..\|.e.((..:.E\....]\....q...s.C...kW..(..>...[}.{.=.v..PR;.:..$....<.........o...^.'q..3....?......uu.........vnnN._.Z.....A.../g.......q..`g...Os...e.'..\...%k...2......K..@...............2v..........(...A&r.F..++...@....L...V...E@..Ln\|...fho#.kSS......M6....Z.`....5...........I@....,jhh.$`.B........Y;....g...]]].....~....^...#..s.^.x.v^^^.....S..xe.Q(ADCF...gj...

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2658
Entropy (8bit):	4.317425609096277
Encrypted:	false
SSDEEP:	48:eB4m0+3+a4Za64XRm5zklPCvFmF1ZNLNAz6hd9iX/aDTIf+:k4mPD4462m5zGvFy+fZ
MD5:	FFFF113DF24BFE2FE6A752EC684A1113
SHA1:	AD092FAA7AE29EA3C823E06BBA3A75739FA5CFE8
SHA-256:	B9351C50D431E009777D5075585B568F7BF04F24C0E4100FA182C664E47AB58B
SHA-512:	E9BEAB7D286B33930AA3452487AE79D842B780F00E8CA670918EDD68484095D467F54318B940F1E071CD3845A1E85F7D56D856FCC6D223531DEBBD64E5EA5081
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="194" height="38" viewBox="0 0 194 38" fill="none">.<path d="M99.6697 28.2592H95.9717L95.9809 9.59471C95.9809 9.57093 106.64 9.58679 110.958 9.60132C115.17 9.61585 116.872 14.1489 116.872 16.2984C116.872 17.9116 116.872 21.6744 113.736 22.8384L118.395 28.2592H114.005L109.974 23.3761H101.91L101.896 20.2184C101.896 20.2184 107.885 20.2158 110.243 20.2158C112.485 20.2158 113.159 17.9896 113.174 16.7344C113.2 14.4831 112.259 12.9373 110.064 12.9373C108.359 12.9373 99.671 12.9347 99.671 12.9347V28.2566L99.6697 28.2592Z" fill="#000000"></path>.<path d="M168.332 28.2599C168.332 28.2599 178.403 12.1282 179.62 10.2521C180.695 8.5953 182.039 8.50546 182.98 10.2521C183.92 11.9987 194 28.2599 194 28.2599H189.564L187.1 24.1299L177.037 24.1206L178.986 20.9167L185.38 20.926L181.29 14.3914L172.9 28.2599H168.332Z" fill="#000000"></path>.<path d="M146.087 28.2592H142.389L142.398 9.59471C142.398 9.57093 153.058 9.58679 157.375 9.60132C161.587 9.61585 163.289

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	534
Entropy (8bit):	4.527929573507705
Encrypted:	false
SSDEEP:	12:trwdl/UyKuCH+zq7dIdvOQ6nMYucsmkldNufMmK:tYRUyKu6+OxIxOQUccqlHufMmK
MD5:	90CD7D12973514443BE27501A525694C
SHA1:	E11A70A22FCDD278A003D309F4267E78A059EF70
SHA-256:	98A82FF8FC8FBDDF29A49711DA964719C29EA2FA4290E0F2DE70EAE3A9D8A339
SHA-512:	14B1D18D5C443BA537337D1EFC96F734CF7FA147D63524B67536D65FE8F8AD45372ED0ED2CD982CCC210F6442301E61A05877247412CBE24CF080E0D774E3A5A
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 12.2573C24 5.6299 18.6274 0.257324 12 0.257324C5.37258 0.257324 0 5.6299 0 12.2573C0 18.2468 4.3882 23.2113 10.125 24.1115V15.7261H7.07812V12.2573H10.125V9.61357C10.125 6.60607 11.9166 4.94482 14.6576 4.94482C15.9701 4.94482 17.3438 5.1792 17.3438 5.1792V8.13232H15.8306C14.34 8.13232 13.875 9.0574 13.875 10.0073V12.2573H17.2031L16.6711 15.7261H13.875V24.1115C19.6118 23.2113 24 18.2468 24 12.2573Z" fill="#98A2B3"/>.</svg>.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1929
Entropy (8bit):	4.776269360754064
Encrypted:	false
SSDEEP:	48:c0t/FaJKEMoH50jM7ZH50LxoOnaeG1OlV51a:/NaJGoIYZa+Ot954
MD5:	F23EB84201E1D3B2474EA3C971197180
SHA1:	A661A43AAF56876991264C68DF0B9938698C63CE
SHA-256:	223234624E8E94D2913E479445D270C768E27EC6053CEA4D9E75C9B62F1F401C
SHA-512:	7567D97536E4577FA239CD1A0E7697724F8EF88A06C2ECEC4D493930FD9C8FFBAB6B70454FBBA48438A17438BE925E0ED5467A09B5BE06969BC545083467E0B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 134 24">. <defs>. <style>. .cls-1 {. fill: #fff;. }.. .cls-2 {. fill: #595f65;. }.. .cls-3 {. fill: #2e88dc;. }. </style>. </defs>. <path class="cls-1" d="m12.4,24c6.85,0,12.4-5.37,12.4-12S19.25,0,12.4,0,0,5.37,0,12s5.55,12,12.4,12Z"/>. <path class="cls-3" d="m70.63,18.02h-2.48V5.89s7.17,0,10.07,0c2.83,0,3.97,2.96,3.97,4.35,0,1.05,0,3.49-2.11,4.25l3.13,3.52h-2.95l-2.71-3.17h-5.42v-2.05s4.01,0,5.6,0,1.96-1.45,1.97-2.26c.02-1.46-.61-2.47-2.09-2.47-1.14,0-6.98,0-6.98,0v9.96h0Z"/>. <path class="cls-3" d="m116.76,18.02s6.77-10.48,7.58-11.7c.72-1.08,1.62-1.14,2.26,0,.63,1.14,7.4,11.7,7.4,11.7h-2.98l-1.66-2.68h-6.76s1.31-2.09,1.31-2.09h4.3s-2.75-4.24-2.75-4.24l-5.64,9.01h-3.07Z"/>. <path class="cls-3" d="m101.81,18.02h-2.48V5.89s7.17,0,10.07,0c2.83,0,3.97,2.96,3.97,4.35,0,1.05,0,3.49-2.11,4.25l3.13,3.52h-2.9

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	downloaded
Size (bytes):	394194
Entropy (8bit):	5.647930156984818
Encrypted:	false
SSDEEP:	6144:S4UGhFh0GLgB4docUzWRSR9cM8rT/Q29WUZ9Or24Av+:bUkFhJc4docOsWmYL
MD5:	1CEF60B53599823E0F28B8979CE2424D
SHA1:	CB3FDA6BE504088D2E9A0E2ED342A9072B89C283
SHA-256:	42FD8741D90B4BBDE18FD5A82E3748FE7F6B7A87F2F6E041A85CBC3A22EC2CED
SHA-512:	768E4C0F492DCD7E1567FACBF59ED11C3098499C660DD6D7262E5FC887D5F2E0D05E3AF5A127B58F77E5085A9A5916041AFE4E677D69A51757140B1BFE5AB758
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-2S00JF6MTB&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","(home\|kartra\|blog)(\\.\|^)kartra\\.com","^genndi\\.com$"],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","app\\.vwo\\.com","(home\|kartra\|blog)(\\.\|^)kartra\\.com","paypal\\.com","clients\\.outleased\\.com","stripe\\.com","genndi\\.com","account\\.microsoft\\.com","accounts\\.google\\.com"],"tag_id":10},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"all_ips","vtp_ruleResult":["macro",1],"tag_id":12},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64045)
Category:	dropped
Size (bytes):	107126
Entropy (8bit):	5.492756308480957
Encrypted:	false
SSDEEP:	3072:9+XbE9DqxhYbd0Z9qGr6QvbIgc5gWF4BmxpGftNZZBc:9QbJr6QvbK5gWF4BmxpeZZC
MD5:	843A359F48DA74BA6377FDC0F6A08E9E
SHA1:	6058855CBC88F675D8897C6E385D1413A1C1C6C6
SHA-256:	BFB50654266CD61DDC1F60811A6F517EDDAB6ABECA093E5369FE0E61DACD32F3
SHA-512:	1EED9924A950BBD9FC227B382ABF9E409BA87D7CEE47E045337653B55A4CB463C92EF5B8687CCA289798B9AB40F252029E12150B1793B5CCA45814EAEDCB1708
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,r={},t={};function o(e){var n=t[e];if(void 0!==n)return n.exports;var i=t[e]={exports:{}};return r[e].call(i.exports,i,i.exports,o),i.exports}o.m=r,e=[],o.O=(r,t,n,i)=>{if(!t){var l=1/0;for(s=0;s<e.length;s++){for(var[t,n,i]=e[s],a=!0,u=0;u<t.length;u++)(!1&i\|\|l>=i)&&Object.keys(o.O).every((e=>o.O[e](t[u])))?t.splice(u--,1):(a=!1,i<l&&(l=i));if(a){e.splice(s--,1);var f=n();void 0!==f&&(r=f)}}return r}i=i\|\|0;for(var s=e.length;s>0&&e[s-1][2]>i;s--)e[s]=e[s-1];e[s]=[t,n,i]},o.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return o.d(r,{a:r}),r},o.d=(e,r)=>{for(var t in r)o.o(r,t)&&!o.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36562
Entropy (8bit):	7.99282876820947
Encrypted:	true
SSDEEP:	768:Y+G57CISWOEEpdQ/RGM3WK5RwKCZ950pMTCkmIiCE0J+dr:YLeK7EvIL52OpMm8iCEdr
MD5:	AAF238833023FE097C1E43C731771F9F
SHA1:	EA877CF99A9A25B1AA1D95B5D5C6A2C15A5A4D15
SHA-256:	35B7A446557C8A23FF45B0EDAF7D368AC7A9CDC92A3E83C80739DFF6ECC6D2FB
SHA-512:	CEC845F9A51AB6DEB63461BDA9A0B4C36CBFEE03EB41DADC8C813A84CC78F0861B29E7DBB97AC4BC98D4D718328CDB83B8ADF40384D5E74CD912DB6BD1477B2C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-ui-2.png
Preview:	RIFF...WEBPVP8L..../..@.MH.d;l.....>./. Dw........9'..H..F..d...J.......i..u.2HLh%..b..U@..D.n...n..$....w.U..X.=Q..eTN..mO{V....}.}..s.=?.U.....+zK......2&.H.N..D..$...\|J.%&U......+..V.p.B]&..J~!v. ..v.<&_p.Y;K....Q\.....l.;.........a7C.".~..(.....`.vr...........,$(..H...i...i].E.$I........[.M..l.yrxZ..9'..DD6..BD:!.T[..l.!E.>y...C...B.1}Q..D.CD...m.G....W..".;...8.p...., ...T....r..a.........D........8@.._<...........C@p..V.>.x~M..Q.#,..d.A........\|]9o..5i.........Q.U.......8.M..Q.gn.....x.VD.rFkJ..M..`.Y..`~...6`.}.7......l..+).e.......:..Wz...%o...jX.....i....(A...e.".J-....-.....&.C7.uX.....4.<h...N5P...L.MIZP..U.........u9.y..S.yc...x.M..RXZ.K)zP...4.a.Z....f..m_..]Z...\|.IrR........^...L@.S...}.<W.OH......eJ..>n.l.I.d.M2aO.$...$..{.....:..;oQ...P...*.W.U.E.3Oh.x..!.Wt...O}..4.& V..6L.7....x.....".V).?..5m.(o.g..F_..<q..D7....R..).".x.\.n....k........Q...i........5...(X.L.a;.....&...a..X7.............p&8...!.x.{................t..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49982), with NEL line terminators
Category:	downloaded
Size (bytes):	100172
Entropy (8bit):	5.415367347426381
Encrypted:	false
SSDEEP:	1536:1raqv7/yKuNSmtnhVKq3yKFZTd7Pn0QtMvMTN5rlbmjAwpCevtdROx:1R7/yKdmt/3yGBSCrQOx
MD5:	49DD2C7834183777E0D8E51C5825AED7
SHA1:	184D092A026802C39DBF8B45BEED71A37D2EC7A7
SHA-256:	9DC033F30E8065F92EB089CFEA816897D79EC26CEA21257419AA673913CD3F56
SHA-512:	21E8C3B788E938CC6E42189A54D5DFD51C7F011D2A0392D1CC3B184E9E567D505175D7919533F3E5CC5F964694F5270BEE9547C0CE17EA64951E9120767975D0
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/script.js
Preview:	!function(){var t={3241:function(){"document"in window.self&&((!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("http://www.w3.org/2000/svg","g")))&&function(t){"use strict";if("Element"in t){var e="classList",r="prototype",n=t.Element[r],o=Object,i=String[r].trim\|\|function(){return this.replace(/^\s+\|\s+$/g,"")},s=Array[r].indexOf\|\|function(t){for(var e=0,r=this.length;e<r;e++)if(e in this&&this[e]===t)return e;return-1},a=function(t,e){this.name=t,this.code=DOMException[t],this.message=e},c=function(t,e){if(""===e)throw new a("SYNTAX_ERR","An invalid or illegal string was specified");if(/\s/.test(e))throw new a("INVALID_CHARACTER_ERR","String contains an invalid character");return s.call(t,e)},u=function(t){for(var e=i.call(t.getAttribute("class")\|\|""),r=e?e.split(/\s+/):[],n=0,o=r.length;n<o;n++)this.push(r[n]);this._updateClassName=function(){t.setAttribute("class",this.toString())}},f=u[r]=[],l=function(){return new u

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2339
Entropy (8bit):	4.274930489773226
Encrypted:	false
SSDEEP:	48:TPAhgmHkcJSk0KNGUmaAFRejHXwLje8b67SXGW:hPsSk0Ko/iHh8b62WW
MD5:	71C20BB07E1387C0FECD7A521AF9803D
SHA1:	470D91C6500D67E26F2EF4E4D0699EA1B2C8FC03
SHA-256:	ED7C487F915432D9464E2AF0A83002EE93596E86E076F3C917E439E5B844D08B
SHA-512:	FEE5058DAE5F928037BEC9EFEC25D8B2C06BDA85A31BD99A6DF954A75B3A08446158E1441BD3FBF37F40A6EFC6CABE4E5037444FD61FEEA3055D5B19025CD557
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/assets/images/revisit.svg
Preview:	<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.9584 35.708C8.19071 35.708 0.291626 27.785 0.291625 17.9997L0.291625 16.0266L1.6547 16.2999C1.7269 16.3144 1.79254 16.3278 1.85292 16.3402C2.18947 16.4089 2.3624 16.4442 2.59351 16.4442C4.02238 16.4442 5.20017 15.575 5.69593 14.3946L6.08757 13.4621L7.05986 13.7406C7.54336 13.8791 8.01924 13.9464 8.49032 13.9464C11.5129 13.9464 13.9955 11.4616 13.9955 8.42451C13.9955 7.9478 13.9288 7.53472 13.8448 7.02934L13.7178 6.2655L14.3813 5.86637C15.2722 5.33053 15.9147 4.28559 15.9886 3.06722C15.9835 2.70604 15.8823 2.37723 15.7147 1.87315L15.3081 0.650195L16.5717 0.396836C17.0992 0.291083 17.6116 0.291225 18.0046 0.291332L18.0415 0.29134C27.8092 0.29134 35.7083 8.21439 35.7083 17.9997C35.7083 27.7924 27.7187 35.708 17.9584 35.708ZM2.58643 18.7225C2.96219 26.9183 9.69584 33.4297 17.9584 33.4297C26.47 33.4297 33.43 26.5247 33.43 17.9997C33.43 9.53184

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	841
Entropy (8bit):	4.6507292722828835
Encrypted:	false
SSDEEP:	24:2diO4I1zMqjMn1hyaFj4kSdrSjbtuiC+cQsAbfFPF3Qnhllo/:c31wqjG1h/j8SjbtufQsADz
MD5:	ABE21490D3A4BF64332215C373EED33F
SHA1:	96B513B5CBC5963C0988AB2CBE889239D52CEECF
SHA-256:	244A01CCF2A7630A638014669458EFB15D97904107B0B3C37DCCFF6237012317
SHA-512:	2480D5EC5A1F875602B675377FF7FC8EFCD2A85C08DD2C93D93B7CCD4292AA10CB38BD4E2053D7F67475B924FDA11063C4FFD416218F3E86FCCE4C1B3FE4D6C7
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/scale-icon-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 7.5H2.25M12 1.5V4.5M6 1.5V4.5M7.875 10.5L9 9.75V13.5M8.0625 13.5H9.9375M5.85 16.5H12.15C13.4101 16.5 14.0402 16.5 14.5215 16.2548C14.9448 16.039 15.289 15.6948 15.5048 15.2715C15.75 14.7902 15.75 14.1601 15.75 12.9V6.6C15.75 5.33988 15.75 4.70982 15.5048 4.22852C15.289 3.80516 14.9448 3.46095 14.5215 3.24524C14.0402 3 13.4101 3 12.15 3H5.85C4.58988 3 3.95982 3 3.47852 3.24524C3.05516 3.46095 2.71095 3.80516 2.49524 4.22852C2.25 4.70982 2.25 5.33988 2.25 6.6V12.9C2.25 14.1601 2.25 14.7902 2.49524 15.2715C2.71095 15.6948 3.05516 16.039 3.47852 16.2548C3.95982 16.5 4.58988 16.5 5.85 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	784272
Entropy (8bit):	7.999382355892473
Encrypted:	true
SSDEEP:	12288:0U4a5AGt6b3P3lAx0N7bKyxahwIiNWBVMfNBo8KdVCiKg4OikwmQBa:Aa5AGt83/dtbK8Smo8KdVCHBkwvo
MD5:	009AE96D34B370EADB2C8882A8257B43
SHA1:	AD0924DB2902D3434BA6FA60147DC9F0B67B89CE
SHA-256:	AB594E79408FBCC520FE6A3D198FBC8FCFAAE8949FD0492D1FE289E634A134B9
SHA-512:	3BB74D3C162290BA468668626706D0237CB58539617E51D929718913AC8D4F93386434B5C1E2E1712CD2384D86CD1AA2BB8B20BDD469A2A207C39B9701367AD9
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/hero-v2.mp4:2f84e58f4d445d:1
Preview:	@4.Jgf.....D\.z.....^...\Xa...!....^.....c.V......?;...1"...[".i.pR}]S..$j?99J.:.......\|.......Z.....-xg..-.b\|.T1".'.t.ax.\|c0P.......P.........CV.qe........I..qv.cS.f.N;H..OS6..R........,..^.}.$G]<,..s.....\..............`Y\..9.^.wC1.:oU&z.......h[4(...O`.S...T.....ge../..6s....=#5/2...8.e.En..p.....H..B.zA.<.>.rN....x%...#.7uZ]8&u....{D6.........[.......J.1.#....=..n..j...!&..wj.0.Rqe{M~..&..%-..(...^!y...[.b.._7.......K...2..'..@.R....E....;zp.\y{...E...L.b.s."..;.N....R......\._k5.....T.tB...W.]..k..6...VX. ...K .rj.w..I........87}.F#.Q...J-!..U.HU...(w...~.lk'..(.#...w....B...r.0.1..#.j...=<.KL...K.o....8$2w.F..'r:....(2.{....4L8..:.....L[>...2......A.H....:.... LxU...v.....M..\....\|....k.3t2w.$..>9...Q....C#S<..X..M..N..~.'.xcTN.-..>i..Z...u..i..1z..l..oq....RHj...R?.F$..E..13Q..[...l.6w..$..._@.1..\..N.~.4dJ.P+1..j..&F...k+..Y.ar."....h...q.i.&.z.S&..p....~.2.D'".....9..!....Qt..V..-.H.....H........m...I!..G.Y....T..ew.`h.}..fZ .A.:.*d..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (897), with no line terminators
Category:	downloaded
Size (bytes):	897
Entropy (8bit):	5.410472264744903
Encrypted:	false
SSDEEP:	12:9G/DGljg0kyo1uNFVxdNtY1pemH7veCXOQe33T0J41xULqEj5uOtdCpHnLmLNhoL:9GLGapINF7LtAWRYJuxUuEVL4HnqcbP
MD5:	7690E06F6039C78A18B3F418E0403BF9
SHA1:	C5BA034B9D129C4AD1ACDF6EA764674516D78FD8
SHA-256:	9598E291A1015E2151D3A0A9B0623B1F1E5E614186CB867FFB39DD79CA44385A
SHA-512:	FD810D6072EFBDFB786CC69DC053441FB5BEF78E67A2E7E531F6DADA5C0C48C33A4924E5D12BDD34A9A753E7C6EB7897DBA30030904D1DE969D4543CC7B96A24
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/scripts/addons/1.0.112/index.js
Preview:	(()=>{var e=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t={};(()=>{"use strict";e(t);const a="survey",{currentScript:r}=document,n=new CE2.NativeURL("../thirdparty/e1135c7f31a16440d5fc9944b7402d81.js",r.src).toString(),c=new CE2.NativeURL("./survey.js",r.src).toString(),i=new CE2.NativeURL("./cta.js",r.src).toString(),o=async e=>new Promise((t=>CE2.loadScript(e,t)));CE2.loadAddon=async e=>{switch(await o(n),e){case a:await o(c);break;case"cta":await o(i)}},CE2.launchAddon=async function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};switch(e){case a:CE2.launchSurvey(t);break;case"cta":CE2.launchCTA(t)}}})();var a=CE2.survey=void 0===CE2.survey?{}:CE2.survey;for(var r in t)a[r]=t[r];t.__esModule&&Object.defineProperty(a,"__esModule",{value:!0})})();

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	3.101572690733941
Encrypted:	false
SSDEEP:	96:0AzRAP5W6+iyjsL/SkZnby5BnOIs666wN5aR8OhNq44aS:3Cspiy8SkZnUs666t8O7q44a
MD5:	463EA87D4C6C358D6FC1788290E7C383
SHA1:	EFF5E2BF84DED315E4B9EB5C80782BA7206EE5AC
SHA-256:	4DD624BF9FC60B4E76EE9AFF53DB516614857FFB91C99F9F725C8498ED923D57
SHA-512:	55F555FD1878099B678B317CA0F24E1297A512641D4DF1B7306CFD899D6735E81A5A25F4D1D17649E712ABDB60CDC0DA97EDEBCF92BD6A4E8BC1CD56E2145FCE
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/favicon.ico
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ..................................................H./m.,m.-I....................................3.....-.................)%.........................,................................................f3.......................-../......./1.-...3..........,n........C.+.-........-l.....3........-r.........-........,............-.U.......-\|..............$..........,......0.-...2...../+..............'.,E..........,..........,......U..................-I.,E..........,..................,s................-I.,#..........,......-`.".......H................/&.....-........,..................../R.....................-l.......,............-..,..,...{........p..........@..-.....,..............................3..............1.....,...........................,...................

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4861), with no line terminators
Category:	dropped
Size (bytes):	4861
Entropy (8bit):	5.830579009312754
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUDXAq:1DY0hf1bT47OIqWb1OXAq
MD5:	9030AF493CEC7445CE03755B9C3B6BE3
SHA1:	D50890DBDF6C490F02B1E9791E63D9884B01A19A
SHA-256:	939B9B99D02FF31C1B9C75C226D817277AB4055CA9E2D242C188A415AD3CFB48
SHA-512:	3E5163BB0266DFC5F998F11EB855871AA6F0B62002B996C2AA9AD3EB780518FCB02906A7CAEE45FEE59FA4CB69F5DD20074DDFBED7D6164C9641058A07CEAEEC
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1470
Entropy (8bit):	4.299081541859316
Encrypted:	false
SSDEEP:	24:2diO4I1GKb+52BSvWi4F94/ctCrtuMynZuJEe4uajlFHYtW7L7+qL2LMWn+/tWi6:c31Gi5B84/tOIMyZuJEe49jlWt+H+7LX
MD5:	3FFA07CA27ED635D9CCADFA1D60DACE7
SHA1:	65D7E5E3819228A3FE1E21C6CE96006CE51062B3
SHA-256:	B012DC193533D163D79DF882280A749044494EDD56F2C8263F9D625F8AB4D3E4
SHA-512:	F76DA52DD8F3979B21C161EE8A547BAEB8E07B4C0B31871A2782415A3DA066D261B37CC0170CD8311D6699E8B8771781C8AB8C2BCFF7747D381BFE93B2205954
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 25 25" fill="none"><path d="M12.875 21.3335L12.7749 21.1834C12.0803 20.1415 11.733 19.6205 11.2741 19.2433C10.8679 18.9094 10.3998 18.6589 9.89661 18.5061C9.32825 18.3335 8.70211 18.3335 7.44982 18.3335H6.075C4.95489 18.3335 4.39484 18.3335 3.96702 18.1155C3.59069 17.9238 3.28473 17.6178 3.09299 17.2415C2.875 16.8137 2.875 16.2536 2.875 15.1335V6.5335C2.875 5.41339 2.875 4.85334 3.09299 4.42552C3.28473 4.04919 3.59069 3.74323 3.96702 3.55148C4.39484 3.3335 4.95489 3.3335 6.075 3.3335H6.475C8.71521 3.3335 9.83531 3.3335 10.691 3.76947C11.4436 4.15296 12.0555 4.76489 12.439 5.51753C12.875 6.37318 12.875 7.49329 12.875 9.7335M12.875 21.3335V9.7335M12.875 21.3335L12.9751 21.1834C13.6697 20.1415 14.017 19.6205 14.4759 19.2433C14.8821 18.9094 15.3502 18.6589 15.8534 18.5061C16.4217 18.3335 17.0479 18.3335 18.3002 18.3335H19.675C20.7951 18.3335 21.3552 18.3335 21.783 18.1155C22.1

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	693
Entropy (8bit):	4.858373407025395
Encrypted:	false
SSDEEP:	12:TMHdiO4Zdc/QK3B0diHoyqW+5hdQqJbFpudt5gcHo0KvBW+5hdQqJbFpudt5gcHm:2diO476QK3KdS+5hTFpSt5gcI0KA+5hj
MD5:	2B476E8250F9ADE3A7114630AE930FCF
SHA1:	0CEE0C8774209094AFB54740FD4DA7447647B21A
SHA-256:	1192AFEBBA96EFE4F005695A52AFBD2034951B83997B3BABFB915C8757E9F8FB
SHA-512:	F46EE740590CCC1A1C78179E39D7D6DF87BA83D59F4389BA40BF559495897043A26AD6B4D934C2606ACD8B32777C4897F8A303FDCB5BEDDEF2AA1C3283F00222
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="60" height="60" viewBox="0 0 60 60" fill="none"><circle cx="30" cy="30" r="30" fill="white"></circle><path d="M39.7264 28.2262C40.8587 28.8591 40.8587 30.4414 39.7263 31.0743L24.4394 39.6188C23.3071 40.2517 21.8916 39.4606 21.8916 38.1947L21.8916 21.1058C21.8916 19.84 23.3071 19.0488 24.4394 19.6817L39.7264 28.2262Z" fill="#121926"></path><path d="M39.7264 28.2262C40.8587 28.8591 40.8587 30.4414 39.7263 31.0743L24.4394 39.6188C23.3071 40.2517 21.8916 39.4606 21.8916 38.1947L21.8916 21.1058C21.8916 19.84 23.3071 19.0488 24.4394 19.6817L39.7264 28.2262Z" fill="#E5E5E5" fill-opacity="0.2"></path></svg>

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.16069672605295
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzKJUGFcAjryZj69VGs4VqmqZlloqo:TMHdiO4UJfDjGZ6Z4Vqhllo/
MD5:	F05BDAAB84318928C4309DC39C1D2301
SHA1:	23292F8B99051FB4EE6244C36A428801940964F0
SHA-256:	2CFCEE599980397D1877D136B83940E4A07DFCE8AF23ECFC754ECF7382308223
SHA-512:	2B4CBC0DDAB3F6E7A1149400D263596FC69FC1AFC071E449FFEF49E0A8F31CF22AA6CAFEF9845C2AA90E96C7A7D55A341E611469F7FB66B9C84752B23C36401E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M12.5 7H1.5M1.5 7L7 12.5M1.5 7L7 1.5" stroke="#9AA4B2" stroke-width="1.57143" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	71032
Entropy (8bit):	5.247249590284999
Encrypted:	false
SSDEEP:	768:yiCUrPee6tfe6NkWY8gnaLysnIntnvZYIn/bRrkrurddMBJb8:/ZWe6Re6NkDGO5l
MD5:	0BC12FE7E3D6EF28DAE108484772D83C
SHA1:	254AE898AE6077C07494C844775E8BF3F2528E23
SHA-256:	A4D3B59BED3158BD1FC5B07B24FB367517085205489BF416938F9E283BD14B05
SHA-512:	C07680753C6BEFEC36413CA89AB8D068E5182676647E2E3F534FA1CB4471A2780A6E5E1F7ACC7AC6F8EAECB98D4CE789E3B1CAE4733721685585203185C22C2A
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/data-scripts/0120/9022/site/kartra.com.json?t=1
Preview:	{"uid":1209022,"dkey":"a62067571befec0b45364445f5fea582","updated_at":1730969365,"version":"11.5.306","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9022/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9022/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0120/9022/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"2e2817beb52fdd74a35b56c31b5eeab4cd42abcca158076627358a93364b8594","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.cr

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65163), with no line terminators
Category:	downloaded
Size (bytes):	196108
Entropy (8bit):	5.099648110339347
Encrypted:	false
SSDEEP:	3072:oQ5P4LN1NqpI4I46B68TYTqbBFyUre8lQEI:oQ5wLN1NqpI4I46B68TYTqbBFyUre8le
MD5:	00522F330A27F578700B7C8D502FDE45
SHA1:	5BBED5F8B6406337A0DF1840237423928A2F4A34
SHA-256:	008F20D632472E21B52E24502576EE995B0C2878C10CD8FDDD0203C5A947B36B
SHA-512:	F13AEDEAB16C687B0C4DC05C251D3EE4FBC2F2A3F24D42DE40BDDF66CAD610A8364B9D84E9CBD0B90D6D848EC2731C8722E7974C3DEA9D3740F3168D922A2B6C
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/css/new/css/v5/stylesheets_frontend/blank_page/styles.css
Preview:	.:root:not(.dark-mode){--main-bg: rgb(251, 252, 255);--main-bg-diff-1: rgb(251, 252, 255);--bump-2-bg-def: rgb(255, 249, 227);--bump-2-border-color-def: rgb(251, 196, 1);--bump-2-title-bg-def: rgb(255, 237, 176);--bump-2-bg-active: rgb(247, 253, 252);--bump-2-border-color-active: rgb(37, 183, 159);--bump-2-title-bg-active: rgb(183, 241, 231);--bump-3-border-color-active: rgb(41, 207, 58);--bump-3-title-bg-active: rgb(207, 245, 211);--primary-diff-1: rgb(46, 136, 220);--primary-l-40: rgb(221, 235, 249);--danger: rgb(225, 51, 82);--danger-diff-1: rgb(225, 51, 82);--danger-diff-2: rgb(225, 51, 82);--danger-diff-2-o-10: rgba(225, 51, 82, .1);--danger-l-40-diff-1: rgb(251, 229, 233);--danger-l-40-diff-2: rgb(251, 229, 233);--success-diff-1: rgb(41, 207, 58);--success-diff-1-o-10: rgba(41, 207, 58, .1);--success-l-40-diff-2: rgb(207, 245, 211);--warning-d-20: rgb(135, 107, 9);--warning-l-40-diff-1: rgb(251, 240, 199);--neutral-o-5: rgba(125, 133, 141, .05);--neutral-d-5: rgb(112, 120, 128)

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6995)
Category:	dropped
Size (bytes):	6996
Entropy (8bit):	5.558263851505868
Encrypted:	false
SSDEEP:	192:M/l9vCl2iqno5RpMhfTVUovkrwTgeHYK7zUDAFyJ+dyCfS/tT:8v1ij1he40FyJ+LkT
MD5:	2B800CE23A95F015F4D2BCCE9A83B6AC
SHA1:	2D9960092196A0039AD1E376AC86FCB4C39BD864
SHA-256:	D41423DF7735DC78AE76C0FA23AC8ABF540EF87C481953A24054A48079E66394
SHA-512:	EE6F06D0B5980321436475B7201757492A5FAA53455267AEF99E99885A922897EC881995C87D8A05A3F31BBE868602AF52871FA6B6E1A9F417C07DBDBBE10761
Malicious:	false
Reputation:	low
Preview:	if(CE_USER_SCRIPT=!0,"object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");if((CE2="undefined"==typeof CE2?{}:CE2).userDataToJs=function(e){for(var t=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ERROR_TRACKING","error

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	33234
Entropy (8bit):	5.16407710430106
Encrypted:	false
SSDEEP:	384:9mG0lNbg3eHw2tyivL2ejpLuQev95PIFUQ3Tndnzl4wUax+lzDGkgB59qI/dM:98cStyZkFUOTndp41ax+9DC9qI/dM
MD5:	2D1CDC427897C5D61619D7FF53F225F1
SHA1:	93BE0043EB72EAA0DE8087721E96E83833A783E7
SHA-256:	D081D86EC406D0664733AA0EDD7449BFDA262EEFEB1CC66059514D485677408A
SHA-512:	68322709EE1FECFC090159EA04E605097E981F65B6499B862119DBDA93601ADFFD9784CC8E36C6F2A67FE3CCEABA789CBEE2BCF3A017DE9B34FB6130DBEE074F
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/config/scHHYTld.json
Preview:	{"html":"<div class=\"cky-overlay cky-hide\"></div> <div class=\"cky-btn-revisit-wrapper cky-revisit-hide cky-revisit-bottom-left\" data-cky-tag=\"revisit-consent\" data-tooltip=\"[cky_revisit_title]\" style=\"background-color: #0056A7;\"> <button class=\"cky-btn-revisit\" aria-label=\"[cky_revisit_title]\"> <img src=\"https://cdn-cookieyes.com/assets/images/revisit.svg\" alt=\"Revisit consent button\"> </button> </div> <div class=\"cky-consent-container cky-hide cky-box-bottom-left\" tabindex=\"0\"> <div class=\"cky-consent-bar\" data-cky-tag=\"notice\" style=\"border-color: #f4f4f4; background-color: #FFFFFF;\"> <div class=\"cky-notice\"> <p class=\"cky-title\" role=\"heading\" aria-level=\"1\" data-cky-tag=\"title\" style=\"color: #212121;\"> [cky_notice_title] </p> <div class=\"cky-notice-group\"> <div class=\"cky-notice-des\" data-cky-tag=\"description\" style=\"color: #212121;\"> [cky_notice_description] </div> <div class=\"cky-notice-btn-wrapper\" data-cky-tag=\"notice-button

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1866
Entropy (8bit):	5.460492281421058
Encrypted:	false
SSDEEP:	48:AOOS7iwOOS7+8FZOhOOS7c17OOS70Jc+udOOS7dN0xD:AOOS7iwOOS7+8FZOhOOS7ctOOS70Jc+A
MD5:	497BC777E212BC9DE6A53BE9D16E4932
SHA1:	14A5289F300D6BD4DFC9F7E4181ED2D93E8FA551
SHA-256:	1C445D2AE619F3E88627F553BD2F0E8ED5C4470D0B94624AAB47C529A16CC010
SHA-512:	25C612174AD9105CEAAAE0843BE5EBFA6DCAC99E3DA150559C33FB3969ACD41580C61F7C8AB1802420D78E97D6D9539A4E080D7206E39375A8068A7452850B0C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Montserrat:100
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw0aXpsog.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw9aXpsog.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese */.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 100;. src: url(https://fonts.gstatic.com/s/montserrat/v29/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Xw2aXpsog.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with very long lines (21421)
Category:	downloaded
Size (bytes):	21777
Entropy (8bit):	5.259387684939762
Encrypted:	false
SSDEEP:	384:hhjSgzVkL+RdHnjP8Sqh/kChxz9icB1Jny+BxQ7+DcC8PGD1TbpReKWtG3HbFp:7h8qdT8SADpHJny+9csTbpReBYHbFp
MD5:	95F17C8158EA0ED7DE188E01FFCC3283
SHA1:	16EAF9A6696768C773E677B1427034945BBB3AA0
SHA-256:	BCF31AA3FF8C1B69D65EC3704A32F5F97F1AA6EAD4236A74D51873593BF79756
SHA-512:	57C4BA55FE928B9F6CC3CF5C37E635593BB79FD163A2423AEFCE5204C6A411F310B4C5C2AD76C73A00EAC2BFAA5C14F4AF16B24C0043CDABDE4081961A9C2CD9
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/node_modules/kartra-jquery-validation/dist/jquery.validate.min.js
Preview:	/*. jQuery Validation Plugin 1.10.0 Modified. . http://bassistance.de/jquery-plugins/jquery-plugin-validation/. * http://docs.jquery.com/Plugins/Validation. . Copyright (c) 2012 J.rn Zaefferer. . Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. */. !function(t){t.extend(t.fn,{validate:function(e){if(this.length){var i=t.data(this[0],"validator");return i\|\|(this.attr("novalidate","novalidate"),i=new t.validator(e,this[0]),t.data(this[0],"validator",i),i.settings.onsubmit&&(this.validateDelegate(":submit","click",function(e){i.settings.submitHandler&&(i.submitButton=e.target),t(e.target).hasClass("cancel")&&(i.cancelSubmit=!0)}),this.submit(function(e){function s(){var s;return!i.settings.submitHandler\|\|(i.submitButton&&(s=t("<input type='hidden'/>").attr("name",i.submitButton.name).val(i.submitButton.value).appendTo(i.currentForm)),i.settings.submitHandler.call(i,i.currentForm,e),

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65336), with no line terminators
Category:	downloaded
Size (bytes):	74743
Entropy (8bit):	5.329503759792739
Encrypted:	false
SSDEEP:	1536:GZdnv4H1OiRhJ7Td49AFkTQApCL/YBdzVYhY3Dl:wv4v7Td4iFkTQApy/AzVRl
MD5:	24BE774744F7CA385004D0E4F640526D
SHA1:	02EB76ED57FE93F5C771D381924E2D46DA577876
SHA-256:	82FBCDBE0B2BDC9A7619C5A99684E09ABEB12A11C7DCC5E6E3ED2227EE4461B0
SHA-512:	E49828D1634858714CCF067D1FF0EEB597464443C140DC148221E03675057AF19BBC0AFD6EA3DD6A536B7E0A004F468FEDC260EA156E290A3FF4E1AD767100EA
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/google-site-kit/dist/assets/js/googlesitekit-consent-mode-3d6495dceaebc28bcca3.js
Preview:	!function(n){var t={};function r(e){if(t[e])return t[e].exports;var u=t[e]={i:e,l:!1,exports:{}};return n[e].call(u.exports,u,u.exports,r),u.l=!0,u.exports}r.m=n,r.c=t,r.d=function(n,t,e){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:e})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var u in n)r.d(e,u,function(t){return n[t]}.bind(null,u));return e},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=2)}([function(n,t){var r;r=function(){return this}();try{r=r\|\|new Function("return this")()}c

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Reputation:	low
URL:	https://assets-tracking.crazyegg.com/healthcheck
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	4.950231807178219
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjO76toZgeOhsLRxAR8irDBG+nI1VQ6hllo/:2diO4f1QK76t87O2RDOQnhllo/
MD5:	C8D9F0481C34B65EABD24371AA086483
SHA1:	F26B7AD0C7E59C4FB50F739CDC1406F9E1946A96
SHA-256:	E97E174FC6830E3844D56F2559D530400D92E506276A782B9D3993D47B9C976A
SHA-512:	FC932CE2F1F3102740B66F30F50B3B9E80F7EFE1216CF5EFBD46B5608C4D6E3C1D25B62C4D1F875240FA0D9F8E4F9AC95994BBAACEC55B70A8FDE4CD0F630AA7
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/puzzle-piece-021.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M9.33398 1.5L12.034 4.2C13.834 -0.525 18.859 4.5 14.134 6.3L16.834 9L14.134 11.7C12.334 6.975 7.30898 12 12.034 13.8L9.33398 16.5L6.63398 13.8C4.83398 18.525 -0.191016 13.5 4.53398 11.7L1.83398 9L4.53398 6.3C6.33398 11.025 11.359 6 6.63398 4.2L9.33398 1.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68914
Entropy (8bit):	5.248445428984441
Encrypted:	false
SSDEEP:	768:eVxma4TpP3CbbeqVrn4SnbV1YJ2KAmwkqNjBGldn:UxuGJn46V6J2KAmzwjsj
MD5:	EC9EEFFC02F61D82E8E430EDE8C09F2B
SHA1:	049FDF504F210F1F2D0024004A265AB04C4CA178
SHA-256:	3168F95334D663E697ABEF4BB6871811F0494519FD1F4DD42CA2EB4D0C3AA3A1
SHA-512:	F099B73558AC4130CEA923FED75C3A88F209B22898903FFBB2DBD00679E559099971F2E9219F2D4C8119F8A7A7CD82E6AA9B564A470715A5F8DF48F653DA532D
Malicious:	false
Reputation:	low
URL:	https://genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com/js/widget.js
Preview:	!function(){var e={92903:function(e,t){t.config={type:"production",cdn:{enabled:{forAssets:!1,forApi:!1},assets:"assetscdn-",api:"apicdn-",domain:{production:"wchat.freshchat.com"},subDomain:"",protocol:{production:"https://"}}}}},t={};function n(i){var o=t[i];if(void 0!==o)return o.exports;var a=t[i]={exports:{}};return e[i](a,a.exports,n),a.exports}n.p="https://assetscdn-wchat.freshchat.com/static/assets/",function(){"use strict";var e={SAMPLE_TOKEN:"WEB_CHAT_TOKEN",frameDivId:"fc_frame",frameId:"fc_widget",pushFrameDivId:"fc_push_frame",pushFrameId:"fc_push",modalDivId:"fc_web_modal",classes:{fullscreenClass:"fc-widget-fullscreen"},FAQ_EXPAND_WIDTH:835,AJAX_URL:{canary:"/app/services/app/webchat/{token}/canary"},canaryRoutes:{feature:"canary",rts:"rtscanary"},config:{model:"config",url:"/app/services/app/webchat/{token}/config?domain={domainName}"},impostor:{getFreshChatConfigs:"get_freshchat_configs",activityEvents:["click","dblclick","mousemove","mouseover","mousewheel","mouseout"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	29416
Entropy (8bit):	7.9668819498877745
Encrypted:	false
SSDEEP:	768:HFwbcte1ieAsln3bkMi0kgjRrp0P6Q+TqwfdprcvH:kQe1ieAC36uRmP6QqdhcP
MD5:	099BCD8BDB71340B6ADDD47A10391CB0
SHA1:	3EC77F8F04800BCB1AF18B91C2F9C7E72B14F1EF
SHA-256:	76922F030424508BDAAC542A18B67DFFB2D621D48E307F541F422206684DEC6B
SHA-512:	6A3037E04387E71886D9BCABE8F93E06CD9B194E936C676E76AB2D525944D7B1AA4577BD0AB6EE9FCC236E718914188EAFF788E449AD0C995560A094D01C61A8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............8......................................................................S..?...../k..........Jm...c6m.J8..fSM..:.:.h.u..h.e.q...T....e[....R.H...........6...S..W......!......sz7...9...WlC)..H..v.>4".9.....V.z-..e.=....,saU4.. ...R..T:+.2......Zq..7...;t..%.._c.....sDy:.a.8.B.l....:...W.....z.0..QZ....,u...E...Rpb....c..Ed.Q.......l..o.=O..:=.....G...=...e`.f......k..;...}GZ.V.}g.u.u..ar.d.6.........+.R..AE....^kH..>....n...[....g.y.QiT,...A.6...]....6wZ...u..Qn.V.u..:...e...IZ..p,.+a...T.J)E34.<.iI..'..:t.v.....'GD.h.`.B.9r\.q.0....j.Nv.`...lE.n.V.vZ8...>...Pj..J...NL.UJ)..!I.9.d../....O...'l.zR..aGZ0.Wvm..s0v.CSX..`..G.u...Y..Y....o.6....RU.l...*.B...C0U^.D.#N..S......G.o....t.z...;..Q.]..0r...gfaG.`.!.aGZ:..[0...]MXY...5..pX.R.F!r..Q...4..i.ML..;S..._N.J.s..../.+......

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1003
Entropy (8bit):	4.847056080139776
Encrypted:	false
SSDEEP:	24:2diO4I1zyaWwqtyBarSJdECnJ3sPfzybBF3QnhlloSFIxh:c311oaaeJdECnqfmnL
MD5:	811AC5F17EC2185534DADE0CA5CF5480
SHA1:	2FEC5D99917F183D423ABFEA0F284E43F3EB6279
SHA-256:	8F0419EBDDB6D80B7451F2066A0CE3AA107B46BBA997BE3CD5E015F949FBE465
SHA-512:	6BC199528CB9129F63ED5092C56897688321D85214403F8724F2862596091224A0FDBDEBBBC5D3284964DA53D92E09881B4AC3FF230B96CDAE117DDB54DFADAB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_332_2409)"><path d="M1.5 9H16.5M1.5 5.25H5.25M12.75 5.25H16.5M1.5 12.75H5.25M12.75 12.75H16.5M5.25 16.5V1.5M12.75 16.5V1.5M5.1 16.5H12.9C14.1601 16.5 14.7902 16.5 15.2715 16.2548C15.6948 16.039 16.039 15.6948 16.2548 15.2715C16.5 14.7902 16.5 14.1601 16.5 12.9V5.1C16.5 3.83988 16.5 3.20982 16.2548 2.72852C16.039 2.30516 15.6948 1.96095 15.2715 1.74524C14.7902 1.5 14.1601 1.5 12.9 1.5H5.1C3.83988 1.5 3.20982 1.5 2.72852 1.74524C2.30516 1.96095 1.96095 2.30516 1.74524 2.72852C1.5 3.20982 1.5 3.83988 1.5 5.1V12.9C1.5 14.1601 1.5 14.7902 1.74524 15.2715C1.96095 15.6948 2.30516 16.039 2.72852 16.2548C3.20982 16.5 3.83988 16.5 5.1 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_332_2409"><rect width="18" height="18" fill="white"></rect></clipPath></defs></sv

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19117
Entropy (8bit):	4.284692936783414
Encrypted:	false
SSDEEP:	192:eH/B6Tz+eN2rNKqT0d9TD/g6sqCqiPdjBTD6B5kjYnyJH2n7XhnK1sFylCFj5EbE:efcCeN2p0FS54FEhS
MD5:	08D2B88F8E07998C02B62B3C86968D7C
SHA1:	17DF33E9EA1D802E21963EA942BD9DA883ED735E
SHA-256:	4C1D5DA826BB3E6A0700FA18D2DE07C1B638BE6430D99342368311CA8B008069
SHA-512:	66253758A79B76B1FC497EDE3E1F606F022200FAD6BCDEF8A1245ECE327EEE4CE67E979D41DCF6CF23003CF7F22E31EFD427B35BF30827A4F795AEAE022B0916
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/santitation.js
Preview:	$(document).ready(function() {. if (typeof jsVars !== 'undefined') {. if (typeof jsVars.sanitation_rules !== 'undefined') {. apply_santitation(jsVars.sanitation_rules);. }. }.});..function apply_santitation(sanitationRules) {. var simulatedInputEvent;.. if ('function' === typeof(Event)) {. simulatedInputEvent = new Event('input');. } else {. simulatedInputEvent = document.createEvent('Event');. simulatedInputEvent.initEvent('input', true, true);. }.. var validationRules = {. numeric: function (element, key) {. var regex = new RegExp(sanitationRules['numeric']),. result = true;.. if (!regex.test(key) \|\| !verifyZeroValue(element.val())) {. result = false;. }.. return result;. },. decimal: function (element, key) {. var regex = new RegExp(sanitationRules['decimal']),. result = true;.. if (!r

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2339
Entropy (8bit):	4.274930489773226
Encrypted:	false
SSDEEP:	48:TPAhgmHkcJSk0KNGUmaAFRejHXwLje8b67SXGW:hPsSk0Ko/iHh8b62WW
MD5:	71C20BB07E1387C0FECD7A521AF9803D
SHA1:	470D91C6500D67E26F2EF4E4D0699EA1B2C8FC03
SHA-256:	ED7C487F915432D9464E2AF0A83002EE93596E86E076F3C917E439E5B844D08B
SHA-512:	FEE5058DAE5F928037BEC9EFEC25D8B2C06BDA85A31BD99A6DF954A75B3A08446158E1441BD3FBF37F40A6EFC6CABE4E5037444FD61FEEA3055D5B19025CD557
Malicious:	false
Reputation:	low
Preview:	<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.9584 35.708C8.19071 35.708 0.291626 27.785 0.291625 17.9997L0.291625 16.0266L1.6547 16.2999C1.7269 16.3144 1.79254 16.3278 1.85292 16.3402C2.18947 16.4089 2.3624 16.4442 2.59351 16.4442C4.02238 16.4442 5.20017 15.575 5.69593 14.3946L6.08757 13.4621L7.05986 13.7406C7.54336 13.8791 8.01924 13.9464 8.49032 13.9464C11.5129 13.9464 13.9955 11.4616 13.9955 8.42451C13.9955 7.9478 13.9288 7.53472 13.8448 7.02934L13.7178 6.2655L14.3813 5.86637C15.2722 5.33053 15.9147 4.28559 15.9886 3.06722C15.9835 2.70604 15.8823 2.37723 15.7147 1.87315L15.3081 0.650195L16.5717 0.396836C17.0992 0.291083 17.6116 0.291225 18.0046 0.291332L18.0415 0.29134C27.8092 0.29134 35.7083 8.21439 35.7083 17.9997C35.7083 27.7924 27.7187 35.708 17.9584 35.708ZM2.58643 18.7225C2.96219 26.9183 9.69584 33.4297 17.9584 33.4297C26.47 33.4297 33.43 26.5247 33.43 17.9997C33.43 9.53184

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2068
Entropy (8bit):	4.227714269192936
Encrypted:	false
SSDEEP:	48:c31JWfGMQDmN0HHKT6CyqNwh6kO6mN3brMjv:A0GMQDmiKpyRpmyjv
MD5:	732B4DA6951E0585C452E0A174D59FBC
SHA1:	FA2BE9BFD7021C9DEF7A9E67DD8F6FB43DF25FC2
SHA-256:	B1F7CFCA902AB73D0E959F4A344E17AE5D5A946A8DDF96A466840DBB628F16F3
SHA-512:	A6ECF6F05C222AE8A08FEDABB587A530BF1DAF3F1AAE26A7E2C279EC71A28B8FAEC951BF516FB68A992AE93D1FBE374C37AF809E00DB8E50B5D78C76B25217D7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.29664 3.9832C6.43279 3.60196 7.14567 3.60196 7.28182 3.98319C7.6018 4.87915 8.07867 5.92371 8.71534 6.56038C9.35201 7.19704 10.3966 7.67391 11.2925 7.99389C11.6738 8.13004 11.6738 8.84292 11.2925 8.97907C10.3966 9.29905 9.35201 9.77592 8.71534 10.4126C8.07867 11.0492 7.6018 12.0938 7.28182 12.9898C7.14567 13.371 6.43279 13.371 6.29664 12.9898C5.97666 12.0938 5.49979 11.0492 4.86312 10.4126C4.22646 9.77592 3.18189 9.29905 2.28593 8.97907C1.90469 8.84292 1.90469 8.13004 2.28593 7.99389C3.18189 7.67391 4.22646 7.19704 4.86312 6.56038C5.49979 5.92371 5.97666 4.87915 6.29664 3.9832Z" stroke="#364152" stroke-width="1.13"></path><path d="M13.1554 1.64127C13.2287 1.43598 13.6125 1.43598 13.6859 1.64127C13.8582 2.1237 14.1149 2.68616 14.4577 3.02898C14.8006 3.3718 15.363 3.62858 15.8455 3.80087C16.0508 3.87419 16.0508 4.25804 15.8455 4.33135C15.363 4.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.165427472906603
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzKJUGFcAj9UZW9VGs4VqmqZlloqo:TMHdiO4UJfDj+wZ4Vqhllo/
MD5:	EC2A9B7A826B9F8BB5D985E6DE70472A
SHA1:	09703B1FD47A11BBF6443F42688B894381387878
SHA-256:	84916E45FE99E6B263A52D3FB06AD4E8FEB27CD01D5ABBA5776465EB25837409
SHA-512:	8085D9BC69C90D0CB47341604666B8F700E2242AB21992AC63630D6B20BDCCF2D0DE8B3E8C0C1EC4185AAC42462A4DB40A12BB0962F8A57CE951C77BD5BA30EF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M1.5 7H12.5M12.5 7L7 1.5M12.5 7L7 12.5" stroke="#9AA4B2" stroke-width="1.57143" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1193
Entropy (8bit):	4.616672671456344
Encrypted:	false
SSDEEP:	24:2diO4I1zUMs/O/ibv2lQnhllouNJ1lvnXQdacSguab3ZfT2sX1IM06kx3Qnhllo/:c31wMs/O/iTtjfQ0cSC52sWM06kx
MD5:	CA9ADA26BD4A4B375A1F06E25FA1C5BB
SHA1:	F21724C0214796A486428B6EC145BA238E7369E5
SHA-256:	2CE2ACBDB7D5FDC1167751B0AB76D6CEB7A8FF5019DBCE929A06D04B2A71F010
SHA-512:	ADEB0C6BE895C87A7BEC7671E82EFC29450DCC2256D894F8400FFE42AD862A3E3823D8EAA5A23074FFC5E7EB82491FFB4460C85E1A44EA593C926A98A22F710A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M16.5 6.69853C16.5 6.24417 16.5 6.01699 16.4102 5.91179C16.3322 5.82051 16.2152 5.77207 16.0956 5.78149C15.9577 5.79234 15.797 5.95298 15.4757 6.27426L12.75 9L15.4757 11.7257C15.797 12.047 15.9577 12.2077 16.0956 12.2185C16.2152 12.2279 16.3322 12.1795 16.4102 12.0882C16.5 11.983 16.5 11.7558 16.5 11.3015V6.69853Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M1.5 7.35C1.5 6.08988 1.5 5.45982 1.74524 4.97852C1.96095 4.55516 2.30516 4.21095 2.72852 3.99524C3.20982 3.75 3.83988 3.75 5.1 3.75H9.15C10.4101 3.75 11.0402 3.75 11.5215 3.99524C11.9448 4.21095 12.289 4.55516 12.5048 4.97852C12.75 5.45982 12.75 6.08988 12.75 7.35V10.65C12.75 11.9101 12.75 12.5402 12.5048 13.0215C12.289 13.4448 11.9448 13.789 11.5215 14.0048C11.0402 14.25 10.4101 14.25 9.15 14.25H5.1C3.83988 14.25 3.20982 14.25 2.72852

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61260), with no line terminators
Category:	downloaded
Size (bytes):	333021
Entropy (8bit):	5.665811304759481
Encrypted:	false
SSDEEP:	6144:rwSPrhC62ERkfYQWoY6SKL4rOPpUxzFgIAhqDsd03E7fXaKX6AmFRxm:rwSPrhC62ERkfYQWoY6SKbUpFgIAhqDo
MD5:	E1135C7F31A16440D5FC9944B7402D81
SHA1:	5DB6750E524410C681240C0FCE41A67610D2E20B
SHA-256:	850B42447426E232E97C525DF9BC3AC34A1C18D888C70B771D400306BFA4B954
SHA-512:	00E0FAE9C0548B9DFD5CE9445E366B947834F6AB2FB1D7971BA2B6217CAFCCED98FD5A211178AFE24A3D0D9549A75B722C94669AA9FE82D90AE2CEBB79250E3E
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/scripts/addons/thirdparty/e1135c7f31a16440d5fc9944b7402d81.js
Preview:	(()=>{var f={5605:function(f,e){const t=["crossAxis","alignment","allowedPlacements","autoAlignment"],d=["mainAxis","crossAxis","fallbackPlacements","fallbackStrategy","fallbackAxisSideDirection","flipAlignment"],r=["strategy"],n=["mainAxis","crossAxis","limiter"],a=["apply"];!function(f){"use strict";function e(f){return f.split("-")[1]}function o(f){return"y"===f?"height":"width"}function i(f){return f.split("-")[0]}function c(f){return["top","bottom"].includes(i(f))?"x":"y"}function s(f,t,d){let{reference:r,floating:n}=f;const a=r.x+r.width/2-n.width/2,s=r.y+r.height/2-n.height/2,l=c(t),u=o(l),b=r[u]/2-n[u]/2,h="x"===l;let p;switch(i(t)){case"top":p={x:a,y:r.y-n.height};break;case"bottom":p={x:a,y:r.y+r.height};break;case"right":p={x:r.x+r.width,y:s};break;case"left":p={x:r.x-n.width,y:s};break;default:p={x:r.x,y:r.y}}switch(e(t)){case"start":p[l]-=b(d&&h?-1:1);break;case"end":p[l]+=b(d&&h?-1:1)}return p}function l(f,e){return"function"==typeof f?f(e):f}function u(f){return"number

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65336), with no line terminators
Category:	dropped
Size (bytes):	74743
Entropy (8bit):	5.329503759792739
Encrypted:	false
SSDEEP:	1536:GZdnv4H1OiRhJ7Td49AFkTQApCL/YBdzVYhY3Dl:wv4v7Td4iFkTQApy/AzVRl
MD5:	24BE774744F7CA385004D0E4F640526D
SHA1:	02EB76ED57FE93F5C771D381924E2D46DA577876
SHA-256:	82FBCDBE0B2BDC9A7619C5A99684E09ABEB12A11C7DCC5E6E3ED2227EE4461B0
SHA-512:	E49828D1634858714CCF067D1FF0EEB597464443C140DC148221E03675057AF19BBC0AFD6EA3DD6A536B7E0A004F468FEDC260EA156E290A3FF4E1AD767100EA
Malicious:	false
Reputation:	low
Preview:	!function(n){var t={};function r(e){if(t[e])return t[e].exports;var u=t[e]={i:e,l:!1,exports:{}};return n[e].call(u.exports,u,u.exports,r),u.l=!0,u.exports}r.m=n,r.c=t,r.d=function(n,t,e){r.o(n,t)\|\|Object.defineProperty(n,t,{enumerable:!0,get:e})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"__esModule",{value:!0})},r.t=function(n,t){if(1&t&&(n=r(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.__esModule)return n;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:n}),2&t&&"string"!=typeof n)for(var u in n)r.d(e,u,function(t){return n[t]}.bind(null,u));return e},r.n=function(n){var t=n&&n.__esModule?function(){return n.default}:function(){return n};return r.d(t,"a",t),t},r.o=function(n,t){return Object.prototype.hasOwnProperty.call(n,t)},r.p="",r(r.s=2)}([function(n,t){var r;r=function(){return this}();try{r=r\|\|new Function("return this")()}c

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x676, components 3
Category:	downloaded
Size (bytes):	291094
Entropy (8bit):	7.983906928316784
Encrypted:	false
SSDEEP:	6144:DR+lftSuDI8LfSm7FEYG3XIA1uCOxIC8DxUyEwBgYbDignyix9m2rqS:DRUftFI8LqLQICYUPwK4yEmeJ
MD5:	86BB1F924ECEED80BE7969C58ADD31EA
SHA1:	06E42CA64658C236FBFE45D5E689CA7B71DC497F
SHA-256:	24FE414041F71EE158F9AA817E1D9AC90730543DF18296FDE2876D4C66861654
SHA-512:	276A2B5A19D7584728B7F6778EBEE6B6C3000857C211A2D93105E6B8E4E5FDE6E937106259067CB7F79E97CE669F118A675B19E4097A69B070FF808B85812DD2
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/11/Hero-V2.jpg
Preview:	......JFIF.....H.H................................................................................................................................................L.............:........................................................................>Y.....5[..L...zc<iE..(.'.;./Y...[u/QHR.....T..z.qM.....V..H-..S..$k..j...6$..5.F..:...^;E.......Zb$.9...H".....". ......m. ...[.S...@ H..........T.C...1..`z!..0.%c.w+V.".H6..b.\V).w(f...jo..Z%D....UJ.#....F(..-K-s......fI..Qg.d.1EvU3Z.6c...c.tD.....`VD.....[n..............b....3..I.$.[(...L..$@...........9A...C.!..C{....Sn.."...TlF..<uV..N...KPTA.Sb.J.Q.wx..&.....uR(.TD.;......k..\Y.b.T@...T.\g.LiHV!UT.S....VDEdR.-M..."$." @.......$.e....%D...&@@..$.......#7...$!......7.\|...EZ.Y.....^.P.+(^..[%%eK..T.i.Af.j.z.]..V..ZqEp.5.U;... .l.^..".e\...s.....^..aDa^9M...D.D.V.A..m@..."......&...$...b...(.[+)l....$.......+..(@H`..0ZL.lz..~:."..LJf.g.<p.:.Z...)...z.z.Rk.;.r..\.{.j..8....whe.QH.S=D.....qz.Y]..U]...)..x..,../... @.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6995)
Category:	downloaded
Size (bytes):	6996
Entropy (8bit):	5.558263851505868
Encrypted:	false
SSDEEP:	192:M/l9vCl2iqno5RpMhfTVUovkrwTgeHYK7zUDAFyJ+dyCfS/tT:8v1ij1he40FyJ+LkT
MD5:	2B800CE23A95F015F4D2BCCE9A83B6AC
SHA1:	2D9960092196A0039AD1E376AC86FCB4C39BD864
SHA-256:	D41423DF7735DC78AE76C0FA23AC8ABF540EF87C481953A24054A48079E66394
SHA-512:	EE6F06D0B5980321436475B7201757492A5FAA53455267AEF99E99885A922897EC881995C87D8A05A3F31BBE868602AF52871FA6B6E1A9F417C07DBDBBE10761
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/scripts/0120/9022.js
Preview:	if(CE_USER_SCRIPT=!0,"object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");if((CE2="undefined"==typeof CE2?{}:CE2).userDataToJs=function(e){for(var t=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ERROR_TRACKING","error

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	147776
Entropy (8bit):	5.466366222694911
Encrypted:	false
SSDEEP:	1536:k/w6gUnZSjtDuIogfX8bwzDwAMapgzZkMNeAyiqay86nvofFGlLb8a5t5x7IlSqj:FZD4UDpNuZkAl5bOV+
MD5:	A90D608A69D6BEB077D027E997EC565B
SHA1:	25C19FDC60FE9E9480911D3D43198C3B73247C35
SHA-256:	85A1E4986FD7014028084A6C2B4FB74F66427FD40303737F634B103045B2A172
SHA-512:	7DCDC2C183D0EBF1A5176AB17936AE1E4A856A266C2B5D50FA82B990CEEE53A0D76F56D65196A6A272E6A54CD1C6B211F43EFA99626774D0130E68C324F736E9
Malicious:	false
Reputation:	low
Preview:	(()=>{var t={82627:(t,e,r)=>{"use strict";var n=r(55936),o=r(2534),i=o(n("String.prototype.indexOf"));t.exports=function(t,e){var r=n(t,!!e);return"function"==typeof r&&i(t,".prototype.")>-1?o(r):r}},2534:(t,e,r)=>{"use strict";var n=r(87043),o=r(55936),i=o("%Function.prototype.apply%"),a=o("%Function.prototype.call%"),u=o("%Reflect.apply%",!0)\|\|n.call(a,i),c=o("%Object.getOwnPropertyDescriptor%",!0),s=o("%Object.defineProperty%",!0),f=o("%Math.max%");if(s)try{s({},"a",{value:1})}catch(t){s=null}t.exports=function(t){var e=u(n,a,arguments);c&&s&&(c(e,"length").configurable&&s(e,"length",{value:1+f(0,t.length-(arguments.length-1))}));return e};var l=function(){return u(n,i,arguments)};s?s(t.exports,"apply",{value:l}):t.exports.apply=l},90958:t=>{"use strict";var e="Function.prototype.bind called on incompatible ",r=Array.prototype.slice,n=Object.prototype.toString,o="[object Function]";t.exports=function(t){var i=this;if("function"!=typeof i\|\|n.call(i)!==o)throw new TypeError(e+i);for(v

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	91931
Entropy (8bit):	5.305447505151415
Encrypted:	false
SSDEEP:	1536:6u8KqOE7y7Jnene8hSBjATMRWyALbR7vmnGGCgfzMewTDu4l0DolqEfq8Lj:6aXJeBEwyAnR7vmnLH4KD+xxP
MD5:	870D0CE5E5BD19E3461841A6C8135882
SHA1:	5267448C95C77AE9BD2FA805470B5F17A9D76DE0
SHA-256:	BDF5213670F2CA9B7839A16DBED6260E11A5F87245904EBD3E4C6BB6829C9E1C
SHA-512:	249015488B9CC6A4B37F68D4DC9360AEC51D5316D6D2D4CD3A164DBADF26858C17954BB740C42A7869C4EC0E76E80AF996E25E7BB00DFAB347E7AAA5AC593A96
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={8263:(e,t,n)=>{"use strict";var r=n(8175),o=n(6873),a=n(6596),s=n(148),i=n(214);(e.exports=function(e,t){var n,o,c,l,u;return arguments.length<2\|\|"string"!=typeof e?(l=t,t=e,e=null):l=arguments[2],r(e)?(n=i.call(e,"c"),o=i.call(e,"e"),c=i.call(e,"w")):(n=c=!0,o=!1),u={value:t,configurable:n,enumerable:o,writable:c},l?a(s(l),u):u}).gs=function(e,t,n){var c,l,u,d;return"string"!=typeof e?(u=n,n=t,t=e,e=null):u=arguments[3],r(t)?o(t)?r(n)?o(n)\|\|(u=n,n=void 0):n=void 0:(u=t,t=n=void 0):t=void 0,r(e)?(c=i.call(e,"c"),l=i.call(e,"e")):(c=!0,l=!1),d={get:t,set:n,configurable:c,enumerable:l},u?a(s(u),d):d}},6011:e=>{"use strict";e.exports=function(){}},6596:(e,t,n)=>{"use strict";e.exports=n(5339)()?Object.assign:n(3595)},5339:e=>{"use strict";e.exports=function(){var e,t=Object.assign;return"function"==typeof t&&(t(e={foo:"raz"},{bar:"dwa"},{trzy:"trzy"}),e.foo+e.bar+e.trzy==="razdwatrzy")}},3595:(e,t,n)=>{"use strict";var r=n(2093),o=n(7134),a=Math.max;e.exports=function(e,t){va

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18831
Entropy (8bit):	7.956416482835426
Encrypted:	false
SSDEEP:	384:iReSJC//Jys08wWdhV6a4qhuvE1oj8Hq1e6UDkIsmfxgeN66chG:OdJC//VwIV6a4qhuSA1sDklsxgu6lG
MD5:	84783F690EB60EAF1F6578666B6C0D33
SHA1:	1BA3ECF57ED055F681F6B990CBE9583E2F2AB0AB
SHA-256:	29777E31F3DAD451D5399FEC55E8D81D3A0FAD6D15F584877E969D09920CA9F7
SHA-512:	8DCB2EEAB93F1191B28EA5D0F94662F93F059BB9C9AF70A79EEBBEB67DCA23D3B6F780B8D690A8E7A58510D6ED055BE74A0C6779FD60A6E3119C4A61B22FD4F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a...I9IDATx..[l[w...^V...tYY...x.C.....C..B....u."..!....&.Xh..-.u%].l.Hj5..d[H.6e.tMsO...\l'......9.c..I..r......W...............[.5.@....F.E.~.Q.,....<........ .q.$..5..X..........1T.`.U...dd.....V...cn..xhhh5.K.f...`.`px...(........G.I.e.e.Y.l.A.r.......G...b..<.K....0..@.2W<.-.l...{... .d.f.6.y...d..dI0..%....&....A.AIIIVQQQ61..P/.4......6KB!q..\...`c:....PPP......w:........2.nn....[..k....).......h .....H.Tr.Y.....L......l.@ 0P...gV-..q.lY).?...-....8NH..8^..m..'!..k....`..._.....xf...\$371.a...m.K$.LZ.F...4 .0P.$CV`.dY.Q.....^.._.0..........m.f.[.A..S[..=./o...h....o.....<...t<....bTz.3v#S.......I.....Z.....r..Z\|..Qlxu......7>....t ..0.T.n..\.~.=....F @`.r............R.\.ik...t..&.C.ndj#..t?..WZ.....K.7....Nl.;...~4.Eqe....*.F.Fk...%K...GQv22H...._....f.M........O>...I..aH.;R0.....ik^..C..`...I-!c72.q@.wCC......r..-.....%H.e.T=.E.?uxp......c[........F.....8C...s..... lZs..r.}..l....

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1470
Entropy (8bit):	4.299081541859316
Encrypted:	false
SSDEEP:	24:2diO4I1GKb+52BSvWi4F94/ctCrtuMynZuJEe4uajlFHYtW7L7+qL2LMWn+/tWi6:c31Gi5B84/tOIMyZuJEe49jlWt+H+7LX
MD5:	3FFA07CA27ED635D9CCADFA1D60DACE7
SHA1:	65D7E5E3819228A3FE1E21C6CE96006CE51062B3
SHA-256:	B012DC193533D163D79DF882280A749044494EDD56F2C8263F9D625F8AB4D3E4
SHA-512:	F76DA52DD8F3979B21C161EE8A547BAEB8E07B4C0B31871A2782415A3DA066D261B37CC0170CD8311D6699E8B8771781C8AB8C2BCFF7747D381BFE93B2205954
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/07/create-icons-3.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 25 25" fill="none"><path d="M12.875 21.3335L12.7749 21.1834C12.0803 20.1415 11.733 19.6205 11.2741 19.2433C10.8679 18.9094 10.3998 18.6589 9.89661 18.5061C9.32825 18.3335 8.70211 18.3335 7.44982 18.3335H6.075C4.95489 18.3335 4.39484 18.3335 3.96702 18.1155C3.59069 17.9238 3.28473 17.6178 3.09299 17.2415C2.875 16.8137 2.875 16.2536 2.875 15.1335V6.5335C2.875 5.41339 2.875 4.85334 3.09299 4.42552C3.28473 4.04919 3.59069 3.74323 3.96702 3.55148C4.39484 3.3335 4.95489 3.3335 6.075 3.3335H6.475C8.71521 3.3335 9.83531 3.3335 10.691 3.76947C11.4436 4.15296 12.0555 4.76489 12.439 5.51753C12.875 6.37318 12.875 7.49329 12.875 9.7335M12.875 21.3335V9.7335M12.875 21.3335L12.9751 21.1834C13.6697 20.1415 14.017 19.6205 14.4759 19.2433C14.8821 18.9094 15.3502 18.6589 15.8534 18.5061C16.4217 18.3335 17.0479 18.3335 18.3002 18.3335H19.675C20.7951 18.3335 21.3552 18.3335 21.783 18.1155C22.1

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62898)
Category:	dropped
Size (bytes):	351274
Entropy (8bit):	5.365673380742743
Encrypted:	false
SSDEEP:	6144:UFqGiEmwCBIrM1/Q47GKeyiSzwyZM86aKSOIOAbn5ONkNWBNOdbxUMLuJz51y:UFcEmdi41yyPp6aKSOIOAbn5+BNOdbxX
MD5:	8FAEDC33AA18BE2CC852BFFB489DCD07
SHA1:	9A95EE94500E7E39984BD538E6669E8FC20895D0
SHA-256:	B15CD545132F15D071B4D914A1C262F0E95E1F2B9E586A335674649419332620
SHA-512:	ECEBB5BCFECB79F76AF6011B9246388CCFBAB3CE76E1742A719A81453CA045BE4064305C04049F6C1C3CF824EFC4D79177C81F445A6F0B3D8EDF3B611E5DA901
Malicious:	false
Reputation:	low
Preview:	(function(){var fw={};(function(fw,$){if($){window.freshsales=window.freshsales\|\|{};window.freshsales.$=window.freshsales.$\|\|jQuery}var chatSelector=document.querySelector("[chat]");window.hideChatWidget=chatSelector&&chatSelector.hasAttribute("chat")&&chatSelector.getAttribute("chat")==="false";var widgetSelector=document.querySelector("script[widgetId]");window.custWidgetId=widgetSelector&&widgetSelector.hasAttribute("widgetId")?widgetSelector.getAttribute("widgetId"):"";var FreshworksCRM=(function(){let eventListeners={};function FreshworksCRM(){}FreshworksCRM.prototype.identify=function(){let event={name:"identify",args:arguments,origin:window.location.origin,created_by:"fwcrm"};let customEvent=new CustomEvent("fwcrm_event",{detail:event});window.dispatchEvent(customEvent)};FreshworksCRM.prototype.trackCustomEvent=function(){let event={name:"trackCustomEvent",args:arguments,origin:window.location.origin,created_by:"fwcrm"};let customEvent=new CustomEvent("fwcrm_event",{detail:event

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65280)
Category:	downloaded
Size (bytes):	143660
Entropy (8bit):	5.248916100261213
Encrypted:	false
SSDEEP:	3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvD:RJLC4dkEUYnafpl9v8cIWybV4y+oGMM4
MD5:	C6D5E2A29F484739EF9B1BAE04430742
SHA1:	764C62A516E9BFF08758F6C6808F995594ECE29D
SHA-256:	55297D02AABE7F2222AA1173D679CEC9BFCD2EFF3ECFF97A7D110F1D9459D3D2
SHA-512:	284522274D87B711110CC1C4FEAEE419FD5271315D5DE72AD84AF14E4F7A2B8741F9A4DD1F2693197D8DE8350B29A4F53D94BFFDF2CAA66C9AD98A8E9D12F200
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/swiper/swiper-bundle.min.js?ver=9.3.3
Preview:	/*. Swiper 8.4.7. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2023 Vladimir Kharlampidi. . Released under the MIT License. . Released on: January 30, 2023. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],st

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1045)
Category:	downloaded
Size (bytes):	151029
Entropy (8bit):	5.196998970957246
Encrypted:	false
SSDEEP:	1536:PCGQSUj5/evrufbfy31B+rkrc5I6SW7ZNrBVLfk4riEPqYiX+kNEmI/197K9dWRi:avSIbYM5I2D/Pbl597gxg7XkBN2/LY
MD5:	2B0FB78CA0FC72BA89765B9E81A7C364
SHA1:	6F572323AACF91F48844A2CAFB130455AD5D5220
SHA-256:	6CE9F981879E508E66E5F18E12AA760229D3331D06CE1EDBCBA6B820D947FA8F
SHA-512:	EEC2BFF94EE88ACBB4B7E0AECF292E938314FC0CFC20BE1310C0096D298D07F82AC80DC671344886EAEF4A18A605A1309B94D35D250EC8494C4AA7B29D8DC8CD
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/node_modules/kartra-jquery/jquery-1.8/jquery-1.8.3.min.js
Preview:	/. jQuery JavaScript Library v1.8.3. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright 2012 jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: Tue Nov 13 2012 08:20:33 GMT-0500 (Eastern Standard Time). Sizzle CSS Selector Engine. Copyright 2012 jQuery Foundation and other contributors. Released under the MIT license. http://sizzlejs.com/./.(function(window,undefined){var rootjQuery,readyList,document=window.document,location=window.location,navigator=window.navigator,_jQuery=window.jQuery,_$=window.$,core_push=Array.prototype.push,core_slice=Array.prototype.slice,core_indexOf=Array.prototype.indexOf,core_toString=Object.prototype.toString,core_hasOwn=Object.prototype.hasOwnProperty,core_trim=String.prototype.trim,jQuery=function(selector,context){return new jQuery.fn.init(selector,context,rootjQuery)},core_pnum=/[\-+]?(?:\d*\.\|)\d+(?:[eE][\-+]?\d+\|)/.source,. core_rnotwhite=/\S/,core_rspace=/\s+/,rtri

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	261
Entropy (8bit):	5.043095647910326
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzD9z0XltjFwkAHw6YXqmqZlloqo:TMHdiO4F9z4tjqkAHFthllo/
MD5:	7E54D99B2E10E90503B1205C56BB14F3
SHA1:	185C9262D8D6C6ED70CAF01CBB67C9E729C4E495
SHA-256:	50FF6E352126B871E716CFE545EA153F5DAF86C322526BF935CD4C5258FAA267
SHA-512:	52DA6EFB920A98107D3AF96EFCD3F38D6F755BE70CDD41F4CEF8CAD9E69AA9042DEC158F32DD0A2E114434BBE6416ABA767D63D611289658F654B145108166CF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="8" height="12" viewBox="0 0 8 12" fill="none"><path d="M1.5 11L6.5 6L1.5 1" stroke="white" stroke-width="1.66667" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1717
Entropy (8bit):	4.930278077637038
Encrypted:	false
SSDEEP:	48:5j3r/gE2O+MfnR1BSO0WBOmjWcWuunVgWlE0V/Lm:1bII+Mf9SvdGFV4uWE0V/a
MD5:	642BF8440559C6C2791C44CE463EBC93
SHA1:	688EADA4986B11EC731248C9584A25E46CE66BA5
SHA-256:	310FB5A3839B812A4ADF44850E970C131FD08B7424D70CF7F1C3017930ED9B2F
SHA-512:	FADEABCF81B99715F7E3D5A9676DA63872B104B93936F60EB3FAFFBBB69831EFB696195331CDFD9E2A133D638C5C8F7E54041F5A7D4DD86E8CB7723C562E58F1
Malicious:	false
Reputation:	low
URL:	https://kartra.com/sw.js
Preview:	/.Import the Workbox library from the Google CDN..It is possible to serve this locally should we want to remove the dependency on Google.See here for more info: https://developers.google.com/web/tools/workbox/modules/workbox-sw./.importScripts('https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-sw.js');.const offlinePage = '/offline/';.// SETTINGS.workbox.setConfig({. // set the local path is not using Google CDN. //modulePathPrefix: '/directory/to/workbox/'.. // By default, workbox-sw will use the debug build for sites on localhost,. // but for any other origin it.ll use the production build. Force by setting to true.. // debug: true.});../*. Pages to cache (networkFirst). /../. Add on install. */.self.addEventListener('install', (event) => {. const urls = ['/offline/'];. const cacheName = workbox.core.cacheNames.runtime;. event.waitUntil(caches.open(cacheName).then((cache) => cache.addAll(urls))).});..var networkFirst = workbox.strategies.networkF

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	97473
Entropy (8bit):	5.4165537471870735
Encrypted:	false
SSDEEP:	1536:lSRktpnYKatB8ZDTobZEyMZs5A+TAUXxcOwb0/EFgH1K7n9vYXyAauLDm:lykCsZ4baytBXxcZwzulILDm
MD5:	98605E46A53EBA931233C013DD865563
SHA1:	F547D053D497067063CE41E42A426854EF7F634A
SHA-256:	58DF28EBE998BF79C2C4925066E27EB610D0AC2819C91F12694EAFACEDAE25F7
SHA-512:	1C9D3F710A185564FB2B4C933A12B3AC245FD3E105A7743D8977DBEFCD5B4BDA5CBBBEBFB4E96B6F83A53CABBEF0A8F4507DE461C41625FE00B2FAAC9938F9E0
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/versioned/tracking-scripts/ba967527787569c9fa1869fd2a980656.js
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[806,60],{9307:(e,t,s)=>{"use strict";s.r(t),s.d(t,{EventHandlers:()=>Os,V11Tracker:()=>xt,compress:()=>Is,fp:()=>Ns,getCensoredElements:()=>Bt,timing:()=>nt});const r="[\\s\\u00a0\\u2028\\u2029]+";let i;if("undefined"!=typeof Intl&&Intl.Segmenter)try{i=new Intl.Segmenter}catch(e){}const n={whitespace:new RegExp(r,"g"),strip:new RegExp(`^${r}\|${r}$`,"g"),href:/\bhref="(.?)"/i,ipHost:/^([\d\.]+\|\[[a-f\d:]+\])$/i,allChars:/\p{RI}\p{RI}\|\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?(\u{200D}\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?)\|./gsu};function o(e,t){const s=e.replace(n.strip,"");return t?s.replace(n.whitespace," "):s}const a=2048,c=65535-a;const l=`cesrk${Math.random().toString().replace(/\D/g,"")}`;function h(e){let t;const s=(e=e\|\|window).document;return e[`${l}_path`]!==e.location.pathname&&(e[l]=function(e){const t=e.defaultView,s=e.documentElement;if(s.scroll

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	261
Entropy (8bit):	5.043095647910326
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzD9z0XltjFwkAHw6YXqmqZlloqo:TMHdiO4F9z4tjqkAHFthllo/
MD5:	7E54D99B2E10E90503B1205C56BB14F3
SHA1:	185C9262D8D6C6ED70CAF01CBB67C9E729C4E495
SHA-256:	50FF6E352126B871E716CFE545EA153F5DAF86C322526BF935CD4C5258FAA267
SHA-512:	52DA6EFB920A98107D3AF96EFCD3F38D6F755BE70CDD41F4CEF8CAD9E69AA9042DEC158F32DD0A2E114434BBE6416ABA767D63D611289658F654B145108166CF
Malicious:	false
Reputation:	low
URL:	https://kartrastg.wpenginepowered.com/wp-content/uploads/2024/10/Icon-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="8" height="12" viewBox="0 0 8 12" fill="none"><path d="M1.5 11L6.5 6L1.5 1" stroke="white" stroke-width="1.66667" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x676, components 3
Category:	dropped
Size (bytes):	261519
Entropy (8bit):	7.982339358444899
Encrypted:	false
SSDEEP:	6144:DR+lftSuDI8LfSm7FEYG3XIA1uCOxIC8DxUyEwBgYbDignyixh:DRUftFI8LqLQICYUPwK4yO
MD5:	D88F9327694683BE4921D2AA67B60F6A
SHA1:	1135120AF680D9B4469E5A0FCE851B2CD1072E14
SHA-256:	96E603317135758881EC16147E2E73C7BB8A9BFC9D0C479DB5F1563EE6C628E4
SHA-512:	796C2F562AB9BCC0F0F6B5ED6D8BA2BC4D2FDE0043CCFDA84D5CFEFEC7F33807429340BC3DA1FC37B84E4E50F59C1226AB234F4AAC0B81F4AAD89B4866CAF3DD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H................................................................................................................................................L.............:........................................................................>Y.....5[..L...zc<iE..(.'.;./Y...[u/QHR.....T..z.qM.....V..H-..S..$k..j...6$..5.F..:...^;E.......Zb$.9...H".....". ......m. ...[.S...@ H..........T.C...1..`z!..0.%c.w+V.".H6..b.\V).w(f...jo..Z%D....UJ.#....F(..-K-s......fI..Qg.d.1EvU3Z.6c...c.tD.....`VD.....[n..............b....3..I.$.[(...L..$@...........9A...C.!..C{....Sn.."...TlF..<uV..N...KPTA.Sb.J.Q.wx..&.....uR(.TD.;......k..\Y.b.T@...T.\g.LiHV!UT.S....VDEdR.-M..."$." @.......$.e....%D...&@@..$.......#7...$!......7.\|...EZ.Y.....^.P.+(^..[%%eK..T.i.Af.j.z.]..V..ZqEp.5.U;... .l.^..".e\...s.....^..aDa^9M...D.D.V.A..m@..."......&...$...b...(.[+)l....$.......+..(@H`..0ZL.lz..~:."..LJf.g.<p.:.Z...)...z.z.Rk.;.r..\.{.j..8....whe.QH.S=D.....qz.Y]..U]...)..x..,../... @.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO-8859 text, with very long lines (21421)
Category:	dropped
Size (bytes):	21777
Entropy (8bit):	5.259387684939762
Encrypted:	false
SSDEEP:	384:hhjSgzVkL+RdHnjP8Sqh/kChxz9icB1Jny+BxQ7+DcC8PGD1TbpReKWtG3HbFp:7h8qdT8SADpHJny+9csTbpReBYHbFp
MD5:	95F17C8158EA0ED7DE188E01FFCC3283
SHA1:	16EAF9A6696768C773E677B1427034945BBB3AA0
SHA-256:	BCF31AA3FF8C1B69D65EC3704A32F5F97F1AA6EAD4236A74D51873593BF79756
SHA-512:	57C4BA55FE928B9F6CC3CF5C37E635593BB79FD163A2423AEFCE5204C6A411F310B4C5C2AD76C73A00EAC2BFAA5C14F4AF16B24C0043CDABDE4081961A9C2CD9
Malicious:	false
Reputation:	low
Preview:	/*. jQuery Validation Plugin 1.10.0 Modified. . http://bassistance.de/jquery-plugins/jquery-plugin-validation/. * http://docs.jquery.com/Plugins/Validation. . Copyright (c) 2012 J.rn Zaefferer. . Dual licensed under the MIT and GPL licenses:. * http://www.opensource.org/licenses/mit-license.php. * http://www.gnu.org/licenses/gpl.html. */. !function(t){t.extend(t.fn,{validate:function(e){if(this.length){var i=t.data(this[0],"validator");return i\|\|(this.attr("novalidate","novalidate"),i=new t.validator(e,this[0]),t.data(this[0],"validator",i),i.settings.onsubmit&&(this.validateDelegate(":submit","click",function(e){i.settings.submitHandler&&(i.submitButton=e.target),t(e.target).hasClass("cancel")&&(i.cancelSubmit=!0)}),this.submit(function(e){function s(){var s;return!i.settings.submitHandler\|\|(i.submitButton&&(s=t("<input type='hidden'/>").attr("name",i.submitButton.name).val(i.submitButton.value).appendTo(i.currentForm)),i.settings.submitHandler.call(i,i.currentForm,e),

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	4.616672671456344
Encrypted:	false
SSDEEP:	24:2diO4I1zUMs/O/ibv2lQnhllouNJ1lvnXQdacSguab3ZfT2sX1IM06kx3Qnhllo/:c31wMs/O/iTtjfQ0cSC52sWM06kx
MD5:	CA9ADA26BD4A4B375A1F06E25FA1C5BB
SHA1:	F21724C0214796A486428B6EC145BA238E7369E5
SHA-256:	2CE2ACBDB7D5FDC1167751B0AB76D6CEB7A8FF5019DBCE929A06D04B2A71F010
SHA-512:	ADEB0C6BE895C87A7BEC7671E82EFC29450DCC2256D894F8400FFE42AD862A3E3823D8EAA5A23074FFC5E7EB82491FFB4460C85E1A44EA593C926A98A22F710A
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/07/create-icons-2-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M16.5 6.69853C16.5 6.24417 16.5 6.01699 16.4102 5.91179C16.3322 5.82051 16.2152 5.77207 16.0956 5.78149C15.9577 5.79234 15.797 5.95298 15.4757 6.27426L12.75 9L15.4757 11.7257C15.797 12.047 15.9577 12.2077 16.0956 12.2185C16.2152 12.2279 16.3322 12.1795 16.4102 12.0882C16.5 11.983 16.5 11.7558 16.5 11.3015V6.69853Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M1.5 7.35C1.5 6.08988 1.5 5.45982 1.74524 4.97852C1.96095 4.55516 2.30516 4.21095 2.72852 3.99524C3.20982 3.75 3.83988 3.75 5.1 3.75H9.15C10.4101 3.75 11.0402 3.75 11.5215 3.99524C11.9448 4.21095 12.289 4.55516 12.5048 4.97852C12.75 5.45982 12.75 6.08988 12.75 7.35V10.65C12.75 11.9101 12.75 12.5402 12.5048 13.0215C12.289 13.4448 11.9448 13.789 11.5215 14.0048C11.0402 14.25 10.4101 14.25 9.15 14.25H5.1C3.83988 14.25 3.20982 14.25 2.72852

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1549
Entropy (8bit):	4.318957737159561
Encrypted:	false
SSDEEP:	48:c31/PllO9FWTxltA3kHqPZHJzmPRK0ZjD/hnRGl:SlUMxrxUHJn0Z3Zkl
MD5:	91C3E73956B5207556F1753C31028DA1
SHA1:	8270931F684825C478C0BA6D1C3E7F454B7B6CB2
SHA-256:	57709EE6854D899BAB09F491268BD00F8423C9A98FEE2F2C49D541C5DD23DA41
SHA-512:	8352D15C83EC3C6B409CE8FA3974DAB8F822C96DC21C8180B076B9DF574623C5F7E2E8C4BBAA449C109D3BE3011BA5F2AEF7BD022F4A443E1857FF29A319E42E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M10.308 1.97522L15.954 5.64512C16.1535 5.7748 16.2532 5.83964 16.3255 5.92613C16.3895 6.00269 16.4375 6.09124 16.4669 6.18661C16.5 6.29434 16.5 6.41331 16.5 6.65126V12.15C16.5 13.4102 16.5 14.0402 16.2548 14.5215C16.039 14.9449 15.6948 15.2891 15.2715 15.5048C14.7902 15.75 14.1601 15.75 12.9 15.75H5.1C3.83988 15.75 3.20982 15.75 2.72852 15.5048C2.30516 15.2891 1.96095 14.9449 1.74524 14.5215C1.5 14.0402 1.5 13.4102 1.5 12.15V6.65126C1.5 6.41331 1.5 6.29434 1.53313 6.18661C1.56245 6.09124 1.61051 6.00269 1.67449 5.92613C1.74676 5.83964 1.84651 5.7748 2.04601 5.64512L7.69203 1.97522M10.308 1.97522C9.83454 1.66748 9.59782 1.51362 9.34277 1.45375C9.11732 1.40083 8.88268 1.40083 8.65723 1.45375C8.40218 1.51362 8.16546 1.66748 7.69203 1.97522M10.308 1.97522L14.9521 4.9939C15.468 5.32923 15.7259 5.49689 15.8153 5.70951C15.8933 5.89533 15.8933 6.10474 1

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 495x482, components 3
Category:	downloaded
Size (bytes):	36020
Entropy (8bit):	7.974030777706171
Encrypted:	false
SSDEEP:	768:C2ju2i58yBiJW0x9WzwK9bpsPsVc/W6TCXukUMQvxZCQyAZe:hU5WW0xw8K99Vc/zKyLvxpe
MD5:	A301A89DDAD0E315307937AE376266E5
SHA1:	F2FF56248E207B46CCA5CECF20F6933D2D51F48C
SHA-256:	7066918F815A1739D03AC75EE473B733EE56E039FEB344DBA8763FA3A24D1FBF
SHA-512:	3EBF47894D691D8666867021BFD67BF47555F6DD0F7CB44713AC00FB99AB4A2522B92ACEFB3543A019207B8E1B54356F379B9F73ED89F5EBCF3D06D40C2FB739
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/11/image-1-1.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6................................................................................................................................................."..........6....................................................................gM=.N..{..6*.m.y..n.#....Y.t...:i.X.<..t.%.f.f.c3...l.v\.r[...:.....?...g(...V/....#.z......0B...{.C..1.c>.R(.xE.A.\...2H.D.....[..m\|.+Hs..&OYU..c).P....>u...+r@.......)..o...#..#29#.sm#p..w...8..!$....Q..M]}.59..b.r..oP...8.&2.(....O..GN..\|{.kAr.>.m0.J.B...A.......c5v...

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 1827x630, components 3
Category:	dropped
Size (bytes):	42474
Entropy (8bit):	7.830367648678715
Encrypted:	false
SSDEEP:	768:UQgBvt9txA0ysk8EbJDaIDBmMNvFVduV0k11j1sJj45WFrB5biR2Ips/BXFlvBwT:UJBvt9tQ8EUI1rNcVX/1sJs4/bvIps/Q
MD5:	88A7E16D99E55EBB2F556DE2105124D1
SHA1:	9820913294F3340DE97EF8272167666AB158B6C6
SHA-256:	DFB794DAFCDA8A7744C9E019D4337E1AF148F0A2E2A341CC686DD909EC8955A1
SHA-512:	6883AC595AF76597E407EFF0128B383BD92BE94F852C778DFEC63078270457FA65410E60CB2B37B01BCEC7114F2629CC5D67F682480B35B9CA0407E1E6E13E78
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................v.#.............0.................................................................(3s.,..&R......1.b.f.......u...F`I`...-.WS:.q......7eS`...dY..A...+-...w.]M.....o=..Y...0..2..[.N.....$.q-..B.y..n.W9...e.-.....,.2.)...k7@.Sy.....%.....l...,.H.Endb.2CmM..D.1..Z.l.k0.t.....%.g.<.....2....d.......^....++.j.s:.E......P.....L...Z..f.(( ..K........f.,...F..Z......3..7...k.s..:g..S.s.3.{.Df...S .:.n.n...........d....s......%...n".......Hd.a..).%K&n.....H......M\.^ZD......J..X.Fu.m................(RK...3f....Vn..i...... .u4.w.Y%.[d.+Z.,...@SS:.Y...jMX.U.."..w4.......2....M..rbVC..n..o8....8.....7......!...u.Id.cZ.....1@3u.h.......(..&@...........K5WRKr........V...7.....7...`..^..s....%.@.6jY.....g8.(....jh.!7..B......:fjj..M...f.....k<...*!&Hi..:...3B..h.s@..-..I..c[...d..2.Ky.E....5.....o9.-.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11026
Entropy (8bit):	7.972940232169136
Encrypted:	false
SSDEEP:	192:lGkO8ynqFeeB4ImPIbMHOHAJErdnvGAPL50z3u1qv8pBcsTlpax410ESGtEMglg:AkTyneeU4ImAYHOHAJMnvHPMkPly41dL
MD5:	1574981952FE4D22F4156A691A3A001E
SHA1:	E4B73F604356A974F4EF8378514DA2529BF92F2D
SHA-256:	7C1B2FF55688CA2845BF78D651A495BFD61A154BC9BF2896C8BBEF19FC147F77
SHA-512:	0ADDC8F3358132058A7F3D7BF6608D6254BA7380E43342A039CC78FCEB6799E30D44A1075242E1E6996D9A65280059CFD26D0C47A0504B8F2B9AED5A2CD27478
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/images-1.png
Preview:	RIFF.+..WEBPVP8L.../..@.U..m.s..s..#b..N+c,".r..Z..{.pu.,..Ic.6..]b......i.<.&.3....`.k<.Z..}.....%..C..........y..m..m.....^.m........w.....msW.b.^.d....6f.2.s.T..;.3...]...+..mk{w........X..N.m.F..9..bc..}.....o...(N...'u..%...m;cU..C..._......m.._..m'..m..7Z.,{......?.;7......U......?.jJ.../%..@SBww.{.ZS(...V.....;..U....n..tH.(H.......]......mggOl.5....F.+...+...9.NnY...ms.....B}B..+.v.m[.....3Ou.........L3333Tcaw....j...S.R1Kj.%}uZ%..-..\|.o...c.-0.^C..&.=.)..#L.9.Sf.S.f.u.0...h...``.>^.#.9u.bG.a\.0eL93g...En..X...N'..L.kZ........x6`.(.........`6.OG.:.9gfvB....m.o...'..y..ff..y.[..o,7`.6lf.l'..b...?%...IR8.H.......).ffm.<.{...s]....Z..g..}.........(.../...6...}.{..=.+..ME@M.F.0...H..3.h.!,.D.".^....?..T.PF.w.N.P.6....+0.E.#.h...0......f. .....h...m..T.......!./..'...K... ..RK.CE...\..TcH...0.."Wx.j.!.....&X\|.Q`...P....P...v...!q..DD4.b..F.C.........&.i.MP8...`%7.`k.0...UX.(.1 VU..p.mi.$f.t...U..J.v.@.1...C0...."....9.i.....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Reputation:	low
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	534
Entropy (8bit):	4.527929573507705
Encrypted:	false
SSDEEP:	12:trwdl/UyKuCH+zq7dIdvOQ6nMYucsmkldNufMmK:tYRUyKu6+OxIxOQUccqlHufMmK
MD5:	90CD7D12973514443BE27501A525694C
SHA1:	E11A70A22FCDD278A003D309F4267E78A059EF70
SHA-256:	98A82FF8FC8FBDDF29A49711DA964719C29EA2FA4290E0F2DE70EAE3A9D8A339
SHA-512:	14B1D18D5C443BA537337D1EFC96F734CF7FA147D63524B67536D65FE8F8AD45372ED0ED2CD982CCC210F6442301E61A05877247412CBE24CF080E0D774E3A5A
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/facebook.svg
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 12.2573C24 5.6299 18.6274 0.257324 12 0.257324C5.37258 0.257324 0 5.6299 0 12.2573C0 18.2468 4.3882 23.2113 10.125 24.1115V15.7261H7.07812V12.2573H10.125V9.61357C10.125 6.60607 11.9166 4.94482 14.6576 4.94482C15.9701 4.94482 17.3438 5.1792 17.3438 5.1792V8.13232H15.8306C14.34 8.13232 13.875 9.0574 13.875 10.0073V12.2573H17.2031L16.6711 15.7261H13.875V24.1115C19.6118 23.2113 24 18.2468 24 12.2573Z" fill="#98A2B3"/>.</svg>.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	738
Entropy (8bit):	4.627998385776436
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjGjcPI0LzcB2tbQhOcUHW8K4yY24bXtkqZkhZo+s+ICCL6OWFUWkdj:2diO4I1z6jcKwbQhuqfYF7VZso+lICCn
MD5:	B57C7EF46C272CCDA46A47A14926EA26
SHA1:	B7438D6C7319515D66B69071B8281FB305626131
SHA-256:	9CC702C8697180427A80DC4AD755E35FF3A507A0EB8C20F010DA5B57904619EE
SHA-512:	BE6672C3326452A25ABC32B928CD6AFB2BDE3A16020CFD20DA2CC36EDFE18A4FE5D55A6718220D4807E0ABC323FA2FDE164E22609D8EBECD0E28A1D6A4557453
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/scale-icon-5.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 9L6.75 9M15.75 4.5L6.75 4.5M15.75 13.5L6.75 13.5M3.75 9C3.75 9.41421 3.41421 9.75 3 9.75C2.58579 9.75 2.25 9.41421 2.25 9C2.25 8.58579 2.58579 8.25 3 8.25C3.41421 8.25 3.75 8.58579 3.75 9ZM3.75 4.5C3.75 4.91421 3.41421 5.25 3 5.25C2.58579 5.25 2.25 4.91421 2.25 4.5C2.25 4.08579 2.58579 3.75 3 3.75C3.41421 3.75 3.75 4.08579 3.75 4.5ZM3.75 13.5C3.75 13.9142 3.41421 14.25 3 14.25C2.58579 14.25 2.25 13.9142 2.25 13.5C2.25 13.0858 2.58579 12.75 3 12.75C3.41421 12.75 3.75 13.0858 3.75 13.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	155828
Entropy (8bit):	7.996695177831839
Encrypted:	true
SSDEEP:	3072:tJ2+gOFw2My/56PZuEe+m1S/wpsdcGLDd7f+K0QHEEIajQeT:tJNFukEebGFGGL57f+KrHEvajQeT
MD5:	A335D46AB0F812E2D86A6AA6A9405931
SHA1:	13615A3200EEC950C7E731B9FF02F67D867F3985
SHA-256:	18951A1ED3F87AEE0931A16507D73F908ECFCDE58751583BF4FB5707AED7088D
SHA-512:	A3F86CFD60E2076132A2D424E45DD139B17D8C4029292E375A1A7D1F1591B25275DCEA909E61D2634AE45263BD08918B7227093BE9291C24E5F2016FD4FBBB80
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/Frame-44788-1.png
Preview:	RIFF.h..WEBPVP8L.h../ACx..H.$Il..}.W........D......$.....Q4.X5...dU.........v.Qa.$/.._$..!y5gf$.H\|......D@.......@. ...:.M`1I....@Q.%..j.D#.......kVf.1..8.E.A.>&$..h.VdkV.J....EAu.J.m.E..R...e..M-).....IbZZY.z.F..$..J..6..7.......I.>..u..O..(........L..74<...UWA..L.1>...ES.lM.&...........^..y..]...~xFE......0i..A.T^..N........R$..x.}=.......[....r..24.s..(..?7...U...:.l.Y.a.......r......."...k.)&....W..+...P........6..b1.?.....GK.w...z.........[..z.!.%%LL!..H..)....r...m.....7.........{.C.%LQM....P...w.](1".@9.6Q?..%....}=..N.........~n.B......+......i.c.)`.......l.....M......r.kB...2...S...O....G.0..Q9F.\RI..u..F..r....-.J.TRA3...0D..a..nb....a.#...... .{.....T.f..1D2.)R$CH.M.....`w....\.........s.]....5ex./R.H...$.T)......b....4.o. ..%..Q.......MI..f...F.....Oh..H.H.q.b.:=.?....u.3....\WF.....#.!.j...O......5.2@..9.......6..m.;7.......$I.. ..+ I.-.6.....9e....rg.j;4gJ...$.......U.....\|?..K.9...r.....A7..L..u..^[.....f..U..H...1r.}..S.c..

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65509)
Category:	downloaded
Size (bytes):	72821
Entropy (8bit):	5.3846680156395665
Encrypted:	false
SSDEEP:	1536:jFb2fh8RSBSBHY/Zkb3A2FWKst3WCl7uXYQ84k2c7FNBANcVJOYOrW:jFb2E/CTntF6XV8jFWIOYL
MD5:	BE024C31DCAA0A265B9F8AFF1A9B8364
SHA1:	9F0CE95BF807CB1EA2C304E8F56D9A59AFE88475
SHA-256:	9CFB97C223560A0BC1D5870DFA50663EDB399D3430E51C241E377547A4D56C76
SHA-512:	12E45BF9803AEB5B9F49B7F8E4D908701EA7D69F896BACA949DBD279C3FDCFD40E0F5A1EA103786F1256B2AF7A8A37617D60101A57B85A15498C2122CE322F9F
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/unip/1633491/tfa.js
Preview:	/! 20241102-3-RELEASE /..function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}!function(t){var e='TFASC';e.indexOf("{jsScope}")>-1&&(e="TRC"),t[e]\|\|(t[e]={})}(window),function(t,e){t.TRC=t.TRC\|\|{};var n=function t(){return!0},r=function n(r,i,o,a){var s=r+"/"+encodeURIComponent(o\|\|t.TRC.publisherId)+"/log/3"+"/"+i;return a&&(s+="?"+e.TRCLogger.formatParams(a)),s},i=function e(r,i,a,s){var c,u=new(t.XDomainRequest\|\|t.XMLHttpRequest);return u.open(r,i),u.onload="function"==typeof s?s:n,u.onerror=n,u.ontimeout=n,u.onprogress=n,u.withCredentials=!0,a&&o(u,a),u},o=function t(e,n){for(var r in n)n.hasOwnProperty(r)&&e.setRequestHeader(r,n[r])};t.TRC.TRCLogger=e.TRCLogger={post:function n(o,a,s,c,u,l){var f=r(o,a,c,u),d=i("POST",f);l&&"function"==typeof t.navigator.sendBeacon?t.na

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	425448
Entropy (8bit):	7.550070707361897
Encrypted:	false
SSDEEP:	12288:tRVkI9JBn9PBNcGiIQmxdOktq9i/rEj86DVR:tHXPHP2GOktQi/Srz
MD5:	9368013DE6E3CF148E6FCBB7B79D166F
SHA1:	87DB40C23B9DD427A8D61F64489B7F93D8139664
SHA-256:	4B820C3E1691694EABC1DD8686EF4654DC35E496A74F964242E27629FEAA6D73
SHA-512:	2036DE84D6A45BD3478DF717B46404763E15947E476899FC24C9CBAC52A37A44027B38EB1BA5D959484FD0A4CD64E0618F3E35AB491D4BD41A5C3F88DC9EAB2C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/03/4436470_1559070824478Kartra_Mini_Commercial_VSL_-_V04_-_NO_TRIAL.mp4:2f84e58f614991:0
Preview:	... ftypisom....isomiso2avc1mp41....moov...lmvhd....................................................................@..................................(trak...\tkhd........................................................................@..............$edts....elst........................mdia... mdhd...............D.s.........-hdlr........soun............SoundHandler....Kminf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts..................O<stsc................................................................................................................................................................................... ...........$...........%...........(...........)...........-.......................2...........3...........7...........8...........<...........=...........A...........B...........F...........G...........J...........K...........O...........P........

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	751
Entropy (8bit):	5.103411845122469
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zo5SgxhjFQZMhkVOI1VQ6hlloiByZFN1FhQB7FgYRF97F3I1VQ6hllv:2diO4I1zyPoOOOQnhlloP9XI7SYRz7Fc
MD5:	2B7DB142C5347B62586288FF5788E5BC
SHA1:	4DA2F323CFDFA95059FEB512B5826905278C903F
SHA-256:	8E49BD260AA424BB7F0BC5B24E36A1A8B6979BFB41FFE39E9263745ACA514268
SHA-512:	EBC2D54BD3A4F6709ACE9F1201022E1372B2E7687293CF11BD4C11BCD4BDC45587ADF08311AA9F7D5A079529FACCAFB7F47613EED337AE8122B2F97BF48FB691
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_952_6136)"><path d="M6.75 12C9.6495 12 12 9.6495 12 6.75C12 3.8505 9.6495 1.5 6.75 1.5C3.8505 1.5 1.5 3.8505 1.5 6.75C1.5 9.6495 3.8505 12 6.75 12Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M11.25 16.5C14.1495 16.5 16.5 14.1495 16.5 11.25C16.5 8.3505 14.1495 6 11.25 6C8.3505 6 6 8.3505 6 11.25C6 14.1495 8.3505 16.5 11.25 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_952_6136"><rect width="18" height="18" fill="white"></rect></clipPath></defs></svg>

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 20 tables, 1st "GDEF", 27 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	110572
Entropy (8bit):	6.490277656978418
Encrypted:	false
SSDEEP:	3072:g3aPJgdM8TsS8Dz6XpkUunM+hzYbrMdAO:+1uz5YHhO
MD5:	1B443EE3B6993DB873F1FAEDFFE56133
SHA1:	0B864532623ABE9E381AB191B4EB66021DB9829D
SHA-256:	947F6B8FE5ACFE6AEC8A239FFEE857292C3804E1DAF1515B9A36BFEC28BC9B8F
SHA-512:	40D703A041B95A4B44E3597B4122A10276DA8D7004CCAA91A9C4A0C085FF761A7B3C2209B49EE1CC3E227DA2B75DC5EAE4F739972F7142F311FEB121B0B54288
Malicious:	false
Reputation:	low
URL:	https://kartrastg.wpenginepowered.com/wp-content/uploads/GreenShift/fonts/font_1/ttf/Outfit-VariableFont_wght.ttf
Preview:	...........@GDEF...m...@...}GPOS..M...0..x.GSUB..z........HVAR.4.n.......%MVAR..........POS/2p.ni...(...`STAT..}.........cmapJ.}V.......Lfvar..i........lgasp.......T....glyfI..D..0h..c.gvar.5....0....head)TZP.......6hhea...+...\|...$hmtxj.^\|.. X...xloca..........>maxp.......\... name...... ....post..:..&.....preph......L...............................M.................................................................4oR_.<..................:................................$cpht....stro....xhgt...................... .@. .@.@.............. .$...1.d.......X...K...X...^.2..............................frag............................... ..................wght.d...d...............d...............,.......................X............... ..............................wght..........6.F.R.^.j.v.........d.......................,.......................................X....................... ...................$.?.K.W...................=.p.\|...........d.................).5.O................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.858373407025395
Encrypted:	false
SSDEEP:	12:TMHdiO4Zdc/QK3B0diHoyqW+5hdQqJbFpudt5gcHo0KvBW+5hdQqJbFpudt5gcHm:2diO476QK3KdS+5hTFpSt5gcI0KA+5hj
MD5:	2B476E8250F9ADE3A7114630AE930FCF
SHA1:	0CEE0C8774209094AFB54740FD4DA7447647B21A
SHA-256:	1192AFEBBA96EFE4F005695A52AFBD2034951B83997B3BABFB915C8757E9F8FB
SHA-512:	F46EE740590CCC1A1C78179E39D7D6DF87BA83D59F4389BA40BF559495897043A26AD6B4D934C2606ACD8B32777C4897F8A303FDCB5BEDDEF2AA1C3283F00222
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/11/Play-button-2-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="60" height="60" viewBox="0 0 60 60" fill="none"><circle cx="30" cy="30" r="30" fill="white"></circle><path d="M39.7264 28.2262C40.8587 28.8591 40.8587 30.4414 39.7263 31.0743L24.4394 39.6188C23.3071 40.2517 21.8916 39.4606 21.8916 38.1947L21.8916 21.1058C21.8916 19.84 23.3071 19.0488 24.4394 19.6817L39.7264 28.2262Z" fill="#121926"></path><path d="M39.7264 28.2262C40.8587 28.8591 40.8587 30.4414 39.7263 31.0743L24.4394 39.6188C23.3071 40.2517 21.8916 39.4606 21.8916 38.1947L21.8916 21.1058C21.8916 19.84 23.3071 19.0488 24.4394 19.6817L39.7264 28.2262Z" fill="#E5E5E5" fill-opacity="0.2"></path></svg>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	43811
Entropy (8bit):	4.398353709116211
Encrypted:	false
SSDEEP:	768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB
MD5:	AB627B3D962B9D7BA28D2C9C4F507006
SHA1:	5306BF157B6126D0B43982FB8B3FAE7C560B6A89
SHA-256:	23FC25133ED072CDF7DAE575213067B1DA3C6843B2A0E489C8B7FC984C60CE6B
SHA-512:	F6955B951FC46A60880E2230AEC83D0F423B9560B7C4EB5F715F966DF544DCA7CFFD1DB57834766EFC0968C8273F005EA5F4F23D10884F8C89FFB7BC4E7F638D
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Form Plugin. * version: 3.50.0-2014.02.05. * Requires jQuery v1.5 or later. * Copyright (c) 2013 M. Alsup. * Examples and documentation at: http://malsup.com/jquery/form/. * Project repository: https://github.com/malsup/form. * Dual licensed under the MIT and GPL licenses.. * https://github.com/malsup/form#copyright-and-license. /./global ActiveXObject /..// AMD support.(function (factory) {. "use strict";. if (typeof define === 'function' && define.amd) {. // using AMD; register as anon module. define(['jquery'], factory);. } else {. // no AMD; invoke directly. factory( (typeof(jQuery) != 'undefined') ? jQuery : window.Zepto );. }.}..(function($) {."use strict";../. Usage Note:. -----------. Do not use both ajaxSubmit and ajaxForm on the same form. These. functions are mutually exclusive. Use ajaxSubmit if you want. to bind your own submit handler to the form. For example,.. $(document).ready(function() {.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	29416
Entropy (8bit):	7.9668819498877745
Encrypted:	false
SSDEEP:	768:HFwbcte1ieAsln3bkMi0kgjRrp0P6Q+TqwfdprcvH:kQe1ieAC36uRmP6QqdhcP
MD5:	099BCD8BDB71340B6ADDD47A10391CB0
SHA1:	3EC77F8F04800BCB1AF18B91C2F9C7E72B14F1EF
SHA-256:	76922F030424508BDAAC542A18B67DFFB2D621D48E307F541F422206684DEC6B
SHA-512:	6A3037E04387E71886D9BCABE8F93E06CD9B194E936C676E76AB2D525944D7B1AA4577BD0AB6EE9FCC236E718914188EAFF788E449AD0C995560A094D01C61A8
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-3-1.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............8......................................................................S..?...../k..........Jm...c6m.J8..fSM..:.:.h.u..h.e.q...T....e[....R.H...........6...S..W......!......sz7...9...WlC)..H..v.>4".9.....V.z-..e.=....,saU4.. ...R..T:+.2......Zq..7...;t..%.._c.....sDy:.a.8.B.l....:...W.....z.0..QZ....,u...E...Rpb....c..Ed.Q.......l..o.=O..:=.....G...=...e`.f......k..;...}GZ.V.}g.u.u..ar.d.6.........+.R..AE....^kH..>....n...[....g.y.QiT,...A.6...]....6wZ...u..Qn.V.u..:...e...IZ..p,.+a...T.J)E34.<.iI..'..:t.v.....'GD.h.`.B.9r\.q.0....j.Nv.`...lE.n.V.vZ8...>...Pj..J...NL.UJ)..!I.9.d../....O...'l.zR..aGZ0.Wvm..s0v.CSX..`..G.u...Y..Y....o.6....RU.l...*.B...C0U^.D.#N..S......G.o....t.z...;..Q.]..0r...gfaG.`.!.aGZ:..[0...]MXY...5..pX.R.F!r..Q...4..i.ML..;S..._N.J.s..../.+......

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	4.676287250874529
Encrypted:	false
SSDEEP:	3:YTyLSMiLYVMf88nTgEXdA7EH3DCai+RKYM2ZD9DXga:YWLSVMdi5dAgzCURDdbga
MD5:	93309C994DFE776347F4A35A908677AF
SHA1:	008C8F81AF97911BE5D922B9751D53DDD4199491
SHA-256:	C77D57750DDD61D3E3571A8E665611B27B667F816A2D7C87EA5BA6BFED8C950E
SHA-512:	5D7289BCB91A3539293CE7D7F0DDFF22C17F9F6DC0C8A2BD793C82A0E8010A7ABC31C59D71C3108E9FDC996C6D789B3EAF985E0666E49CC3B9D4C25C7379F185
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/data-scripts/0120/9022/sampling/kartra.com.json?t=1
Preview:	{"version":"11.5.306","sites_sampling":"%8&4!}%\|%]!}$<$5$4$4$3$6$3$,!}&%%?&$%^!}$<!}%~%?&&,&%?$.%[&&&$!}$,!}&%^%[&&&%]%\|&%%`%=&*%?&,%\|&&!}$<$9$1&6%;"}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3244
Entropy (8bit):	4.149366879867592
Encrypted:	false
SSDEEP:	96:EyEWO0PL4t6pOzU7tb95RDbIXGDXB2Cacv3n6:EyhUti5TOeZacC
MD5:	1E6C7EC487D232A36277B88A7A69997B
SHA1:	A3164F6C6705BEAD6502C0BD033BD5E37755B052
SHA-256:	7089166C39D875F870B33305EEC2E33D96E2138182FA0CBE78D910C94D24308A
SHA-512:	A1E1A7148B6D1E001B9104831351CFCF91886B77EDBF6CFAC1569416A33613F2717B72A1B9CD24BF5816DD88E522183AD2A6386CC4D1A803549A50B4FBB85FC7
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/instagram.svg
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_4_3164)">.<path d="M12 2.41826C15.2063 2.41826 15.5859 2.43232 16.8469 2.48857C18.0188 2.54014 18.6516 2.73701 19.0734 2.90107C19.6313 3.1167 20.0344 3.3792 20.4516 3.79639C20.8734 4.21826 21.1313 4.6167 21.3469 5.17451C21.5109 5.59639 21.7078 6.23389 21.7594 7.40107C21.8156 8.6667 21.8297 9.04639 21.8297 12.2479C21.8297 15.4542 21.8156 15.8339 21.7594 17.0948C21.7078 18.2667 21.5109 18.8995 21.3469 19.3214C21.1313 19.8792 20.8688 20.2823 20.4516 20.6995C20.0297 21.1214 19.6313 21.3792 19.0734 21.5948C18.6516 21.7589 18.0141 21.9558 16.8469 22.0073C15.5813 22.0636 15.2016 22.0776 12 22.0776C8.79375 22.0776 8.41406 22.0636 7.15313 22.0073C5.98125 21.9558 5.34844 21.7589 4.92656 21.5948C4.36875 21.3792 3.96563 21.1167 3.54844 20.6995C3.12656 20.2776 2.86875 19.8792 2.65313 19.3214C2.48906 18.8995 2.29219 18.262 2.24063 17.0948C2.18438 15.8292 2.17031 15.4495 2.17031 12

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	dropped
Size (bytes):	13617
Entropy (8bit):	4.300417048081442
Encrypted:	false
SSDEEP:	384:eg+tvTZjxGdoduU7i28Hiu3zSjighskM7lND:ovTZw28Hiu3zSjige7lND
MD5:	8025FA3C792C66A53637687E226E9228
SHA1:	4B12F3737EC8EC0F615EE140FD9E57E38096D3E6
SHA-256:	43802D11DE47A2E38169B141C7136CCAB74D242EAD165DEE37D81E1D726DC1C6
SHA-512:	938A87D97F2FDE4E273814FF39D72FC00F84147A44541458C013533D995BA0CF13C4FCDD61D36F38ABCF7041DAF61AE2130FFC79627914934DC37A7999D1EEFF
Malicious:	false
Reputation:	low
Preview:	if (typeof window['kartra_tracking_loaded'] === 'undefined') {. window['kartra_tracking_loaded'] = true;. window['processed_assets'] = [];.. (function(window){. var replaceUrl = false;. var url = new URL(window.location.href);. var searchParams = new URLSearchParams(url.search);.. if ('undefined' === typeof window.kuuid) {. setUuidParam();. }.. if ('undefined' === typeof window.kll) {. setKllParam();. }.. if ('undefined' === typeof window.kref) {. setKrefParam();. }.. setKaffParam();.. if (replaceUrl) {. window.history.replaceState(. null,. null,. url.toString(). );. }.. function getCookie(name) {. var cookieRegex = '(?:(?:^\|.; )' + name + ' = ([^;]).$)\|^.*$';. var cookie = document.cookie.match(cookieRegex)[1];.. if (cookie) {. return decodeURIComponent(cookie);. }. }.. function setCookie(name, value, options) {.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	753
Entropy (8bit):	4.694435671403857
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjgQ0ulJ7+indc6pq8Eci9h0VqJwW0Bt/adkkDgFG7BhdOXe2LC3I1U:2diO4f1Qt0ulNnnRpq1nUCkkD/7h+b2z
MD5:	1978489E57D641B67562DCFC62D4C156
SHA1:	0287AD88EF4BEE189B95652594B68C172CF44D61
SHA-256:	0D4F021D20587502333196E06DDF215BB39501501384919E2BE3CB80D0FD4C3C
SHA-512:	0A32314E3B7E28DBD4EB986D793A7E76A44AC607D10D6C0AE9272E87E9B7E00072D55361D12D210811EDAD4CE46F3969F40C860CC31FA43F2AE6B1B4E059796D
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/users-right1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M14.584 15.75L16.834 13.5M16.834 13.5L14.584 11.25M16.834 13.5H12.334M11.959 2.46807C13.0584 2.91311 13.834 3.99098 13.834 5.25C13.834 6.50902 13.0584 7.58689 11.959 8.03193M9.33398 11.25H6.33398C4.93616 11.25 4.23725 11.25 3.68593 11.4784C2.95085 11.7828 2.36683 12.3669 2.06235 13.1019C1.83398 13.6533 1.83398 14.3522 1.83398 15.75M10.459 5.25C10.459 6.90685 9.11584 8.25 7.45898 8.25C5.80213 8.25 4.45898 6.90685 4.45898 5.25C4.45898 3.59315 5.80213 2.25 7.45898 2.25C9.11584 2.25 10.459 3.59315 10.459 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3244
Entropy (8bit):	4.149366879867592
Encrypted:	false
SSDEEP:	96:EyEWO0PL4t6pOzU7tb95RDbIXGDXB2Cacv3n6:EyhUti5TOeZacC
MD5:	1E6C7EC487D232A36277B88A7A69997B
SHA1:	A3164F6C6705BEAD6502C0BD033BD5E37755B052
SHA-256:	7089166C39D875F870B33305EEC2E33D96E2138182FA0CBE78D910C94D24308A
SHA-512:	A1E1A7148B6D1E001B9104831351CFCF91886B77EDBF6CFAC1569416A33613F2717B72A1B9CD24BF5816DD88E522183AD2A6386CC4D1A803549A50B4FBB85FC7
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_4_3164)">.<path d="M12 2.41826C15.2063 2.41826 15.5859 2.43232 16.8469 2.48857C18.0188 2.54014 18.6516 2.73701 19.0734 2.90107C19.6313 3.1167 20.0344 3.3792 20.4516 3.79639C20.8734 4.21826 21.1313 4.6167 21.3469 5.17451C21.5109 5.59639 21.7078 6.23389 21.7594 7.40107C21.8156 8.6667 21.8297 9.04639 21.8297 12.2479C21.8297 15.4542 21.8156 15.8339 21.7594 17.0948C21.7078 18.2667 21.5109 18.8995 21.3469 19.3214C21.1313 19.8792 20.8688 20.2823 20.4516 20.6995C20.0297 21.1214 19.6313 21.3792 19.0734 21.5948C18.6516 21.7589 18.0141 21.9558 16.8469 22.0073C15.5813 22.0636 15.2016 22.0776 12 22.0776C8.79375 22.0776 8.41406 22.0636 7.15313 22.0073C5.98125 21.9558 5.34844 21.7589 4.92656 21.5948C4.36875 21.3792 3.96563 21.1167 3.54844 20.6995C3.12656 20.2776 2.86875 19.8792 2.65313 19.3214C2.48906 18.8995 2.29219 18.262 2.24063 17.0948C2.18438 15.8292 2.17031 15.4495 2.17031 12

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	33234
Entropy (8bit):	5.16407710430106
Encrypted:	false
SSDEEP:	384:9mG0lNbg3eHw2tyivL2ejpLuQev95PIFUQ3Tndnzl4wUax+lzDGkgB59qI/dM:98cStyZkFUOTndp41ax+9DC9qI/dM
MD5:	2D1CDC427897C5D61619D7FF53F225F1
SHA1:	93BE0043EB72EAA0DE8087721E96E83833A783E7
SHA-256:	D081D86EC406D0664733AA0EDD7449BFDA262EEFEB1CC66059514D485677408A
SHA-512:	68322709EE1FECFC090159EA04E605097E981F65B6499B862119DBDA93601ADFFD9784CC8E36C6F2A67FE3CCEABA789CBEE2BCF3A017DE9B34FB6130DBEE074F
Malicious:	false
Reputation:	low
Preview:	{"html":"<div class=\"cky-overlay cky-hide\"></div> <div class=\"cky-btn-revisit-wrapper cky-revisit-hide cky-revisit-bottom-left\" data-cky-tag=\"revisit-consent\" data-tooltip=\"[cky_revisit_title]\" style=\"background-color: #0056A7;\"> <button class=\"cky-btn-revisit\" aria-label=\"[cky_revisit_title]\"> <img src=\"https://cdn-cookieyes.com/assets/images/revisit.svg\" alt=\"Revisit consent button\"> </button> </div> <div class=\"cky-consent-container cky-hide cky-box-bottom-left\" tabindex=\"0\"> <div class=\"cky-consent-bar\" data-cky-tag=\"notice\" style=\"border-color: #f4f4f4; background-color: #FFFFFF;\"> <div class=\"cky-notice\"> <p class=\"cky-title\" role=\"heading\" aria-level=\"1\" data-cky-tag=\"title\" style=\"color: #212121;\"> [cky_notice_title] </p> <div class=\"cky-notice-group\"> <div class=\"cky-notice-des\" data-cky-tag=\"description\" style=\"color: #212121;\"> [cky_notice_description] </div> <div class=\"cky-notice-btn-wrapper\" data-cky-tag=\"notice-button

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	dropped
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	7.503682855881811
Encrypted:	false
SSDEEP:	48:/ZNn2K01J3P5futS5E0APnQf2MaVRz3lpfwAIx:D2JL5fs34nARzVZwt
MD5:	0FCA864384E681E506FB3C2F2E3AB488
SHA1:	FA63E12333229E735FCE992DF0FE0D77998C72DF
SHA-256:	C6C93F8FB2D3849FB7EDDD11D7E7B73A62C6D6875A8273A54A871FC4908A3530
SHA-512:	77E70887AB545C108B2727E3CEE62A1B535FCA4B8C3A4C618ACA909CFA8176D507B3B8E12DB16AA0140869F962BCAC8AE197BE1E363B7DE6CD582D793264EF1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:2510D957675211EEA19DF7999091D0F7" xmpMM:DocumentID="xmp.did:2510D958675211EEA19DF7999091D0F7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2510D955675211EEA19DF7999091D0F7" stRef:documentID="xmp.did:2510D956675211EEA19DF7999091D0F7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>P.a...-IDATx..[[hTG...l...uA..Z.HE.b.UJ/.T.&.S.....%}...6....P..#.d-.xk6...$..>..D[.Q.D...5....s..uOv.\f&...

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Reputation:	low
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	4.647053521088557
Encrypted:	false
SSDEEP:	12:tr8oScjtuCP8HQH56Fg8uE7eTRHQHfFS4r+HK1HCzQfdDVW5RxJqFg:tQoSatuI8wHE7uEywHfFStq1HHVs5Rj7
MD5:	9DF16EC1950528DDAAAB7DA2EED5663A
SHA1:	E44EAD945B712D784EE19E7D0A3CA6D9124923DE
SHA-256:	492421B038AB4E0DB4399391A40D63952C352FE5A4C6650FAA1E01BD8ECD5504
SHA-512:	C5682B4BED8528783F958744DDBD182358F937759510321EFA4CC209ED68B8DE87DA3CDFFB78AEA6FB5B7316BF97AAE1CB3448B76752880CB5BC8C6BBEDC59A5
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/icon.svg
Preview:	<svg width="522" height="512" viewBox="0 0 522 512" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M210.366 225.046L290.211 131.836H391.586L301.581 224.943L432.77 421.538C474.056 378.702 499.456 320.436 499.456 256.24C499.456 124.659 392.797 18 261.215 18C243.76 18 226.765 19.8921 210.383 23.4548V225.063L210.366 225.046Z" fill="#2E88DC"/>.<path d="M249.768 277.054L210.391 318.307V378.497H134.176V54.6841C67.3718 96.8909 23 171.367 23 256.224C23 387.805 129.659 494.464 261.24 494.464C300.822 494.464 338.136 484.798 370.968 467.734L249.768 277.071V277.054Z" fill="#2E88DC"/>.</svg>.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	4.604993038776683
Encrypted:	false
SSDEEP:	24:2diO4I1zfE8jsU6POpaWB4kZkbE5bUYEQnhllo/:c31/aGw04wIY+
MD5:	E9AD2BF14D4DAF510C50BAFFB83407C6
SHA1:	46231BE4971FD8C27D8ED51B958F5CD9793E0C05
SHA-256:	8E6BFD4671F39C4EA4D322063AD25D3B3B8B5DB94CE68B1590CC36EBAF8862B9
SHA-512:	71965ED67CB8FF79EE6913C74E46277D45DF6BB9BEF4F212A2C20FCF4AB59A2CFF57E33F48CB93819187D96E524D13CBB328CF1F3261CED21B44F8B8E48876C5
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/create-icons-4.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M7.5 12H10.5M6.6 16.5H11.4C12.6601 16.5 13.2902 16.5 13.7715 16.2548C14.1948 16.039 14.539 15.6948 14.7548 15.2715C15 14.7902 15 14.1601 15 12.9V5.1C15 3.83988 15 3.20982 14.7548 2.72852C14.539 2.30516 14.1948 1.96095 13.7715 1.74524C13.2902 1.5 12.6601 1.5 11.4 1.5H6.6C5.33988 1.5 4.70982 1.5 4.22852 1.74524C3.80516 1.96095 3.46095 2.30516 3.24524 2.72852C3 3.20982 3 3.83988 3 5.1V12.9C3 14.1601 3 14.7902 3.24524 15.2715C3.46095 15.6948 3.80516 16.039 4.22852 16.2548C4.70982 16.5 5.33988 16.5 6.6 16.5ZM11.25 6.75C11.25 7.99264 10.2426 9 9 9C7.75736 9 6.75 7.99264 6.75 6.75C6.75 5.50736 7.75736 4.5 9 4.5C10.2426 4.5 11.25 5.50736 11.25 6.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	4.076100760801318
Encrypted:	false
SSDEEP:	24:tLNTuyGMB/XDJLdrqb0mquXWDUvBDgdh+x8TTetHFXOQNgtciEW6jpuu9tt8:fTBbJLdEIuX4G8ete+iEV1uu9w
MD5:	463A29230026F25D47804E96C507F787
SHA1:	F50E0EAC87BB8F5CFF8F7D8CCB5D72AEDDA7E78D
SHA-256:	A049E1ABE441835A2BCF35258936072189A0A52D0000C4ED2094E59D2AFD189B
SHA-512:	83F065B7B10E906EF8BF40DD907DA4F0EB0F4C28EE2D8B44E418B15F1C06884A579957B2BC27418FAC5759825D394819FF0AC48D784B9F05564B8EDAB25D9426
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/assets/images/close.svg
Preview:	<svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.572899 0.00327209C0.459691 0.00320032 0.349006 0.036716 0.254854 0.0995771C0.160701 0.162438 0.0873146 0.251818 0.0439819 0.356405C0.000649228 0.460992 -0.0106814 0.576084 0.0114242 0.687113C0.0335299 0.798142 0.0880779 0.900118 0.168164 0.980132L4.18928 5L0.168164 9.01987C0.0604905 9.12754 0 9.27358 0 9.42585C0 9.57812 0.0604905 9.72416 0.168164 9.83184C0.275838 9.93951 0.421875 10 0.574148 10C0.726422 10 0.872459 9.93951 0.980133 9.83184L5.00125 5.81197L9.02237 9.83184C9.13023 9.93836 9.2755 9.99844 9.4271 9.99923C9.5023 9.99958 9.57681 9.98497 9.6463 9.95623C9.71579 9.92749 9.77886 9.8852 9.83184 9.83184C9.93924 9.72402 9.99955 9.57804 9.99955 9.42585C9.99955 9.27367 9.93924 9.12768 9.83184 9.01987L5.81072 5L9.83184 0.980132C9.88515 0.926818 9.92744 0.863524 9.9563 0.793865C9.98515 0.724206 10 0.649547 10 0.574148C10 0.49875 9.98515 0.42409 9.9563 0.354431C9.92744 0.284772 9.8

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	841
Entropy (8bit):	4.6507292722828835
Encrypted:	false
SSDEEP:	24:2diO4I1zMqjMn1hyaFj4kSdrSjbtuiC+cQsAbfFPF3Qnhllo/:c31wqjG1h/j8SjbtufQsADz
MD5:	ABE21490D3A4BF64332215C373EED33F
SHA1:	96B513B5CBC5963C0988AB2CBE889239D52CEECF
SHA-256:	244A01CCF2A7630A638014669458EFB15D97904107B0B3C37DCCFF6237012317
SHA-512:	2480D5EC5A1F875602B675377FF7FC8EFCD2A85C08DD2C93D93B7CCD4292AA10CB38BD4E2053D7F67475B924FDA11063C4FFD416218F3E86FCCE4C1B3FE4D6C7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 7.5H2.25M12 1.5V4.5M6 1.5V4.5M7.875 10.5L9 9.75V13.5M8.0625 13.5H9.9375M5.85 16.5H12.15C13.4101 16.5 14.0402 16.5 14.5215 16.2548C14.9448 16.039 15.289 15.6948 15.5048 15.2715C15.75 14.7902 15.75 14.1601 15.75 12.9V6.6C15.75 5.33988 15.75 4.70982 15.5048 4.22852C15.289 3.80516 14.9448 3.46095 14.5215 3.24524C14.0402 3 13.4101 3 12.15 3H5.85C4.58988 3 3.95982 3 3.47852 3.24524C3.05516 3.46095 2.71095 3.80516 2.49524 4.22852C2.25 4.70982 2.25 5.33988 2.25 6.6V12.9C2.25 14.1601 2.25 14.7902 2.49524 15.2715C2.71095 15.6948 3.05516 16.039 3.47852 16.2548C3.95982 16.5 4.58988 16.5 5.85 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1929
Entropy (8bit):	4.776269360754064
Encrypted:	false
SSDEEP:	48:c0t/FaJKEMoH50jM7ZH50LxoOnaeG1OlV51a:/NaJGoIYZa+Ot954
MD5:	F23EB84201E1D3B2474EA3C971197180
SHA1:	A661A43AAF56876991264C68DF0B9938698C63CE
SHA-256:	223234624E8E94D2913E479445D270C768E27EC6053CEA4D9E75C9B62F1F401C
SHA-512:	7567D97536E4577FA239CD1A0E7697724F8EF88A06C2ECEC4D493930FD9C8FFBAB6B70454FBBA48438A17438BE925E0ED5467A09B5BE06969BC545083467E0B2
Malicious:	false
Reputation:	low
URL:	https://d2uolguxr56s4e.cloudfront.net/img/shared/kartra_logo_color.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 134 24">. <defs>. <style>. .cls-1 {. fill: #fff;. }.. .cls-2 {. fill: #595f65;. }.. .cls-3 {. fill: #2e88dc;. }. </style>. </defs>. <path class="cls-1" d="m12.4,24c6.85,0,12.4-5.37,12.4-12S19.25,0,12.4,0,0,5.37,0,12s5.55,12,12.4,12Z"/>. <path class="cls-3" d="m70.63,18.02h-2.48V5.89s7.17,0,10.07,0c2.83,0,3.97,2.96,3.97,4.35,0,1.05,0,3.49-2.11,4.25l3.13,3.52h-2.95l-2.71-3.17h-5.42v-2.05s4.01,0,5.6,0,1.96-1.45,1.97-2.26c.02-1.46-.61-2.47-2.09-2.47-1.14,0-6.98,0-6.98,0v9.96h0Z"/>. <path class="cls-3" d="m116.76,18.02s6.77-10.48,7.58-11.7c.72-1.08,1.62-1.14,2.26,0,.63,1.14,7.4,11.7,7.4,11.7h-2.98l-1.66-2.68h-6.76s1.31-2.09,1.31-2.09h4.3s-2.75-4.24-2.75-4.24l-5.64,9.01h-3.07Z"/>. <path class="cls-3" d="m101.81,18.02h-2.48V5.89s7.17,0,10.07,0c2.83,0,3.97,2.96,3.97,4.35,0,1.05,0,3.49-2.11,4.25l3.13,3.52h-2.9

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4243)
Category:	downloaded
Size (bytes):	4297
Entropy (8bit):	4.979927833929599
Encrypted:	false
SSDEEP:	96:kXN96dpCUN96h/N90Uho/u4mN96oSN8lN96ZA2rFBWFzQzgDj:s989m9t1f92C9rSrWNQzgDj
MD5:	31CAB6392D9858A0D55AB27356F58766
SHA1:	28626B0457205B5938A0A228B51AD8635149B4BC
SHA-256:	69A3659E1FC6376B556D104560C262B503773F593B25DB7FBF98D440B36432DF
SHA-512:	E42FF01AC1F04CF54D92E4F62BC53DBF059CE28F96C3FB7D179B7323A5C3E8D8DDC8C1D9C10DD20EEDF5908547C8D1C3CD3071E8F641FF1461031895AC0FC825
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-strategies.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.strategies=function(e,t,r){"use strict";try{self.workbox.v["workbox:strategies:3.3.1"]=1}catch(e){}class n{constructor(t={}){this.e=e.cacheNames.getRuntimeName(t.cacheName),this.t=t.plugins\|\|[],this.r=t.fetchOptions\|\|null}handle({event:e}){var t=this;return babelHelpers.asyncToGenerator(function(){return t.makeRequest({event:e,request:e.request})})()}makeRequest({event:e,request:r}){var n=this;return babelHelpers.asyncToGenerator(function(){"string"==typeof r&&(r=new Request(r));let s,i=yield t.cacheWrapper.match(n.e,r,null,n.t);if(!i)try{i=yield n.n(r,e)}catch(e){s=e}if(s)throw s;return i})()}n(e,n){var s=this;return babelHelpers.asyncToGenerator(function*(){const i=yield r.fetchWrapper.fetch(e,s.r,s.t),l=i.clone(),u=t.cacheWrapper.put(s.e,e,l,s.t);if(n)try{n.waitUntil(u)}catch(e){}return i})()}}class s{constructor(t={}){this.e=e.cacheNames.getRuntimeName(t.cacheName),this.t=t.plugins\|\|[]}handle({event:e}){var t=this;return babelHelpers.asy

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2658
Entropy (8bit):	4.317425609096277
Encrypted:	false
SSDEEP:	48:eB4m0+3+a4Za64XRm5zklPCvFmF1ZNLNAz6hd9iX/aDTIf+:k4mPD4462m5zGvFy+fZ
MD5:	FFFF113DF24BFE2FE6A752EC684A1113
SHA1:	AD092FAA7AE29EA3C823E06BBA3A75739FA5CFE8
SHA-256:	B9351C50D431E009777D5075585B568F7BF04F24C0E4100FA182C664E47AB58B
SHA-512:	E9BEAB7D286B33930AA3452487AE79D842B780F00E8CA670918EDD68484095D467F54318B940F1E071CD3845A1E85F7D56D856FCC6D223531DEBBD64E5EA5081
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/site-logo-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="194" height="38" viewBox="0 0 194 38" fill="none">.<path d="M99.6697 28.2592H95.9717L95.9809 9.59471C95.9809 9.57093 106.64 9.58679 110.958 9.60132C115.17 9.61585 116.872 14.1489 116.872 16.2984C116.872 17.9116 116.872 21.6744 113.736 22.8384L118.395 28.2592H114.005L109.974 23.3761H101.91L101.896 20.2184C101.896 20.2184 107.885 20.2158 110.243 20.2158C112.485 20.2158 113.159 17.9896 113.174 16.7344C113.2 14.4831 112.259 12.9373 110.064 12.9373C108.359 12.9373 99.671 12.9347 99.671 12.9347V28.2566L99.6697 28.2592Z" fill="#000000"></path>.<path d="M168.332 28.2599C168.332 28.2599 178.403 12.1282 179.62 10.2521C180.695 8.5953 182.039 8.50546 182.98 10.2521C183.92 11.9987 194 28.2599 194 28.2599H189.564L187.1 24.1299L177.037 24.1206L178.986 20.9167L185.38 20.926L181.29 14.3914L172.9 28.2599H168.332Z" fill="#000000"></path>.<path d="M146.087 28.2592H142.389L142.398 9.59471C142.398 9.57093 153.058 9.58679 157.375 9.60132C161.587 9.61585 163.289

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	4.334216606665652
Encrypted:	false
SSDEEP:	24:tYRUyKuOuXrRAl/23VOfaVXd9+QxhIeGDrNUqmK:gx7X1Al/oVwatlHXGmXK
MD5:	3928F80C6E12FB6D6F3F2D7E7D0EB5B4
SHA1:	CB7F85903C6466180D59D37349626F25200BC26A
SHA-256:	71FB99817EC0C12E5D13C7F0BE816FDB1F5D3229A4BBDABF377104B1EFB4916B
SHA-512:	06AF436538792069B96958625F3211A77D4A7CAEC608241012B9DF963DBFB0B172EBCB6E93AD1E91118827442EED060098611ED3E0CF1CC98661AD0AF21D5393
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.2234 0.257324H1.77187C0.792187 0.257324 0 1.03076 0 1.98701V22.5229C0 23.4792 0.792187 24.2573 1.77187 24.2573H22.2234C23.2031 24.2573 24 23.4792 24 22.5276V1.98701C24 1.03076 23.2031 0.257324 22.2234 0.257324ZM7.12031 20.7089H3.55781V9.25264H7.12031V20.7089ZM5.33906 7.6917C4.19531 7.6917 3.27188 6.76826 3.27188 5.6292C3.27188 4.49014 4.19531 3.5667 5.33906 3.5667C6.47813 3.5667 7.40156 4.49014 7.40156 5.6292C7.40156 6.76357 6.47813 7.6917 5.33906 7.6917ZM20.4516 20.7089H16.8937V15.1401C16.8937 13.8136 16.8703 12.1026 15.0422 12.1026C13.1906 12.1026 12.9094 13.5511 12.9094 15.0464V20.7089H9.35625V9.25264H12.7687V10.8183H12.8156C13.2891 9.91826 14.4516 8.9667 16.1813 8.9667C19.7859 8.9667 20.4516 11.3386 20.4516 14.4229V20.7089V20.7089Z" fill="#98A2B3"/>.</svg>.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1620
Entropy (8bit):	7.862661366180601
Encrypted:	false
SSDEEP:	48:VGVofBtcLd67Arw5hqoVXMBI10oEUjZr2L3LRgQIFXyty:BfBSLw7Arw5hXMBI3Zg7sXyty
MD5:	C92DEA106D45687A964ED4F1668B1D39
SHA1:	75861B10D9014737CAD701B09F144FD82C8949D9
SHA-256:	9AB43B9F6E980BDA32C33082783808D0BBB7951EC8BDDD8D9602BA5078BAA27C
SHA-512:	659CAF4958A05E407F0D544F8CF0E3211BDF83C1F94B9054EAA66761E526F522AF78A760164BC4C79D3665E60928082E560C251E76FB053CFE9BB3464FC596A3
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/icon-144x144.png
Preview:	RIFFL...WEBPVP8L@.../..#.&:.....o.m.m...\|...j.d.o....2.....Ngg.Io.66V.....Vg..:)3..S..Z'..c...'..u.....!..@0.h.m..m.m.m.a..e..1.........\|...l>_j..e.s..?...p?.....C..\..j:.u....~.k4.f..1.8.....qZsU<5..x...A.......6..V.>....?......1h.N.=...Y..I'..\|.....".Q....y.0..PxU..m...........n..p.....b.pCD.,..M..mgq5a......R..^..X..{.1.$..)..R5T..z...]..1.;^.A80..@u..u!..R..8..^/da...aZ.V.\..p.5J.....M.v[. ..vR...b1I..e...f@:+e.z}..@..l...+.....>`.....@t2...-.....j.\.-.K\|!s..;n.......QX xC..=-......W......V-...A........(...OM...}Y.V..3o..e.2.Y.".AZ......^.0..X..+...[...W.;a.\.....+U.J..cUB...3.\.N..gJx....a.TI.K.;=.k.N.....DF..T"..H..T..^.....~o9}....?.....n.H(.;.@..NG.".+v<.J.'....f3EN...,<...H.........h%...".;...J..."..Qr....Ka...!.9pH$.z?.i...R....o{\O.n.D.....#e...(....eQ...r..++V.,.R,5.x&.Vp.BJ..'C..t....d..B._.I.\Jfg#%....J.....%.0)../m.SJ.@''(....HH9I..bWfg-.b...L^n.R)..M....=...$Vp_..).rE..f3..?..K..v>.+.R.....si:U.."".z....S.....y..".Ok...:.k..P

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5519)
Category:	downloaded
Size (bytes):	5573
Entropy (8bit):	5.081125630159416
Encrypted:	false
SSDEEP:	96:ChKLs2sMeN68+Y+bb468haT6SFTOYUsK+FjcCJwGHjZNXB4e/X:BL0tWlb0i1q8HTXLX
MD5:	B21B3BCB62E90ED82BDB2190ECB848A3
SHA1:	E81B4D33E461901A0F0475E69415A879A97E5995
SHA-256:	634111D890C072681A097886002CBCD16899D40895AEECC0AF62101CD830EFEB
SHA-512:	4321E2B3D5556824AA0581B7190A86C67AF22EDA5070C9D969D48AEC790CA4DEDAE84C062C605B45C568EEEE23C93DCBC4276B248075DD20DA6B9795E8771FBD
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-precaching.prod.js
Preview:	this.workbox=this.workbox\|\|{},this.workbox.precaching=function(e,t,n,r,s){"use strict";try{self.workbox.v["workbox:precaching:3.3.1"]=1}catch(e){}class i{constructor(e,t,n,r){this.e=e,this.t=t,this.n=n;const s=new Request(t,{credentials:"same-origin"});this.r=s,this.s=r?this.i(s):s}i(e){let t=e.url;const n={credentials:"same-origin"};if("cache"in Request.prototype)n.cache="reload";else{const e=new URL(t,location),n=encodeURIComponent;e.search+=(e.search?"&":"")+n("_workbox-cache-bust")+"="+n(this.n),t=e.toString()}return new Request(t,n)}}const c="revision",o="url",l="precached-details-models";class a{constructor(t){const n=t.replace(/[^\w-]/g,"_");this.c=new e.DBWrapper(n,2,{onupgradeneeded:this.o})}o(e){const t=e.target.result;e.oldVersion<2&&(t.objectStoreNames.contains("workbox-precaching")&&t.deleteObjectStore("workbox-precaching"),t.objectStoreNames.contains(l)&&t.deleteObjectStore(l)),t.createObjectStore(l)}l(e,t){var n=this;return babelHelpers.asyncToGenerator(function*(){retur

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	760
Entropy (8bit):	4.715867651371347
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjidvyl8ODWmZtk7H5zNLCGXxLqBGZQcfHMxgOb5LFfPqI1VQ6hllo/:2diO4I1zecP9tkz5zNLRXxLqIZFHMxnC
MD5:	99A2AC4ED574E95D2B8F07A312B13171
SHA1:	6B8AC97D7208226608377E2714E79ABB34A578FA
SHA-256:	E3CEC87B98D94095C1ED4E01BD6DBAB91E29D2E7C35FAD710895F4B8EE8EC2A5
SHA-512:	41FD1E4BD793D287E4C24C9A0627D0DAE26F2DD021B800DC4DFE742177686E5DB8567AFCBFA6548AFE3FBA3F472DB97066E7581ABDC6A693D93E1C2393D58E32
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 15.75H3.45C3.02996 15.75 2.81994 15.75 2.65951 15.6683C2.51839 15.5964 2.40365 15.4816 2.33175 15.3405C2.25 15.1801 2.25 14.97 2.25 14.55V2.25M15.75 5.25L11.6743 9.32574C11.5258 9.47424 11.4515 9.5485 11.3659 9.57632C11.2906 9.60079 11.2094 9.60079 11.1341 9.57632C11.0485 9.5485 10.9742 9.47424 10.8257 9.32574L9.42426 7.92426C9.27576 7.77576 9.2015 7.7015 9.11588 7.67368C9.04057 7.64921 8.95943 7.64921 8.88412 7.67368C8.7985 7.7015 8.72424 7.77576 8.57574 7.92426L5.25 11.25M15.75 5.25H12.75M15.75 5.25V8.25" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1107
Entropy (8bit):	4.8183362266611995
Encrypted:	false
SSDEEP:	24:2diO4I1zyLkw4vzmgMkM9JwT6fba2aQl5WpUGjvH0yrQnhllor7Ixh:c31egLIwkGHKWpUGDU3
MD5:	333BA1DD96D80DDAA7594378BF14449F
SHA1:	6283B2E0C869D17F383193B33177ABC3B143B8E8
SHA-256:	56A8B7CECC1D30DC3C035C54DB5CAAB1E57BBDAF62EBF029498F5FB7F6A41C7F
SHA-512:	BF5B66D66D5114866D21B1D36FB692669BAD2F7AF4E02F8AAC8CB4719F72F28E22E6834E8ABE8CF5A78D71F10B171EF52724C688330349C5355965B214CDA021
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/create-icons-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_272_2238)"><path d="M1.5 8.99968L8.73167 12.6155C8.83006 12.6647 8.87925 12.6893 8.93085 12.699C8.97655 12.7076 9.02345 12.7076 9.06915 12.699C9.12075 12.6893 9.16994 12.6647 9.26833 12.6155L16.5 8.99968M1.5 12.7497L8.73167 16.3655C8.83006 16.4147 8.87925 16.4393 8.93085 16.449C8.97655 16.4576 9.02345 16.4576 9.06915 16.449C9.12075 16.4393 9.16994 16.4147 9.26833 16.3655L16.5 12.7497M1.5 5.24968L8.73167 1.63385C8.83006 1.58465 8.87925 1.56006 8.93085 1.55038C8.97655 1.5418 9.02345 1.5418 9.06915 1.55038C9.12075 1.56006 9.16994 1.58465 9.26833 1.63385L16.5 5.24968L9.26833 8.86552C9.16994 8.91471 9.12075 8.93931 9.06915 8.94899C9.02345 8.95756 8.97655 8.95756 8.93085 8.94899C8.87925 8.93931 8.83006 8.91471 8.73167 8.86552L1.5 5.24968Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><de

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4815), with no line terminators
Category:	downloaded
Size (bytes):	4815
Entropy (8bit):	5.145011640514708
Encrypted:	false
SSDEEP:	48:JntrXvwVxTQl4gGZh/H/yhaDX2MxmQEDqNEBDJqzBA6XDG2JzzO6DJ1zNBDJS669:p1IHQ+zLDfTlalElAZqCOG4vAgYQw
MD5:	8BAB30715931D06D174B378652BE2347
SHA1:	EAC7F02A197B0C8ECCE39FB3613BBA97363B6F5C
SHA-256:	127B18100F391519107151277A6DEB3A77F422AA752B38E1293EDEFA9E453AB6
SHA-512:	8D74510DC706A294794BAC5F9EBD48871D83E3E2A6B8BC9DCE6AD27D2B06F4B6432A6AFE8D3DAD9827A7B3172D14AD474B40A9FD0FE94AB5D5C57B602A97C10D
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/slidingpanel/index.js?ver=2.8.1
Preview:	"use strict";function GSPBtoggleBgScroll(e){"block"!=e&&"modal"!=e&&document.body.classList.toggle("scrollhidden")}function GSPBtogglemodaldialog(e,t,l="toggle"){"modal"==t&&(e.open&&"toggle"==l\|\|"close"==l?e.close():e.showModal())}function GSPBSlidingPanelInit(e=document){let t=e.getElementsByClassName("gspb_button_wrapper");for(let l=0;l<t.length;l++){let a=t[l],i=a.dataset.paneltype;if(void 0===i)continue;let o=a.getAttribute("id"),n=a.querySelector(".gspb_slidingPanel"),s=n.dataset.hover,c=document.documentElement.clientWidth,d=n.dataset.autotrigger,g=n.dataset.closeintent,r=n.dataset.closeintentonce,v=n.dataset.autotriggertime,p=n.dataset.placebody,u=n.dataset.clickselector,S=n.dataset.closeselector,f=n.dataset.dynamicbefore,L=n.dataset.dynamicafter,y=a.querySelector('[data-panelid="'+o+'"]');y\|\|(y=e.querySelector('[data-panelid="'+o+'"]'));let m=a.querySelector(".gspb_slidingPanel-close"),B=a.querySelectorAll(".gspb-custom-close");if(S&&(B=e.querySelectorAll(S)),f\|\|L){let k=y.que

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.345350936622435
Encrypted:	false
SSDEEP:	3:inEL0XHWSbUMqQk44:iVHpUy34
MD5:	B3AC86D51733487DFE45EA5702E0A6EB
SHA1:	C261CFDB08D9C036B99FC5A861F21344E2470405
SHA-256:	DCBB7088774921CE6A57A36B71F516F185EDF4FEDAD71AF4F9EDA9257CD7BED7
SHA-512:	5DDD18C78CE47FB7269F5CA041E4EE2C0CD4BBAFB2F19EF3B720110B7634D439E1355C8A303D0347834281A35A9A7CA64E279D1C0CB8FEA06C0F56FB6EF92D3D
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/client_data/66b94c3956d211b6960655d3/JdMceozg.json
Preview:	[{"targetBanner":1827814,"condition":"all"}]

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1345
Entropy (8bit):	4.076100760801318
Encrypted:	false
SSDEEP:	24:tLNTuyGMB/XDJLdrqb0mquXWDUvBDgdh+x8TTetHFXOQNgtciEW6jpuu9tt8:fTBbJLdEIuX4G8ete+iEV1uu9w
MD5:	463A29230026F25D47804E96C507F787
SHA1:	F50E0EAC87BB8F5CFF8F7D8CCB5D72AEDDA7E78D
SHA-256:	A049E1ABE441835A2BCF35258936072189A0A52D0000C4ED2094E59D2AFD189B
SHA-512:	83F065B7B10E906EF8BF40DD907DA4F0EB0F4C28EE2D8B44E418B15F1C06884A579957B2BC27418FAC5759825D394819FF0AC48D784B9F05564B8EDAB25D9426
Malicious:	false
Reputation:	low
Preview:	<svg width="10" height="10" viewBox="0 0 10 10" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0.572899 0.00327209C0.459691 0.00320032 0.349006 0.036716 0.254854 0.0995771C0.160701 0.162438 0.0873146 0.251818 0.0439819 0.356405C0.000649228 0.460992 -0.0106814 0.576084 0.0114242 0.687113C0.0335299 0.798142 0.0880779 0.900118 0.168164 0.980132L4.18928 5L0.168164 9.01987C0.0604905 9.12754 0 9.27358 0 9.42585C0 9.57812 0.0604905 9.72416 0.168164 9.83184C0.275838 9.93951 0.421875 10 0.574148 10C0.726422 10 0.872459 9.93951 0.980133 9.83184L5.00125 5.81197L9.02237 9.83184C9.13023 9.93836 9.2755 9.99844 9.4271 9.99923C9.5023 9.99958 9.57681 9.98497 9.6463 9.95623C9.71579 9.92749 9.77886 9.8852 9.83184 9.83184C9.93924 9.72402 9.99955 9.57804 9.99955 9.42585C9.99955 9.27367 9.93924 9.12768 9.83184 9.01987L5.81072 5L9.83184 0.980132C9.88515 0.926818 9.92744 0.863524 9.9563 0.793865C9.98515 0.724206 10 0.649547 10 0.574148C10 0.49875 9.98515 0.42409 9.9563 0.354431C9.92744 0.284772 9.8

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1045)
Category:	dropped
Size (bytes):	151029
Entropy (8bit):	5.196998970957246
Encrypted:	false
SSDEEP:	1536:PCGQSUj5/evrufbfy31B+rkrc5I6SW7ZNrBVLfk4riEPqYiX+kNEmI/197K9dWRi:avSIbYM5I2D/Pbl597gxg7XkBN2/LY
MD5:	2B0FB78CA0FC72BA89765B9E81A7C364
SHA1:	6F572323AACF91F48844A2CAFB130455AD5D5220
SHA-256:	6CE9F981879E508E66E5F18E12AA760229D3331D06CE1EDBCBA6B820D947FA8F
SHA-512:	EEC2BFF94EE88ACBB4B7E0AECF292E938314FC0CFC20BE1310C0096D298D07F82AC80DC671344886EAEF4A18A605A1309B94D35D250EC8494C4AA7B29D8DC8CD
Malicious:	false
Reputation:	low
Preview:	/. jQuery JavaScript Library v1.8.3. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright 2012 jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: Tue Nov 13 2012 08:20:33 GMT-0500 (Eastern Standard Time). Sizzle CSS Selector Engine. Copyright 2012 jQuery Foundation and other contributors. Released under the MIT license. http://sizzlejs.com/./.(function(window,undefined){var rootjQuery,readyList,document=window.document,location=window.location,navigator=window.navigator,_jQuery=window.jQuery,_$=window.$,core_push=Array.prototype.push,core_slice=Array.prototype.slice,core_indexOf=Array.prototype.indexOf,core_toString=Object.prototype.toString,core_hasOwn=Object.prototype.hasOwnProperty,core_trim=String.prototype.trim,jQuery=function(selector,context){return new jQuery.fn.init(selector,context,rootjQuery)},core_pnum=/[\-+]?(?:\d*\.\|)\d+(?:[eE][\-+]?\d+\|)/.source,. core_rnotwhite=/\S/,core_rspace=/\s+/,rtri

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	751
Entropy (8bit):	4.743570531722352
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjK7yWcqTRS8CNQ1INQ4ak8TB2uVOSqjdSWJW4Lr36xRQjCuW+QCAFE:2diO4I1zUFcmRS8CNQtvk7SqhSmW4n3R
MD5:	979421E4152D0823941A6CF03CF2DED6
SHA1:	2DC52078B81E8686D14C50E76585E7502736CD74
SHA-256:	2DFCE3F2D7D8B23D0C6826D1E4D8868E8351B9C24826EC94E6A7C1519580D73A
SHA-512:	9B0DFB26FCBA27E53ED25D7EEB4AD0628F8CB3BE0383B9469A32DE87F7A00F6C022C8CBB63A91C85501D42A36C76A94B7DE0EAA0218BA4E57D964BD0781056F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.75 13.875H11.25M5.25 11.25H12.75M3.75 1.5H14.25C15.0784 1.5 15.75 2.24619 15.75 3.16667V14.8333C15.75 15.7538 15.0784 16.5 14.25 16.5H3.75C2.92157 16.5 2.25 15.7538 2.25 14.8333V3.16667C2.25 2.24619 2.92157 1.5 3.75 1.5ZM8.9982 4.65895C8.47337 4.0746 7.59818 3.91741 6.94061 4.4525C6.28303 4.9876 6.19045 5.88224 6.70685 6.5151C7.22325 7.14796 8.9982 8.625 8.9982 8.625C8.9982 8.625 10.7732 7.14796 11.2896 6.5151C11.806 5.88224 11.7247 4.98197 11.0558 4.4525C10.3869 3.92304 9.52303 4.0746 8.9982 4.65895Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16325)
Category:	dropped
Size (bytes):	394194
Entropy (8bit):	5.647933918217134
Encrypted:	false
SSDEEP:	6144:S4UGhFh0GLgB4doEUzWRSR9cM8rT/Q29WUZ9Or24Av+:bUkFhJc4doEOsWmYL
MD5:	7BF0AE4835C8260A6248705759F28382
SHA1:	7A0C4166C0EFC96972B62234A2B52A00A68CB620
SHA-256:	BD54A5E50B43DC50BECB5582CB78AE3615816AA03181B612E620B5DD04EABF49
SHA-512:	B8204472A37F237DA701E21FD267C08FD04591408E5E7CC4FC9091D476C45E5A715C0355277E4C049B558468C6B9311700D0DAFFEDB726A8663D527CFF25D606
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"12",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":23,"vtp_rules":["list","(home\|kartra\|blog)(\\.\|^)kartra\\.com","^genndi\\.com$"],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":13,"vtp_includeConditions":["list","app\\.vwo\\.com","(home\|kartra\|blog)(\\.\|^)kartra\\.com","paypal\\.com","clients\\.outleased\\.com","stripe\\.com","genndi\\.com","account\\.microsoft\\.com","accounts\\.google\\.com"],"tag_id":10},{"function":"__ogt_ip_mark","priority":13,"vtp_instanceOrder":0,"vtp_paramValue":"all_ips","vtp_ruleResult":["macro",1],"tag_id":12},{"function":"__ogt_1p_data_v2","priority":13,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1363
Entropy (8bit):	4.629692334366582
Encrypted:	false
SSDEEP:	24:2diO4I1zy/CTrkSfm5HkjuyesetePBxtdvWzjPVCmKKzjQnhlloyIxh:c31DwSu8ulbtexWVCXw
MD5:	479B6999C89EE7ACB726A3ACBB3B01FA
SHA1:	B4B4F6121955ECE106E4FE45B212B4E5C954B1D1
SHA-256:	5ED12ED53A6A6538E664A430404CD0656BE17063D12D9D433BAB78B0F43AF5F5
SHA-512:	B0DABCD7F0117FE2371C701ABD5B685C39CACC6CC0BD9AFCDC66465CEA4669EF4C4E1C236532DD2C0C38D6D52F5D1F46BE0D54FA73EAFFE84A0BD75C9AC82162
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_332_3293)"><path d="M3.7501 10.5H13.6019C14.3615 10.5 14.7413 10.5 15.0437 10.3584C15.31 10.2336 15.5338 10.0333 15.6872 9.78237C15.8614 9.49749 15.9033 9.12 15.9872 8.36504L16.426 4.41626C16.4516 4.18566 16.4644 4.07036 16.4273 3.98112C16.3948 3.90274 16.3366 3.83773 16.2623 3.79671C16.1777 3.75 16.0617 3.75 15.8296 3.75H3.3751M1.5 1.5H2.43633C2.6348 1.5 2.73403 1.5 2.81167 1.53774C2.88001 1.57097 2.93665 1.62418 2.97408 1.69032C3.01659 1.76545 3.02278 1.86449 3.03516 2.06257L3.71484 12.9374C3.72722 13.1355 3.73341 13.2345 3.77592 13.3097C3.81335 13.3758 3.86999 13.429 3.93833 13.4623C4.01597 13.5 4.1152 13.5 4.31367 13.5H14.25M5.625 16.125H5.6325M12.375 16.125H12.3825M6 16.125C6 16.3321 5.83211 16.5 5.625 16.5C5.41789 16.5 5.25 16.3321 5.25 16.125C5.25 15.9179 5.41789 15.75 5.625 15.75C5.83211 15.75 6 15.9179 6 16.125ZM12.75 16

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	71032
Entropy (8bit):	5.247249590284999
Encrypted:	false
SSDEEP:	768:yiCUrPee6tfe6NkWY8gnaLysnIntnvZYIn/bRrkrurddMBJb8:/ZWe6Re6NkDGO5l
MD5:	0BC12FE7E3D6EF28DAE108484772D83C
SHA1:	254AE898AE6077C07494C844775E8BF3F2528E23
SHA-256:	A4D3B59BED3158BD1FC5B07B24FB367517085205489BF416938F9E283BD14B05
SHA-512:	C07680753C6BEFEC36413CA89AB8D068E5182676647E2E3F534FA1CB4471A2780A6E5E1F7ACC7AC6F8EAECB98D4CE789E3B1CAE4733721685585203185C22C2A
Malicious:	false
Reputation:	low
Preview:	{"uid":1209022,"dkey":"a62067571befec0b45364445f5fea582","updated_at":1730969365,"version":"11.5.306","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9022/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0120/9022/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0120/9022/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"2e2817beb52fdd74a35b56c31b5eeab4cd42abcca158076627358a93364b8594","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.cr

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20497), with no line terminators
Category:	downloaded
Size (bytes):	20497
Entropy (8bit):	5.4068617560011765
Encrypted:	false
SSDEEP:	384:VyP9GRmPA0s+xigucsnGDEk44rCj/f1v+nudQaAWrreJvj/ala0kJo0kMDcQhD3I:VyP9aT0sEinTrx4rCjn5JaaprreJvj/2
MD5:	0012FA2756BCC69A84C08B868B197330
SHA1:	46DE9B6FA5337AF9B7FFF7CCC9F99ACFEF364D7C
SHA-256:	7701282EA59743A1D336EE5EDE4E6805CA9572C28AD013FA956FB39F18DE0D69
SHA-512:	A02498C0B5CA87B70E049FB7D7B6CCCD75DB0A7102CF6AC97967B25DCA8BDF92765185CEFBA0CF37F7371F8B04FE6B572C5CDCDBF83BAA73208D486CCA240897
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/5fc42c93de2eab0609c4aca20003d15e.js
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[202,848],{9948:(e,t,r)=>{"use strict";r.r(t),r.d(t,{pageState:()=>O});const n={tagsOfIgnoredDocHeadElements:["script","noscript"],tagsOfIgnoredDocBodyElements:["script","meta","noscript"]};var s=r(5512),a=r.n(s);function o(){return a()('/! For license information please see diff.worker.worker.js.LICENSE.txt /\n(()=>{var e={22:()=>{!function(e){var t=e.CE2BH={};function r(){return t.extends=r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.defineProperty=function(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e},t.extends=r,t.objectWithoutPropertiesLoose=function(e,t){if(null==e)return{};var r,n,s={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0\|\|(s[r]=e[r]);return s}}("undefined"==type

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	751
Entropy (8bit):	5.103411845122469
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zo5SgxhjFQZMhkVOI1VQ6hlloiByZFN1FhQB7FgYRF97F3I1VQ6hllv:2diO4I1zyPoOOOQnhlloP9XI7SYRz7Fc
MD5:	2B7DB142C5347B62586288FF5788E5BC
SHA1:	4DA2F323CFDFA95059FEB512B5826905278C903F
SHA-256:	8E49BD260AA424BB7F0BC5B24E36A1A8B6979BFB41FFE39E9263745ACA514268
SHA-512:	EBC2D54BD3A4F6709ACE9F1201022E1372B2E7687293CF11BD4C11BCD4BDC45587ADF08311AA9F7D5A079529FACCAFB7F47613EED337AE8122B2F97BF48FB691
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/intersect-circle1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_952_6136)"><path d="M6.75 12C9.6495 12 12 9.6495 12 6.75C12 3.8505 9.6495 1.5 6.75 1.5C3.8505 1.5 1.5 3.8505 1.5 6.75C1.5 9.6495 3.8505 12 6.75 12Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path><path d="M11.25 16.5C14.1495 16.5 16.5 14.1495 16.5 11.25C16.5 8.3505 14.1495 6 11.25 6C8.3505 6 6 8.3505 6 11.25C6 14.1495 8.3505 16.5 11.25 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_952_6136"><rect width="18" height="18" fill="white"></rect></clipPath></defs></svg>

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1363
Entropy (8bit):	4.629692334366582
Encrypted:	false
SSDEEP:	24:2diO4I1zy/CTrkSfm5HkjuyesetePBxtdvWzjPVCmKKzjQnhlloyIxh:c31DwSu8ulbtexWVCXw
MD5:	479B6999C89EE7ACB726A3ACBB3B01FA
SHA1:	B4B4F6121955ECE106E4FE45B212B4E5C954B1D1
SHA-256:	5ED12ED53A6A6538E664A430404CD0656BE17063D12D9D433BAB78B0F43AF5F5
SHA-512:	B0DABCD7F0117FE2371C701ABD5B685C39CACC6CC0BD9AFCDC66465CEA4669EF4C4E1C236532DD2C0C38D6D52F5D1F46BE0D54FA73EAFFE84A0BD75C9AC82162
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/market-icon-2.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_332_3293)"><path d="M3.7501 10.5H13.6019C14.3615 10.5 14.7413 10.5 15.0437 10.3584C15.31 10.2336 15.5338 10.0333 15.6872 9.78237C15.8614 9.49749 15.9033 9.12 15.9872 8.36504L16.426 4.41626C16.4516 4.18566 16.4644 4.07036 16.4273 3.98112C16.3948 3.90274 16.3366 3.83773 16.2623 3.79671C16.1777 3.75 16.0617 3.75 15.8296 3.75H3.3751M1.5 1.5H2.43633C2.6348 1.5 2.73403 1.5 2.81167 1.53774C2.88001 1.57097 2.93665 1.62418 2.97408 1.69032C3.01659 1.76545 3.02278 1.86449 3.03516 2.06257L3.71484 12.9374C3.72722 13.1355 3.73341 13.2345 3.77592 13.3097C3.81335 13.3758 3.86999 13.429 3.93833 13.4623C4.01597 13.5 4.1152 13.5 4.31367 13.5H14.25M5.625 16.125H5.6325M12.375 16.125H12.3825M6 16.125C6 16.3321 5.83211 16.5 5.625 16.5C5.41789 16.5 5.25 16.3321 5.25 16.125C5.25 15.9179 5.41789 15.75 5.625 15.75C5.83211 15.75 6 15.9179 6 16.125ZM12.75 16

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44
Entropy (8bit):	4.345350936622435
Encrypted:	false
SSDEEP:	3:inEL0XHWSbUMqQk44:iVHpUy34
MD5:	B3AC86D51733487DFE45EA5702E0A6EB
SHA1:	C261CFDB08D9C036B99FC5A861F21344E2470405
SHA-256:	DCBB7088774921CE6A57A36B71F516F185EDF4FEDAD71AF4F9EDA9257CD7BED7
SHA-512:	5DDD18C78CE47FB7269F5CA041E4EE2C0CD4BBAFB2F19EF3B720110B7634D439E1355C8A303D0347834281A35A9A7CA64E279D1C0CB8FEA06C0F56FB6EF92D3D
Malicious:	false
Reputation:	low
Preview:	[{"targetBanner":1827814,"condition":"all"}]

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	dropped
Size (bytes):	26750
Entropy (8bit):	4.727780395143468
Encrypted:	false
SSDEEP:	768:5vTZ1WqxHiJt0Ts2NHKVxSXiE4jsxLp1u4p5mDo:5VXOo
MD5:	69958763DF4C5711F170CF28E80D1BE9
SHA1:	CF4A68B627494F08AFFCD4C9648F462036FEFE72
SHA-256:	7E569E5066B9C856D887C6ABD9D37505455E266553EA0E0552F48D6949BEF7D6
SHA-512:	B7A754FE1BCE913F1B7CAFC120CA68A17027B7D15B469DF6F650A88398836650D8546921A156B7D5CE8ED58AE19C95F95BB18558938296DD4CCA0642330B393E
Malicious:	false
Reputation:	low
Preview:	(function(window){. var replaceUrl = false;. var url = new URL(window.location.href);. var searchParams = new URLSearchParams(url.search);.. if ('undefined' === typeof window.kuuid) {. setUuidParam();. }.. if ('undefined' === typeof window.kll) {. setKllParam();. }.. if ('undefined' === typeof window.kref) {. setKrefParam();. }.. setKaffParam();.. if (replaceUrl) {. window.history.replaceState(. null,. null,. url.toString(). );. }.. function getCookie(name) {. var cookieRegex = '(?:(?:^\|.; )' + name + ' = ([^;]).$)\|^.$';. var cookie = document.cookie.match(cookieRegex)[1];.. if (cookie) {. return decodeURIComponent(cookie);. }. }.. function setCookie(name, value, options) {. if (options && options.days) {. options['max-age'] = options.days 60 * 60 * 24;.. delete options.days;. }.. var

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	458216
Entropy (8bit):	6.016619791208685
Encrypted:	false
SSDEEP:	3072:ifO0xHkYhzAJr4NZyioGOIZMjH2+efuLrvni38VzIzxWNaWItfyiRiFpryMw7n:EO0p9hz+O5oLIZM6eMYslcaWIwi2ByMq
MD5:	59950E034101FB76409EE46BF50EA8C4
SHA1:	276171FE2428B0C531C8F296D8725203CF0344F2
SHA-256:	2875B023B00938C38F0A19DB3F41BC5F35A6723C0A8A608213F5402984920917
SHA-512:	4CF3CE252854658FC87AED84830699850B69E881AFB54D938E96A79F4044CA701EE17057871F8A1708A473BC48D2370013A3DE2937C5D274307B4BFE77472A2C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/2024-KARTRA-DEMO-VIDEO-v001b.mp4:2f84e58f5b10f3:0
Preview:	....ftypmp42....mp42mp41..h+moov...lmvhd.....>..>..._..I..................................................@..................................]trak...\tkhd.....>..>..........I..................................................@........8.....$edts....elst.........I..............mdia... mdhd.....>..>...u0...........@hdlr........vide.............Mainconcept Video Media Handler...mminf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H.........AVC Coding............................0avcC.M@)....gM@).R...O.5...@...@.:.!...h..5 ....stts..........1........(stsc...................................stsz..........1............2.......$.......................................Z...................................b...........h...Z...W..'................a...............n...........5...@...............G...&.......".......\...........................H..2l...........................

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 973, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	690892
Entropy (8bit):	7.997290650396581
Encrypted:	true
SSDEEP:	12288:F8Mzv2vbiLhFqUFWgie1D8fVRH8ZgNVqtEvnLigk6FF60Q/b3Yn313k4hDXZ:hzv2ghVWgP1DIVRHUE/Ligkf0r3JkIDp
MD5:	A7EC070210EDBFA8EC7916CFCFE567DB
SHA1:	244E3ACD39F43B8D97AD413CB14E8F30BED0E825
SHA-256:	A43932714E415EF93D0972022D451D4F983B1DD19ADC94628E2F189CE20EA055
SHA-512:	40F5F7BA539ED0ADF79797BBF2272484ECE6087FD27F8CF84BA6BCCB28C0FFE88B03F51EFE0099193481DAEEC318DB8F7A2F4654C0BF05069009C0BD490A2A42
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............I.0....sRGB.........gAMA......a....vIDATx..k..0..9...z..`.^s..7...d)v.....A.!Qt.......@.d..P....d..D....!`!........CER.+..9....Y!.:... .K..7..F..>............Ph......d.)..:.h:..W...'}eg.!....+..t .."8B..e.1U.....[9..X... B.o.1.p..;c.....$@....nc.....b=.M..1.F.O....C.b..JH...&(....2./8..]:?........d)....Po6.......S.ho%.9..WR.p..\|.s\|HyA.6F..t.mp1^....kHZ.g.F..v.j...b..q0e..)..(.O.....#:{...i....V..mo/....{.df..^..fMx......P.".;.`W.......@..X){p5.......Bu..q....g.b.....W..erW/g.[..`........u..........u...=....+4sF..P...QI..5...L..)7.....<.....0..B.......H..S.....%..+i....`.o...-........w&N:.x......vH..>uE.b.$.......,..q.;........../.....$.?...y.~..\|nG....3.v...0.f..w..?...K....I.'..5p.@..QW.e+........@.O.........2.y...."..%$..H@V.Q...A...A...X.w. ..{E.P.c.....$\|.Z....j...9.87.. .........V...].R9.zE.D..".r..U.^..h.-.....2.v...............X8..WGD.....V...t.l.hkM..l.B.C..-C/% ..D.L..W..x...Wh...l..*(!2."..pg...

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	37740
Entropy (8bit):	7.962615802741316
Encrypted:	false
SSDEEP:	768:BnrxXDJTmA8zx5LFEWj362RiLUs7l1zBYzs9LhISL:BnFhb+xq2RQ/l1zBYo9LhT
MD5:	1CFD0F65CEE82FAFB7D2C2F43ADF1E99
SHA1:	AE30B9628C52DF048B30A3B67B17E0325CED016C
SHA-256:	EF0DAD0F5C0E18F84DF2437F833D8A8A4A032A5F1C18BBE749273BC6CFF866CC
SHA-512:	07A5C1EF12FBC6A06419A00BCF45A8BD5B03E2089D9E46396AD8BA683E550F6EC5CDFB6768107F9CC439239BD2BE6EFA48420CC2A6D30DB39FEF8F4C502AEF92
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............8........................................................................\|..q.Z43Y@.B..4.b.&3.\|.......b..4.\{.x..<.......f.n.p..`p..HG.pW...,^..,0x..8.N.X!....f......s......;.p....r.\|m.1....4..-ni.O....,-.<aa....n.`.gp.gpn..b..x.p1#.;...../.3..X4C.]...9.@.......KB.s].....o].F.{5..4...;....#..#..0.X}.]......88=...P.f............`.O,\.".........t...{.Q.]..H1....../f...c..@0...3..E.b..,3..n....vn..p.p...C08CR: ..._.p(p9k.P.y`.^..\|@..vv............wP.c..A....{...?5..k.r...\..f7x..x....w..{..w..\8 ........${...+.P.........../.;.o..i..(hR.u.U...A..7..{q..R,2cE.Y..9..z....a..f.ov..f`.....b.W. ... ..Ac>w+....@.h.........}.7.o.4...xV.{..9.*....7.......>c..s...."`...X\g.}.%.Y.;....8<"..n.-`")Y.D.....V....-..h(V.V.'1\!...t.....s......T<_O5.CF....=.....`....b..3..%.E......:.\.P....U...Z.J..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37003)
Category:	downloaded
Size (bytes):	380446
Entropy (8bit):	5.566521042656294
Encrypted:	false
SSDEEP:	3072:1SVBXwpr27wizDGbETIdodn0Q5mptcY0/H8+ARPrOS2WrDmKD0C8rT/ka9lyK:1S3XWr2VGbgIdoncz1iSRx0C8rT/ZlZ
MD5:	F204193BF09333D89999EF834CB7DC1D
SHA1:	552EEE9C20B6C47E983311ABF09740343EB5BB6C
SHA-256:	2858E1C75684BA04FFAEB99CC498FC3A80F164B462057E5F881929F0CE12B495
SHA-512:	6B4353F5ECB5A7D15FED52514E70A8C0E29375C3A3020D22117B5159FDB75BF1C5970922770773CB93499E7171B52FC32F8D0EB369DAD436AB6E975E3ECA9818
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W78XJT7
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"315",. . "macros":[{"function":"__k","vtp_decodeCookie":false,"vtp_name":"unique_id"},{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"QUERY","vtp_queryKey":"pro","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){var a=(new Date).toISOString().split(\".\")[0].replace(\/\\-\|T\|:\|\/g,\"\");return a+",["escape",["macro",3],8,16],"})();"]},{"function":"__e"},{"function":"__jsm","vtp_javascript":["template","(function(){var a=JSON.parse(localStorage.getItem(\"params\"));return null!==a\|\|void 0!==a\|\|void 0!==typeOf(a)?a:\"empty\"})();"]},{"function":"__k","convert_null_to":"empty","convert_undefined_to":

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2068
Entropy (8bit):	4.227714269192936
Encrypted:	false
SSDEEP:	48:c31JWfGMQDmN0HHKT6CyqNwh6kO6mN3brMjv:A0GMQDmiKpyRpmyjv
MD5:	732B4DA6951E0585C452E0A174D59FBC
SHA1:	FA2BE9BFD7021C9DEF7A9E67DD8F6FB43DF25FC2
SHA-256:	B1F7CFCA902AB73D0E959F4A344E17AE5D5A946A8DDF96A466840DBB628F16F3
SHA-512:	A6ECF6F05C222AE8A08FEDABB587A530BF1DAF3F1AAE26A7E2C279EC71A28B8FAEC951BF516FB68A992AE93D1FBE374C37AF809E00DB8E50B5D78C76B25217D7
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/04/ai-nav-stroke.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.29664 3.9832C6.43279 3.60196 7.14567 3.60196 7.28182 3.98319C7.6018 4.87915 8.07867 5.92371 8.71534 6.56038C9.35201 7.19704 10.3966 7.67391 11.2925 7.99389C11.6738 8.13004 11.6738 8.84292 11.2925 8.97907C10.3966 9.29905 9.35201 9.77592 8.71534 10.4126C8.07867 11.0492 7.6018 12.0938 7.28182 12.9898C7.14567 13.371 6.43279 13.371 6.29664 12.9898C5.97666 12.0938 5.49979 11.0492 4.86312 10.4126C4.22646 9.77592 3.18189 9.29905 2.28593 8.97907C1.90469 8.84292 1.90469 8.13004 2.28593 7.99389C3.18189 7.67391 4.22646 7.19704 4.86312 6.56038C5.49979 5.92371 5.97666 4.87915 6.29664 3.9832Z" stroke="#364152" stroke-width="1.13"></path><path d="M13.1554 1.64127C13.2287 1.43598 13.6125 1.43598 13.6859 1.64127C13.8582 2.1237 14.1149 2.68616 14.4577 3.02898C14.8006 3.3718 15.363 3.62858 15.8455 3.80087C16.0508 3.87419 16.0508 4.25804 15.8455 4.33135C15.363 4.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13608
Entropy (8bit):	7.980979495611477
Encrypted:	false
SSDEEP:	384:1/dtcuCeTy3OnSwVbokO7ILSNSsjo9806K:dTpe+jolKqjo9Ld
MD5:	7446E72078790266445FA9F47A0E809B
SHA1:	622C00D061A3393D1C56536A76C91E053205FF96
SHA-256:	5F73A04FD054064001632292F600B2655FE5FB8DC7F57F499F6080D95C21532F
SHA-512:	0D748C7BD9D8F053778E2ED4B38CE65F58CBA7DCE8ECA3AB774E4FE33587238FB9FC00756F935CCB0BC6581901E846AED51D77708AAE4D9E1FB2DFCBF18A9E43
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-ui-4.png
Preview:	RIFF 5..WEBPVP8L.5../..@.U..$Ir.Yo..k.wDL......,:..YBf.3.rM...$.P..B./8.V..Y.7.l...)H....op.q.>.(.\|h..y.xg\|......u.P.$9...F.j..5.hS....h......1..13333..n..L3..u.S.{.9....u......u..n..8d...S.2\......3......kf.YK....V.o....]=....3.d.R..5......RK.1..x3G.f...h..^..H..f...b.....k,.[...f....(....Z.n.t.g.Z...f..lG..LX.l5.......`Tf.%.....{M1v..2.=.].`....r.m[..g...=%....X..l.jh...Y.w.........y.V......../...1../..Rf....2}.....8..d.m...p.?..U.......Oe....l..mc.l;l.K?.=..iA..._;.....b.L..E..{{..v.S....k..P.V...]......_..-...c......}.c9..;d......I.#...:...t$b..M...I..@6!...`2.....X....H-...p..+ w.\v.P9......d..l..N...3>.......X.F.v6...B.<..`H.m......Sc.......k!.}W.e.V.j..AJ..(n..E.bff...ea~........>.O..0......^.I..q..d9b.6.h su.v.7...W;..afffffffffffffff.33s...99i.....c..f;..m.....(.`.u......u0Zh..X....>..K&..P......K.e.1P.]E@5.J....P.. ..Zh.......`..Q1..E..b.q.0.........3V....is...(#.w.F."...G.._.B......g...E\|.HE..l!.~.!.......(w.#...2.H~.....

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3762
Entropy (8bit):	4.223382825340393
Encrypted:	false
SSDEEP:	48:AS4+TV9xyBfWGlUiy7YcDUjtRv1bk4JvxnXUwouaxLigXGgDOi9i30NJ1Ur6AnZb:5TYmi/cIL1Y6JXZoXLNS7381UFZ0qf
MD5:	2E4DF113EDE6D5CE8DE2DC1338A3890E
SHA1:	3AF1721CA29F4ADA0CD422206C253CF8EE52781A
SHA-256:	911F58B8D14BD6F73A83FD774E44BEC97E896317C7093DC83E96921E64F1FBD5
SHA-512:	12C975049692F337FCED697963359F535B7D08B4B230447CBA37B6E5C8C1FD31E8F26329A315454C83E51CA41787737428E3932979156E205CF0FEAADDE8FB97
Malicious:	false
Reputation:	low
URL:	https://cdn-cookieyes.com/assets/images/poweredbtcky.svg
Preview:	<svg width="78" height="13" viewBox="0 0 78 13" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.48703 1.81738C8.08615 1.81738 10.0289 3.20915 10.659 5.48658H7.74485C7.29854 4.5756 6.45842 4.14542 5.46078 4.14542C3.83304 4.14542 2.70413 5.30944 2.70413 7.182C2.70413 9.05455 3.83304 10.2186 5.46078 10.2186C6.45842 10.2186 7.29854 9.76309 7.74485 8.87742H10.659C10.0289 11.1549 8.08615 12.5466 5.48703 12.5466C2.25782 12.5213 0 10.3198 0 7.15669C0 3.99359 2.25782 1.81738 5.48703 1.81738Z" fill="#293C5B"/>.<path d="M15.9612 12.5738C13.4146 12.5738 11.498 10.929 11.498 8.27203C11.498 5.61503 13.4671 3.97021 16.0137 3.97021C18.5603 3.97021 20.5293 5.61503 20.5293 8.27203C20.5293 10.929 18.5078 12.5738 15.9612 12.5738ZM15.9612 10.347C16.9063 10.347 17.7989 9.66379 17.7989 8.27203C17.7989 6.85496 16.9326 6.19704 15.9874 6.19704C15.016 6.19704 14.1759 6.85496 14.1759 8.27203C14.2022 9.66379 14.9898 10.347 15.9612 10.347Z" fill="#293C5B"/>.<path d="M25.8079 12.5738C23.2612 12.5738 21.3

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	492
Entropy (8bit):	4.8928799975485
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjMv2DZUGcty19UeOfzRMUcLQL5texqI1VQ6hllo/:2diO4I1zQelUcUhfz+UXte4Qnhllo/
MD5:	843C314845745B97CECC7D1C17CB78D0
SHA1:	62374038832A69EE828874B26CF3C45003782C30
SHA-256:	ABB25AFC141EC09271F06CD871167CF3D1FA9DAB5334992A6CF230EB183B59C8
SHA-512:	4D1A5F8F17510C2D0427F154CACE935D00176A7E2EFD550D5C365F8BE0F39143559A9722FFB56A6605F83D4FBE4EB1B136C92ECF3BB996F798D6432D11B65B26
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/market-icon-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M5.625 5.25H5.25C3.17893 5.25 1.5 6.92893 1.5 9C1.5 11.0711 3.17893 12.75 5.25 12.75H6.75C8.82107 12.75 10.5 11.0711 10.5 9M12.375 12.75H12.75C14.8211 12.75 16.5 11.0711 16.5 9C16.5 6.92893 14.8211 5.25 12.75 5.25H11.25C9.17893 5.25 7.5 6.92893 7.5 9" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	40428
Entropy (8bit):	7.963812615141882
Encrypted:	false
SSDEEP:	768:F7Xbp87lq3O0GdQ/7YfSO+rnIF5V/bT7rSlnDgJVC9CiTw/fTo7MaI3R8I:1Xbp0Ucw7Y9+rIF5CgJVCLTwjRPhJ
MD5:	C073FA5AB616CFDD3F7EB4EF2EA87874
SHA1:	84A78C32B5FEC4B1A3E59A894FA5920CFC0B0465
SHA-256:	739CF240A4C47533FE5516365CD60934C2276CC3A7D967D0920F17F63A77DD63
SHA-512:	0A03AC2BB89C160BFBD9A1E3BF718CB97212337D587DDB1410EBA305E89243C062842FBD32CC3889867B1C42AFECA32A9AB49A7ABFC7365584DD5FB72EA63502
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............7..........................................................................;...gzg...I...Y.w#.3....cV.L.. K9..L..0HP.hv).Z.b.RkF. .Ra....C5N.`m.A....hn...7._.V....MS.3.w.}5O...L...r.U.....chs...?bX.$...r.a.6....j.W`&.U....Wb.........s.l.am.......W+T........W>.g.L.(K0;U...... .....m..b...1..K..a.]..].....Y...5$.............~......K..tY..g[%.T.*.Ms.]OZ.Y.X.....`b...w7.....@.;..a.;..3..3Fhf.b....K1m..7..s6.%..+....~U........Y..g.T.,.US.]5...Vr.Wp%...wm..v~..h8[..H...m.....&...;U......cW<x....Xs.a'..........M..u.]WK..t.....l.....8;U...0......{7...n.A H6.0..`......43U.A...[f...v XIQu..........m..=7J...t].....C...=].w)h...A....l;1.A.c..9......1X.....Gj9..1..n.1.V[3.#....TN..[.'..FW.=WK..t........v...6z...c.chb..a..........s......f#.K.4.........{2..e..ub.".f.f.....W......C..E...c

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4934), with no line terminators
Category:	downloaded
Size (bytes):	4934
Entropy (8bit):	5.137860905068029
Encrypted:	false
SSDEEP:	48:UMw1Y+KIYrCKNt/wqNvHbIfHXqlpQnqbJPLuWCWqIX7uNpuGqlin0MMFjP5gCQ2p:GsLsQ1iWCIruNp7pMFjhdWFh+uUSLsye
MD5:	1CC5122662DE98010BFC684D0AFCD2EB
SHA1:	37F64F3079789623BBFD72DFCFA513A480BE6879
SHA-256:	3C1D852C5BA8DE125D67D9C8FA2B144D3C70AB5F5DF587BCFD6FC882B5675932
SHA-512:	44423292C9F67C7EC9D2149B16454498D5F5279C469CA2BBB2AAEFCF08C9DB2B470AF89996CA80CD3D33ECB4ED097BD07AD87C1B2E764B57AE77AFDE615D73B6
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/video/index.js?ver=1.9.6
Preview:	"use strict";let YTAPI=!1,ytPlyaerInterval;function GS_Videos_Init(e=document){let t=e.getElementsByClassName("gs-video-element");for(let a of t){var o,s=a.dataset.provider,i=a.dataset.overlay,r=(a.dataset.lightbox,a.nextSibling);if("false"===i)switch(s){case"video":let d=document.body;a.getAttribute("src")?getGSHostedVideo(a):(d.addEventListener("mouseover",getGSHostedVideo(a),{once:!0}),d.addEventListener("touchmove",getGSHostedVideo(a),{once:!0}),d.addEventListener("scroll",getGSHostedVideo(a),{once:!0}),d.addEventListener("keydown",getGSHostedVideo(a),{once:!0}));break;case"youtube":getGSYoutubeVideo(a);break;case"vimeo":getGSVimeoVideo(a)}else r.onclick=function(){let e=this.previousSibling,t=this.dataset.type,a=this.dataset.lightbox,s=this;if("true"!==a){switch(t){case"video":getGSHostedVideo(e);break;case"youtube":getGSYoutubeVideo(e);break;case"vimeo":getGSVimeoVideo(e)}this.remove()}else{let i=e.closest(".gs-video"),r=i.getAttribute("id"),d=SimpleLightbox.open({content:e,eleme

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2157)
Category:	downloaded
Size (bytes):	3160
Entropy (8bit):	4.972165047032486
Encrypted:	false
SSDEEP:	96:EgRsB6XuA4mWvaf7v91GItmcs00X01PcNTwcx:EesB6z43U7v91btmc+X0dcScx
MD5:	AE0DE0482AA25CB8D9E347306475D53E
SHA1:	77FD871D8CC6D3CD396C3DEAE861942235CFF2FF
SHA-256:	6CE4398C02601CD8F7BF344FAB6D33D4FE0495B027FB8472DFDE5022A5C461DE
SHA-512:	E4C7784B6B21F88B850767FAACA07BB1FFC65771879B37DD032BCF238F337408E65163F821D59CA542C98D2A5CBC3DB5E0F590A078621E16522AF0CF30DC8CCD
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshiftwoo/assets/css/swatches.css?ver=1.7
Preview:	body .gs-var-selector input{margin:0;padding:0;-webkit-appearance:none;appearance:none;visibility:hidden;width:0}body .gs-var-selector input:active+.gs-var-label{opacity:.9}body .gs-var-selector input:checked+.gs-var-label{border:1px solid #000}body .gs-var-label{cursor:pointer;background-size:contain;background-repeat:no-repeat;display:inline-block !important;line-height:20px;font-size:90%;transition:all .1s ease-in;position:relative;text-align:center;vertical-align:text-bottom;margin-right:5px;border:1px solid #ddd}body .gs-var-label.text-label-gs{padding:6px 16px;min-width:50px;font-weight:400!important;text-align:center!important}.gs-var-label.image-label-gs{height:35px;width:35px;background-position:center center;background-size:80%}.gs-var-label.color-label-gs{height:25px;width:25px;border-radius:50%}body .gs-var-label.image-label-gs.label-non-selectable{border:none}body .gs-var-label:hover:not(.label-non-selectable){border:1px solid #333}.gs-var-label.gshidden{opacity:.3;cursor:

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1424)
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.157646539108183
Encrypted:	false
SSDEEP:	24:HKllMfVrakaxkg44ibQhYmxjC25jDsNu690C8X0xqsgKEaF7pAe/Tl5YdinF:qllMfUkaxhhYmpC4jDspyXX0xq9Kr37f
MD5:	ED25DC64F757DF940D68D70073FAAC6C
SHA1:	4E7B92631142E4FC1A9BEE2F373F7177E109A890
SHA-256:	0F5A1F6B98B73E3D3CAFC86C7EBF3BEE1AF6047DB976CFF09F4C643D91EEBC56
SHA-512:	979CCF72C80853C84525A48E95761946243038A14A7B118F6B09C96017F9F6817A7FFE68DE2B95EFBEEB11A5D5E9186AADA74C61B69B04632E030B708838477F
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/workbox-cdn/releases/3.3.1/workbox-sw.js
Preview:	var workbox=function(){"use strict";try{self.workbox.v["workbox:sw:3.3.1"]=1}catch(t){}const t="https://storage.googleapis.com/workbox-cdn/releases/3.3.1",e={backgroundSync:"background-sync",broadcastUpdate:"broadcast-cache-update",cacheableResponse:"cacheable-response",core:"core",expiration:"cache-expiration",googleAnalytics:"google-analytics",precaching:"precaching",rangeRequests:"range-requests",routing:"routing",strategies:"strategies",streams:"streams"};return new class{constructor(){return this.v={},this.t={debug:"localhost"===self.location.hostname,modulePathPrefix:null,modulePathCb:null},this.e=this.t.debug?"dev":"prod",this.s=!1,new Proxy(this,{get(t,s){if(t[s])return t[s];const o=e[s];return o&&t.loadModule(`workbox-${o}`),t[s]}})}setConfig(t={}){if(this.s)throw new Error("Config must be set before accessing workbox.* modules");Object.assign(this.t,t),this.e=this.t.debug?"dev":"prod"}skipWaiting(){self.addEventListener("install",()=>self.skipWaiting())}clientsClaim(){self.ad

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4108)
Category:	dropped
Size (bytes):	4142
Entropy (8bit):	5.143362198591793
Encrypted:	false
SSDEEP:	96:06bK025NqxXv3yJqrvYjNH6h2czAikPk7iReni:zEJRBH6RcTk7iRei
MD5:	3301CE2B9EF7FA3F72C5AE2B296D4CEB
SHA1:	6CAE4885257EF4A48A875BF44023D7D8CE9BC78F
SHA-256:	688EA52C7291B980AF811CAB2DFC8AF5EBB15A01555DDC0F3F312DB77B059B74
SHA-512:	172DA6823C832800A15DB5AEEADA8769D51CE9F3084F7AFAC992916F941F3718C46E3CB6EB1B07F3C7AA591289661824E8568F6E41EA95ACAAB79DCDD6FFDC1D
Malicious:	false
Reputation:	low
Preview:	!function(){let e=e=>e?(/^[?#]/.test(e)?e.slice(1):e).split("&").reduce((e,t)=>{let[n,o]=t.split("=");return e[n]=o?decodeURIComponent(o.replace(/\+/g," ")):"",e},{}):{},t=(e,t)=>e in t&&t[e],n=e=>parseInt(e)-0==parseInt(e);var o="undefined.361912";for(tdl.identify=a,tdl.convert=i,"string"==typeof window.tdl.domain&&(window.tdl.domain={default:window.tdl.domain});window.tdl.length&&tdl.domain;){let e=window.tdl.shift(),t=e[0],n=e.slice(1),o=e[2],r=e[3];switch(o\|\|(o=()=>{}),r\|\|(r=()=>{}),t){case"identify":a(...n).then(o).catch(r);break;case"convert":i(...n).then(o).catch(r)}}async function i(n={}){let o=[];var i={...n,...e(window.location.search)};for(let e in window.tdl.domain){let d=[],c=f(n,e),s=c!=="tdl_"+e,u=function(e,t){let n=[],o=decodeURIComponent(document.cookie).split(";");for(let i=0;i<o.length;i++){let r=o[i].split("=");(r[0].trim()==e\|\|!1===t&&r[0].trim().includes(e))&&n.push(r[1].trim())}return n}(c,s);if(u.length>0&&(d=u),!s\|\|0==d.length){let e=function(e,t){let n=[];if(

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	701
Entropy (8bit):	4.695996530843939
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zj1ACAeVvBroJ7aTNPuR70BOSivPb28mqgAwqW3I1VQ6hllo/:2diO4I1zpACAe3odaTNuHSmg6W3QnhlY
MD5:	11803062B771A84D23F6D718EF8DF196
SHA1:	6BD16587BEBBE947E1D7C279DD81F49F0DE6F059
SHA-256:	C23188B47134F16B36F7847CB965196A1E4C81BA145280AE8BCE8876D2CB5120
SHA-512:	D2A6B380D920BCFECCC743C377CE658BFB5A2342B5FBCBA93DDE0FDD44980CE6187ED6B899BB073C0DD866E6DFC1F7D14E42969BAB98A2507CE47AB845A1B45D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M14.25 15.75L16.5 13.5M16.5 13.5L14.25 11.25M16.5 13.5H12M11.625 2.46807C12.7244 2.91311 13.5 3.99098 13.5 5.25C13.5 6.50902 12.7244 7.58689 11.625 8.03193M9 11.25H6C4.60218 11.25 3.90326 11.25 3.35195 11.4784C2.61687 11.7828 2.03284 12.3669 1.72836 13.1019C1.5 13.6533 1.5 14.3522 1.5 15.75M10.125 5.25C10.125 6.90685 8.78185 8.25 7.125 8.25C5.46815 8.25 4.125 6.90685 4.125 5.25C4.125 3.59315 5.46815 2.25 7.125 2.25C8.78185 2.25 10.125 3.59315 10.125 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	dropped
Size (bytes):	288572
Entropy (8bit):	5.559460055968558
Encrypted:	false
SSDEEP:	3072:lpwizDGLET7dotn0Z5mptcY0/H8+ARUrOS2WrDm6DcM8rT/cLK:1GLg7docczKiSR9cM8rT/c2
MD5:	4D0B864A1BD598E13D31C8EC982E756E
SHA1:	29B0B2699A4E851B8894068296583FA2636FFA14
SHA-256:	EED3D8D892146518EA98C46A48EB323CD921E303834C5C11DAA4B52F250BF68A
SHA-512:	B128DE53F32D203983AB96AFFE15B9A037086A5E71ECCE5EBE9B06BED3067BC918668AF3218D71422CD8FB3A4DC0E00D0EE9C379A09A149772225991537EDE94
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-975786519","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	68914
Entropy (8bit):	5.248445428984441
Encrypted:	false
SSDEEP:	768:eVxma4TpP3CbbeqVrn4SnbV1YJ2KAmwkqNjBGldn:UxuGJn46V6J2KAmzwjsj
MD5:	EC9EEFFC02F61D82E8E430EDE8C09F2B
SHA1:	049FDF504F210F1F2D0024004A265AB04C4CA178
SHA-256:	3168F95334D663E697ABEF4BB6871811F0494519FD1F4DD42CA2EB4D0C3AA3A1
SHA-512:	F099B73558AC4130CEA923FED75C3A88F209B22898903FFBB2DBD00679E559099971F2E9219F2D4C8119F8A7A7CD82E6AA9B564A470715A5F8DF48F653DA532D
Malicious:	false
Reputation:	low
Preview:	!function(){var e={92903:function(e,t){t.config={type:"production",cdn:{enabled:{forAssets:!1,forApi:!1},assets:"assetscdn-",api:"apicdn-",domain:{production:"wchat.freshchat.com"},subDomain:"",protocol:{production:"https://"}}}}},t={};function n(i){var o=t[i];if(void 0!==o)return o.exports;var a=t[i]={exports:{}};return e[i](a,a.exports,n),a.exports}n.p="https://assetscdn-wchat.freshchat.com/static/assets/",function(){"use strict";var e={SAMPLE_TOKEN:"WEB_CHAT_TOKEN",frameDivId:"fc_frame",frameId:"fc_widget",pushFrameDivId:"fc_push_frame",pushFrameId:"fc_push",modalDivId:"fc_web_modal",classes:{fullscreenClass:"fc-widget-fullscreen"},FAQ_EXPAND_WIDTH:835,AJAX_URL:{canary:"/app/services/app/webchat/{token}/canary"},canaryRoutes:{feature:"canary",rts:"rtscanary"},config:{model:"config",url:"/app/services/app/webchat/{token}/config?domain={domainName}"},impostor:{getFreshChatConfigs:"get_freshchat_configs",activityEvents:["click","dblclick","mousemove","mouseover","mousewheel","mouseout"

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91931
Entropy (8bit):	5.305447505151415
Encrypted:	false
SSDEEP:	1536:6u8KqOE7y7Jnene8hSBjATMRWyALbR7vmnGGCgfzMewTDu4l0DolqEfq8Lj:6aXJeBEwyAnR7vmnLH4KD+xxP
MD5:	870D0CE5E5BD19E3461841A6C8135882
SHA1:	5267448C95C77AE9BD2FA805470B5F17A9D76DE0
SHA-256:	BDF5213670F2CA9B7839A16DBED6260E11A5F87245904EBD3E4C6BB6829C9E1C
SHA-512:	249015488B9CC6A4B37F68D4DC9360AEC51D5316D6D2D4CD3A164DBADF26858C17954BB740C42A7869C4EC0E76E80AF996E25E7BB00DFAB347E7AAA5AC593A96
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/nelio-session-recordings/assets/dist/js/public.js?ver=c8e9130a6efe027036b1
Preview:	(()=>{var e={8263:(e,t,n)=>{"use strict";var r=n(8175),o=n(6873),a=n(6596),s=n(148),i=n(214);(e.exports=function(e,t){var n,o,c,l,u;return arguments.length<2\|\|"string"!=typeof e?(l=t,t=e,e=null):l=arguments[2],r(e)?(n=i.call(e,"c"),o=i.call(e,"e"),c=i.call(e,"w")):(n=c=!0,o=!1),u={value:t,configurable:n,enumerable:o,writable:c},l?a(s(l),u):u}).gs=function(e,t,n){var c,l,u,d;return"string"!=typeof e?(u=n,n=t,t=e,e=null):u=arguments[3],r(t)?o(t)?r(n)?o(n)\|\|(u=n,n=void 0):n=void 0:(u=t,t=n=void 0):t=void 0,r(e)?(c=i.call(e,"c"),l=i.call(e,"e")):(c=!0,l=!1),d={get:t,set:n,configurable:c,enumerable:l},u?a(s(u),d):d}},6011:e=>{"use strict";e.exports=function(){}},6596:(e,t,n)=>{"use strict";e.exports=n(5339)()?Object.assign:n(3595)},5339:e=>{"use strict";e.exports=function(){var e,t=Object.assign;return"function"==typeof t&&(t(e={foo:"raz"},{bar:"dwa"},{trzy:"trzy"}),e.foo+e.bar+e.trzy==="razdwatrzy")}},3595:(e,t,n)=>{"use strict";var r=n(2093),o=n(7134),a=Math.max;e.exports=function(e,t){va

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	498
Entropy (8bit):	4.950231807178219
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjO76toZgeOhsLRxAR8irDBG+nI1VQ6hllo/:2diO4f1QK76t87O2RDOQnhllo/
MD5:	C8D9F0481C34B65EABD24371AA086483
SHA1:	F26B7AD0C7E59C4FB50F739CDC1406F9E1946A96
SHA-256:	E97E174FC6830E3844D56F2559D530400D92E506276A782B9D3993D47B9C976A
SHA-512:	FC932CE2F1F3102740B66F30F50B3B9E80F7EFE1216CF5EFBD46B5608C4D6E3C1D25B62C4D1F875240FA0D9F8E4F9AC95994BBAACEC55B70A8FDE4CD0F630AA7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M9.33398 1.5L12.034 4.2C13.834 -0.525 18.859 4.5 14.134 6.3L16.834 9L14.134 11.7C12.334 6.975 7.30898 12 12.034 13.8L9.33398 16.5L6.63398 13.8C4.83398 18.525 -0.191016 13.5 4.53398 11.7L1.83398 9L4.53398 6.3C6.33398 11.025 11.359 6 6.63398 4.2L9.33398 1.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8079
Entropy (8bit):	4.794839293225124
Encrypted:	false
SSDEEP:	192:vIJU+9lLT+tf2UIGAoI8MTq9mIvRbYengwuEV:v8U+9JT+oFGTI8z9NvRb/gwh
MD5:	BFDE792648EC8CB1AA258268227CB35C
SHA1:	0CE4B92B4486941C42F7D6B56A0B4224CD1EFED2
SHA-256:	BE8106D06F3E0B550594DD0C941B122F5B963AE5C2E6F55C7F2865E1C28AFED3
SHA-512:	81ADF4BB79D25631B0BA83A6A64A481B99F760696AF2275D13426F6B4ED7E52435D26FB61CE9570D5743E7E002538A35EA863231F5A07EEC6B6D5C29B685444E
Malicious:	false
Reputation:	low
Preview:	{"cookies":{"cookieyes-consent":{"cookie_id":"cookieyes-consent","duration":"1 year","description":"CookieYes sets this cookie to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors."},"_ps_xid_VLPrFw6C_PllY":{"cookie_id":"_ps_xid_VLPrFw6C_PllY","duration":"3 months","description":"Description is currently not available."},"_ps_partner_key_VLPrFw6C":{"cookie_id":"_ps_partner_key_VLPrFw6C","duration":"3 months","description":"Description is currently not available."},"kaff_R8g82rqP":{"cookie_id":"kaff_R8g82rqP","duration":"1 month","description":"Description is currently not available."},"_ps_xid_VLPrFw6C_V65e":{"cookie_id":"_ps_xid_VLPrFw6C_V65e","duration":"session","description":"Description is currently not available."},"_ps_xid_VLPrFw6C_PDGq":{"cookie_id":"_ps_xid_VLPrFw6C_PDGq","duration":"session","description":"Description is currently not avai

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	880
Entropy (8bit):	4.334216606665652
Encrypted:	false
SSDEEP:	24:tYRUyKuOuXrRAl/23VOfaVXd9+QxhIeGDrNUqmK:gx7X1Al/oVwatlHXGmXK
MD5:	3928F80C6E12FB6D6F3F2D7E7D0EB5B4
SHA1:	CB7F85903C6466180D59D37349626F25200BC26A
SHA-256:	71FB99817EC0C12E5D13C7F0BE816FDB1F5D3229A4BBDABF377104B1EFB4916B
SHA-512:	06AF436538792069B96958625F3211A77D4A7CAEC608241012B9DF963DBFB0B172EBCB6E93AD1E91118827442EED060098611ED3E0CF1CC98661AD0AF21D5393
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="25" viewBox="0 0 24 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.2234 0.257324H1.77187C0.792187 0.257324 0 1.03076 0 1.98701V22.5229C0 23.4792 0.792187 24.2573 1.77187 24.2573H22.2234C23.2031 24.2573 24 23.4792 24 22.5276V1.98701C24 1.03076 23.2031 0.257324 22.2234 0.257324ZM7.12031 20.7089H3.55781V9.25264H7.12031V20.7089ZM5.33906 7.6917C4.19531 7.6917 3.27188 6.76826 3.27188 5.6292C3.27188 4.49014 4.19531 3.5667 5.33906 3.5667C6.47813 3.5667 7.40156 4.49014 7.40156 5.6292C7.40156 6.76357 6.47813 7.6917 5.33906 7.6917ZM20.4516 20.7089H16.8937V15.1401C16.8937 13.8136 16.8703 12.1026 15.0422 12.1026C13.1906 12.1026 12.9094 13.5511 12.9094 15.0464V20.7089H9.35625V9.25264H12.7687V10.8183H12.8156C13.2891 9.91826 14.4516 8.9667 16.1813 8.9667C19.7859 8.9667 20.4516 11.3386 20.4516 14.4229V20.7089V20.7089Z" fill="#98A2B3"/>.</svg>.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (897), with no line terminators
Category:	dropped
Size (bytes):	897
Entropy (8bit):	5.410472264744903
Encrypted:	false
SSDEEP:	12:9G/DGljg0kyo1uNFVxdNtY1pemH7veCXOQe33T0J41xULqEj5uOtdCpHnLmLNhoL:9GLGapINF7LtAWRYJuxUuEVL4HnqcbP
MD5:	7690E06F6039C78A18B3F418E0403BF9
SHA1:	C5BA034B9D129C4AD1ACDF6EA764674516D78FD8
SHA-256:	9598E291A1015E2151D3A0A9B0623B1F1E5E614186CB867FFB39DD79CA44385A
SHA-512:	FD810D6072EFBDFB786CC69DC053441FB5BEF78E67A2E7E531F6DADA5C0C48C33A4924E5D12BDD34A9A753E7C6EB7897DBA30030904D1DE969D4543CC7B96A24
Malicious:	false
Reputation:	low
Preview:	(()=>{var e=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t={};(()=>{"use strict";e(t);const a="survey",{currentScript:r}=document,n=new CE2.NativeURL("../thirdparty/e1135c7f31a16440d5fc9944b7402d81.js",r.src).toString(),c=new CE2.NativeURL("./survey.js",r.src).toString(),i=new CE2.NativeURL("./cta.js",r.src).toString(),o=async e=>new Promise((t=>CE2.loadScript(e,t)));CE2.loadAddon=async e=>{switch(await o(n),e){case a:await o(c);break;case"cta":await o(i)}},CE2.launchAddon=async function(e){let t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};switch(e){case a:CE2.launchSurvey(t);break;case"cta":CE2.launchCTA(t)}}})();var a=CE2.survey=void 0===CE2.survey?{}:CE2.survey;for(var r in t)a[r]=t[r];t.__esModule&&Object.defineProperty(a,"__esModule",{value:!0})})();

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2658
Entropy (8bit):	4.354726623867422
Encrypted:	false
SSDEEP:	48:eB4m0+3+a4Za68X5m5zklPCPFOF1dNLNAz6xd9iX/aDTIfm:k4mPD446Gm5zG/Fmeft
MD5:	F3CAED592963881BAEA5B9D4963B8C98
SHA1:	F6ED9797777886E374817A950EE6D54A46DE24F6
SHA-256:	B850877EFB16CCC960D33B3CC3B856F4220D06135A5F131B5DCD8937516FD1DD
SHA-512:	8CC4B084A6CD5F360BB4702CB6AE5160722E23527CFAE928FB269EB7CFC9F7484520D9B71E708ADB764B6C037D0466FA6B1DB586D10E426C39CA48D38BD9E275
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="194" height="38" viewBox="0 0 194 38" fill="none">.<path d="M99.6697 28.2592H95.9717L95.9809 9.59471C95.9809 9.57093 106.64 9.58679 110.958 9.60132C115.17 9.61585 116.872 14.1489 116.872 16.2984C116.872 17.9116 116.872 21.6744 113.736 22.8384L118.395 28.2592H114.005L109.974 23.3761H101.91L101.896 20.2184C101.896 20.2184 107.885 20.2158 110.243 20.2158C112.485 20.2158 113.159 17.9896 113.174 16.7344C113.2 14.4831 112.259 12.9373 110.064 12.9373C108.359 12.9373 99.671 12.9347 99.671 12.9347V28.2566L99.6697 28.2592Z" fill="#2E88DC"></path>.<path d="M168.332 28.2599C168.332 28.2599 178.403 12.1282 179.62 10.2521C180.695 8.5953 182.039 8.50546 182.98 10.2521C183.92 11.9987 194 28.2599 194 28.2599H189.564L187.1 24.1299L177.037 24.1206L178.986 20.9167L185.38 20.926L181.29 14.3914L172.9 28.2599H168.332Z" fill="#2E88DC"></path>.<path d="M146.087 28.2592H142.389L142.398 9.59471C142.398 9.57093 153.058 9.58679 157.375 9.60132C161.587 9.61585 163.289

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (733)
Category:	downloaded
Size (bytes):	312860
Entropy (8bit):	4.841684315417049
Encrypted:	false
SSDEEP:	6144:yuNjeFkS+W8Ic0qnOUurKG39Gn6M/w0LqIZN+2:LjeFi
MD5:	567E0DBA309714716A5370F01F87D865
SHA1:	E6B08BF71258A8578128B01DB22134F9952C46F1
SHA-256:	52D930641477A30CFD3194EF0BE7AD8C6F43F8D7A07665325532AD0B5ACBE6F5
SHA-512:	8138578A7E27A691A911A727846A0117113E3F55FF595FAC04460AE28614622FCBDB72CB225DCDE617EB1E383BFAFF93C889AFE7F581349BE664E94F16B0E52A
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/scripts.min.js?ver=1715183705
Preview:	/****/ (function() { // webpackBootstrap./**/ .var __webpack_modules__ = ({..// "./assets/src/js/partials sync recursive \\.js$":./!*******************************************!\. !* ./assets/src/js/partials/ sync \.js$ !. \*****************************************/./*/ (function(module, __unused_webpack_exports, __webpack_require__) {..var map = {.."./popup.js": "./assets/src/js/partials/popup.js",.."./site-scripts.js": "./assets/src/js/partials/site-scripts.js",.."./topbar.js": "./assets/src/js/partials/topbar.js".};...function webpackContext(req) {..var id = webpackContextResolve(req);..return __webpack_require__(id);.}.function webpackContextResolve(req) {..if(!__webpack_require__.o(map, req)) {...var e = new Error("Cannot find module '" + req + "'");...e.code = 'MODULE_NOT_FOUND';...throw e;..}..return map[req];.}.webpackContext.keys = function webpackContextKeys() {..return Object.keys(map);.};.webpackContext.resolve = webpackContextResolve;.module.exports

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	43811
Entropy (8bit):	4.398353709116211
Encrypted:	false
SSDEEP:	768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB
MD5:	AB627B3D962B9D7BA28D2C9C4F507006
SHA1:	5306BF157B6126D0B43982FB8B3FAE7C560B6A89
SHA-256:	23FC25133ED072CDF7DAE575213067B1DA3C6843B2A0E489C8B7FC984C60CE6B
SHA-512:	F6955B951FC46A60880E2230AEC83D0F423B9560B7C4EB5F715F966DF544DCA7CFFD1DB57834766EFC0968C8273F005EA5F4F23D10884F8C89FFB7BC4E7F638D
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/node_modules/jquery-form/jquery.form.js
Preview:	/!. jQuery Form Plugin. * version: 3.50.0-2014.02.05. * Requires jQuery v1.5 or later. * Copyright (c) 2013 M. Alsup. * Examples and documentation at: http://malsup.com/jquery/form/. * Project repository: https://github.com/malsup/form. * Dual licensed under the MIT and GPL licenses.. * https://github.com/malsup/form#copyright-and-license. /./global ActiveXObject /..// AMD support.(function (factory) {. "use strict";. if (typeof define === 'function' && define.amd) {. // using AMD; register as anon module. define(['jquery'], factory);. } else {. // no AMD; invoke directly. factory( (typeof(jQuery) != 'undefined') ? jQuery : window.Zepto );. }.}..(function($) {."use strict";../. Usage Note:. -----------. Do not use both ajaxSubmit and ajaxForm on the same form. These. functions are mutually exclusive. Use ajaxSubmit if you want. to bind your own submit handler to the form. For example,.. $(document).ready(function() {.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	819
Entropy (8bit):	4.563462646672984
Encrypted:	false
SSDEEP:	24:2diO4I1zzYGwjTIaqoadFNn+/aQt4o+IEnVRcivwQE+jS/Qnhllo/:c31nYbjTIZo6n+/ai4o/EYWwQE+4
MD5:	0DB4497321505BA4E952816DFB3637AF
SHA1:	3FCDC2E73450AF5E4A038784853D35E877F84C3A
SHA-256:	74DB3A69CE535881A904352F0611E76831B64A1CDCDD866B0EF690AC875C91E0
SHA-512:	2613E13D65F34DD732EC2CE3846B8E8270837541F153DB41E5ECF311A36F86A5E49ED9CB3F3142FB0AE9011CAA23E5A9BDC249EAD6855804C19660EE53F720CA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6 2.25L12 15.75M2.25 12.75L9 9M5.85 15.75H12.15C13.4101 15.75 14.0402 15.75 14.5215 15.5048C14.9448 15.289 15.289 14.9448 15.5048 14.5215C15.75 14.0402 15.75 13.4101 15.75 12.15V5.85C15.75 4.58988 15.75 3.95982 15.5048 3.47852C15.289 3.05516 14.9448 2.71095 14.5215 2.49524C14.0402 2.25 13.4101 2.25 12.15 2.25H5.85C4.58988 2.25 3.95982 2.25 3.47852 2.49524C3.05516 2.71095 2.71095 3.05516 2.49524 3.47852C2.25 3.95982 2.25 4.58988 2.25 5.85V12.15C2.25 13.4101 2.25 14.0402 2.49524 14.5215C2.71095 14.9448 3.05516 15.289 3.47852 15.5048C3.95982 15.75 4.58988 15.75 5.85 15.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65279)
Category:	downloaded
Size (bytes):	135676
Entropy (8bit):	5.2512893359679715
Encrypted:	false
SSDEEP:	3072:BJkI9s9zLjkTbkC75OrynIm1/T5W9D/EL74ami0lLHb:BJv9YzLjkTbkC9OrynImRT5W9D/iP0lP
MD5:	62C6F89AAD925EFBDB3AA034C0A7AE69
SHA1:	55CD3831254BCD17BAD5B9C933D2BF36B05BEC9C
SHA-256:	E43A5802D5ED9337DA2E507C39C43080DE4305DB7E520E22FE3EC9FD83C1B72F
SHA-512:	BFEA48CEA1157F4F8EE742ECF6C730E830D94F93A7E86E709D72CB3128D895F249ACD7BE64258AF38F4F0546100DA81929CDB5DB958A6096375EE80B370C0F7C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/vendors/swiper-bundle.min.js?ver=1715183706
Preview:	/*. Swiper 7.3.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2021 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 24, 2021. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s={},a={}){Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],style:{},setAttribute(){},getElem

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	103060
Entropy (8bit):	5.3527719690725295
Encrypted:	false
SSDEEP:	1536:ep1/q1cPC+clo7tUa6yuq7UUtEU7MFsO4BQCDBlUvoXJN:ep1/scK/lKN57RFqvo5N
MD5:	186F72B75FEA4324088C40C7A0726D7A
SHA1:	60E283F6C1ACB1CF0E32CAA7B4278EA7B90E9A7D
SHA-256:	8200C2C5836A6F781C6E2B16F1F4CFA5319643A9D97E549E8C07FCF490390C50
SHA-512:	ABA3159AB08563FEB6CD5688AC0786BE7D92B0EF30087F84BD3D9B695A736E423B28CD876F126AC758CD7C06B60E8A8D68B6852BB87FC6061EC47ED665778BF5
Malicious:	false
Reputation:	low
Preview:	!function(){var t={5666:function(t){var e=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},i="function"==typeof Symbol?Symbol:{},c=i.iterator\|\|"@@iterator",a=i.asyncIterator\|\|"@@asyncIterator",u=i.toStringTag\|\|"@@toStringTag";function s(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{s({},"")}catch(t){s=function(t,e,r){return t[e]=r}}function f(t,e,r,n){var i=e&&e.prototype instanceof g?e:g,c=Object.create(i.prototype),a=new L(n\|\|[]);return o(c,"_invoke",{value:j(t,r,a)}),c}function l(t,e,r){try{return{type:"normal",arg:t.call(e,r)}}catch(t){return{type:"throw",arg:t}}}t.wrap=f;var p="suspendedStart",d="suspendedYield",v="executing",y="completed",h={};function g(){}function b(){}function m(){}var _={};s(_,c,(function(){return this}));var x=Object.getPrototypeOf,k=x&&x(x(A([])));k&&k!==r&&n.call(k,c)&&(_=k);var w=m.prototype=g.prototype=Object.create(_);functi

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	97473
Entropy (8bit):	5.4165537471870735
Encrypted:	false
SSDEEP:	1536:lSRktpnYKatB8ZDTobZEyMZs5A+TAUXxcOwb0/EFgH1K7n9vYXyAauLDm:lykCsZ4baytBXxcZwzulILDm
MD5:	98605E46A53EBA931233C013DD865563
SHA1:	F547D053D497067063CE41E42A426854EF7F634A
SHA-256:	58DF28EBE998BF79C2C4925066E27EB610D0AC2819C91F12694EAFACEDAE25F7
SHA-512:	1C9D3F710A185564FB2B4C933A12B3AC245FD3E105A7743D8977DBEFCD5B4BDA5CBBBEBFB4E96B6F83A53CABBEF0A8F4507DE461C41625FE00B2FAAC9938F9E0
Malicious:	false
Reputation:	low
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[806,60],{9307:(e,t,s)=>{"use strict";s.r(t),s.d(t,{EventHandlers:()=>Os,V11Tracker:()=>xt,compress:()=>Is,fp:()=>Ns,getCensoredElements:()=>Bt,timing:()=>nt});const r="[\\s\\u00a0\\u2028\\u2029]+";let i;if("undefined"!=typeof Intl&&Intl.Segmenter)try{i=new Intl.Segmenter}catch(e){}const n={whitespace:new RegExp(r,"g"),strip:new RegExp(`^${r}\|${r}$`,"g"),href:/\bhref="(.?)"/i,ipHost:/^([\d\.]+\|\[[a-f\d:]+\])$/i,allChars:/\p{RI}\p{RI}\|\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?(\u{200D}\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?)\|./gsu};function o(e,t){const s=e.replace(n.strip,"");return t?s.replace(n.whitespace," "):s}const a=2048,c=65535-a;const l=`cesrk${Math.random().toString().replace(/\D/g,"")}`;function h(e){let t;const s=(e=e\|\|window).document;return e[`${l}_path`]!==e.location.pathname&&(e[l]=function(e){const t=e.defaultView,s=e.documentElement;if(s.scroll

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	105
Entropy (8bit):	4.424540935101004
Encrypted:	false
SSDEEP:	3:UQWG0nKPP9YlIkFnVx6VXAmPXAx+KxDNfNRnWG0nKPPK1:UQWJG6tFnVMQIA/FBNYJl
MD5:	9AA0172F89B168F5F45553C2FB4094F9
SHA1:	104C1FB4E60ED03E9C11A1BC78D063D37EC93BE1
SHA-256:	FCD37A09034C1481917C17817117842E63378D662422F5D2F166C685E0209ED7
SHA-512:	ECA6ACB61EC748900B2BE81B9AB9CF0079FD17ED3C2EDC37D4A9533CE2ADD2E2C94F0941C7A6DB61AB4852462CE6F2B24A3EDEFD65F332739E4BF1CAA806BBDF
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/scrollto/index.css?ver=1.0
Preview:	html{scroll-behavior:smooth}@media screen and (prefers-reduced-motion:reduce){html{scroll-behavior:auto}}

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	72450
Entropy (8bit):	7.976279319854132
Encrypted:	false
SSDEEP:	1536:2mDxSzSyY86CDA7ZGTKZF75xaH2GmCgLhWoCEcXic3lu:L2SyY8bZOZFfaWZFhWoCEcXic3lu
MD5:	6D7BC76789B9DCD17601F68DB87BE47D
SHA1:	331157CC3DEAA66840C0374838A9D4940F9D3A93
SHA-256:	F9954D9543B87D1E25AD1BD91AABD4DAC208BB1B86FFCC07486E03892C895057
SHA-512:	18D6D9D3F36877C824C0D4C1BBB1948777020EF6EE58D61B6B59686050F62E5F37AA330B31CC81B72BAC0297B57C6455B345F774DDB88CDB464D3CADE645B017
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/Screenshot-2024-10-31-134328.png
Preview:	RIFF....WEBPVP8L..../.....@n.I..%0...]............G.....5.<7.wh.y.b.o..!..g..y..:jf.u..jp..t>..Le#.VXu.W.S8.....x.....V.8.z..n.4..^S........9.{..4[..y....l..bWxR.l.m.i ...y...M...N..}....<&....<.}...R-......T..1.l.V..V.T.......T..PYf.ij....;.....Zp...P.,.RMm[..q.A....8K. ..T..B..Vm.@....'.i.+SI...I."mn.J.8....~..'...N...T..al...E....A.........F.$I2r.....f..Q...L..A......F..I!.Xw.L,.......~..j$I.m............>..e.w.#).%.....[........b.@^......<2.........x.[.......exh..B..e...@.4(.]..J..[..t...+.A....:..O...m.....v..`.M....A.cCeie<.[... *{....e?.......']9..xpW..'.!......FO..][XVvQ.J<...../bG..m...S..2Y..eq:..:....b..8Nxx`R.F-kS...............l.c.\|Z..x.Mb..;u.dKc\|....(.5....E..K.o2.3W><.E7.g...!....7..<....).wq,.qqQ......E>...K".Ee....o.(\|..p...#`...(.r..t...M.."zZj..j\|a.^......L..B\\|..r\....~X\.tq....c.C.r........q.!..?...t...U...x..^A..0....._p..1...HWvt.@\|xk.At.....W7........+....V{G....OX.....g..XD@.J.....-.......

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4843), with no line terminators
Category:	downloaded
Size (bytes):	4843
Entropy (8bit):	5.824782249672171
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUDXkt:1DY0hf1bT47OIqWb1OXkt
MD5:	C7875623ACCB3B6FBCE6AF4495721FED
SHA1:	C90066BEC403F1D83D0A2BA28684ADDDA633025F
SHA-256:	372D7CCBCFB6398732B31F0E5BB541C52C082B2A81CF5F80D51DEEC919DFE6B5
SHA-512:	39119209A2EECFABDCF1A6C274DB440F8E0CF0E2BA4379865E142DC67601E0C846D03C3C4C255F851CBB5A8DAD31E199CE973DEFB3578CBA767077E64748B946
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/975786519/?random=1730971806551&cv=11&fst=1730971806551&bg=ffffff&guid=ON&async=1&gtm=45be4au0v9175625129z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23856
Entropy (8bit):	7.9867909606359015
Encrypted:	false
SSDEEP:	384:qWjhdcX6mo5jgJypfVskxNMn0i+aLhL6hrL4YELYvQ3D+/GfcFybr5tAy5ZN2:NjhdcTc5l2IN6QaLhL6hWYY3Vr5tb2
MD5:	C228EB1F0131A8054A82A4E14F1CF1C1
SHA1:	0CEDBCF452890260F21A05996C5DC225D7F97A8A
SHA-256:	0CC7FC2C9787DB40C69EEFC481339E1238EB1FBF8CA00F54B70BA1B010E148F4
SHA-512:	8ED34C7C8D2903E7D83AF07DF5DB7B21EAE46E55B0A5B414493953D080256065826752B833E13651B4D93DE77CA9146F2C1A7A72F33DBADB1643111C8A5F6BB6
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/master.png
Preview:	RIFF(]..WEBPVP8L.]../..@.M@l.H....0......{f3.....$......S..1......J.5...kE...... YQeug.....\|..1....#}...Ss.d.f..@...H.4..c".~..a...n...#...l $+...}.^...H..W...6l7..1<..A...P.P{..@...'..T..C.a..<<..W......n.w...Q..{.O....?^Hn%........o.-Xu.H~.X.Vw...wY.m.V4r................F.j....'.i@...v.[.nAI.r....g..d..^...n.\P.........p.a......-....J7?F.>+..wc`.+..}oul.../..,.......0S........9..9}./.u_l.C.H?&...Hsm[3..\6.....f..H..~i?h#3EQ.E.E..1.(.S.f..f5.uS3...dU_.{....C.}D..Jo.P36...`..............#.B.Aa...QUF.Z...Z.......uZL5S]...)...P..\|..nt....1`?.....E...S_.R../%..o.S.....bj5.M-.....ej...^...f0../S]...!.....)M1mBG.q.........u......<Om.\..\|.p......~..q..n. ......=}O&.+..fm....x..w...K6..G....o......6..'d.I&...pos.w.:.]kj.c?..`;.G.24...MR... M.#.6..b.O.@.7.5...#..T..?EC8..Q.v...8a.Gg=......d2..c..../..o.6 4..H.......... I....C.#@u..O,.A.....YG...R+..\|(w$...Y..N^4..j<<.]b...BO5o.R..$..'A..Z..w...2..>......B.lI....Ibg.H.N.N...x...l..\f.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	dropped
Size (bytes):	21464
Entropy (8bit):	5.303481082929494
Encrypted:	false
SSDEEP:	384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv
MD5:	8FBC22C79D40119DDE9A5D16897002B9
SHA1:	E9837519ACA724457792E2D5EE98A97A0367CDF9
SHA-256:	7E84C9F8D71BC6EB2DAC2FCE59A6CAEA62DA51FFA8CF56B41806F59386AB1322
SHA-512:	3118A198A3710C839C15D6C4B5DC9F9ADCD637913AF2E26F438B01C80B27281F4937E25AAD2817855D8B3EB36207C61AE16D62B17E698799C5316E86F52AC6FC
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.13.3 - 2024-04-26. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sort

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2627), with no line terminators
Category:	downloaded
Size (bytes):	2627
Entropy (8bit):	5.533147487906034
Encrypted:	false
SSDEEP:	48:nFq53zAFH1w48jmynplGp2om4wZFCm3+tzah5IEuNCRB4SNycGDPA:nERA91tgShm4kxOtH/CRhp4PA
MD5:	1DF74FB2D47F44AB3D61F40D93A79B8B
SHA1:	06B290B457D2A0F0448B51B51E5FECB51D45D3D6
SHA-256:	E3FED9A44B93C032A2DC9E8CC2F0D088F7263938CBCFEA0D8B0ABD0D44452A38
SHA-512:	28D9FA5DE38B3B8DA5AEB28850999FD17CA05A34870DFEA9A0764E800B7248F85191646F94CC30958AFBD6A2E529BF512C6BDFAD892288D25FFDD3CC8A551FAE
Malicious:	false
Reputation:	low
URL:	https://trc.taboola.com/1633491/trc/3/json?tim=1730971807247&data=%7B%22id%22%3A862%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1730971807236%2C%22cv%22%3A%2220241102-3-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fkartra.com%2F%22%2C%22e%22%3A%22https%3A%2F%2Fapp.kartra.com%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Fnab%3D1%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dtaboolaaccount-accountsgenesisdigitalco%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1730971807245%2C%22ref%22%3A%22https%3A%2F%2Fapp.kartra.com%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fkartra.com%2F%3Fnab%3D1%22%2C%22tos%22%3A4%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22it%22%3A%22JS_PIXEL%22%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"54640046f3afc6ad834e972936e6f0a3","sd":"v2_54640046f3afc6ad834e972936e6f0a3_61e6a419-5795-4857-a5b9-22cc888accf9-tucte260e23_1730971811_1730971811_CIi3jgYQ09ljGITc1q-wMiABKAEw4QE4kaQOQPzYD0jC2NkDUPsEWABgAGiQgI6I5eeGxhBwAYABAA","ui":"61e6a419-5795-4857-a5b9-22cc888accf9-tucte260e23","plc":"DESK","wi":"-4766578067431891853","cc":"US","route":"LA:LA:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"uvpw":"1","pi":"1633491","cpb":"EhIyMDI0MTEwMi0zLVJFTEVBU0UYASCc__________8BKhlsYS50YWJvb2xhc3luZGljYXRpb24uY29tMg90cmMtdHJhY2tpbmcyMDc4gPT77wpAkaQOSPzYD1DC2NkDWPsEYwjoRBCJWxgwZGMI3V0Q_HoYMmRjCNcWENUfGCNkYwieQRCWWBg2ZGMI0gMQ4AYYCGRjCJYUEJkcGBhkYwjcFRD7JRgJZGMI9BQQnh0YH2RjCKQnEIo1GC9keAGAAeIjiAHLmZDSAZABGJgB0v7Wr7Ay2wEQAdwB","evh":"-1681676304","evi":{"48":"8808\|11657","50":"11997\|15740","47":"5028\|6794"},"vl":[{"ri":"28e1f55d01684635739612ea6eb1cd86","uip":"rbox-tracking","ppb":"CNEC","v":[]}],"tslt":{"p-video-overlay":{"can

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6961), with no line terminators
Category:	downloaded
Size (bytes):	6961
Entropy (8bit):	5.206269624284813
Encrypted:	false
SSDEEP:	96:YjjLPU67DTJpXyrsaHkVUwdIE48a60q9pX94ayhZir09Z9Oq586n7e:GLN7DvyrsaHk72Et0EpX9KLir0d55a
MD5:	1109585CAEA8B2602278187F93643578
SHA1:	2C8B1117679C23B9E1653212355E84CEDB93AA41
SHA-256:	72C254E298C13A662B311336A98CAE20D39108B3E02A0946AAF9771CC808912A
SHA-512:	9343F771796E3B894D79510F17A4AA6DC0E1086F94D232AEB888A619A42D76528AC18CB0A433F5166A9D776174C09001BF391AB49E9AC3F581862FFE75438829
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/swiper/init.js?ver=8.9.9
Preview:	"use strict";function GSPB_render_Swiper(e,t=document){let a="auto"==e.dataset.slidesperview?"auto":parseFloat(e.dataset.slidesperview),s="auto"==e.dataset.slidesperviewmd?"auto":parseFloat(e.dataset.slidesperviewmd),r="auto"==e.dataset.slidesperviewsm?"auto":parseFloat(e.dataset.slidesperviewsm),o="auto"==e.dataset.slidesperviewxs?"auto":parseFloat(e.dataset.slidesperviewxs),l=parseFloat(e.dataset.slidespergroup)\|\|1,i=parseFloat(e.dataset.slidespergroupmd),d=parseFloat(e.dataset.slidespergroupsm),n=parseFloat(e.dataset.slidespergroupxs),c=parseInt(e.dataset.spacebetween),p=parseInt(e.dataset.spacebetweenmd),u=parseInt(e.dataset.spacebetweensm),f=parseInt(e.dataset.spacebetweenxs),w=parseInt(e.dataset.speed),g=JSON.parse(e.dataset.loop),v=JSON.parse(e.dataset.autoheight),y=JSON.parse(e.dataset.grabcursor),b=JSON.parse(e.dataset.freemode),h=e.dataset.keyboard,m=e.dataset.onlyinviewport,S=e.dataset.mousewheel,x=e.dataset.forcetoaxis,$=e.dataset.releaseonedges,k=e.dataset.freemodesticky,_

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	249595
Entropy (8bit):	5.548603283108404
Encrypted:	false
SSDEEP:	3072:L+wizDGLETudo8n0j5mptcY0/H8+ARrrOS2WrDmKD0C8rT/FXK:kGLgudojczRiSRx0C8rT/Fa
MD5:	A9879643779D0D2BDB9AA391EEB17AA0
SHA1:	E881E5701B10C61BC24695C9BF82CDF6514EE520
SHA-256:	08368504E74B505C596FB913D78C0F404135AD110EB09A026657233C5A0C246A
SHA-512:	EEC222584084C0007B3E04746A92DD4F8BB12456E798BC4FE8F851A929801264F493128223663D03932B2E2F2964786445ECF8282053CE8F9AACE1919B59F574
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-820603035&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	244295
Entropy (8bit):	5.454185343611895
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713FN:pfLeYc+PJxH8NNfFcrHurPK713j
MD5:	B5322CFCA51C69074051C6B148CE5A6C
SHA1:	A995F0F78FE3147A4BF3D0503F9A123FDDAD0CD0
SHA-256:	55270971FDC4172D5CBBA95DADD779074EADB9C50BF16C2B3253CCC6BC8FC363
SHA-512:	9D1824E860609AF7AB2775ACE28D22DED11D4678B89351B34BC03A54527D7C3029238DE45C126E52150B9A87F9242039679F3A646A2F5C7E46D66EE19BB051BE
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6961), with no line terminators
Category:	dropped
Size (bytes):	6961
Entropy (8bit):	5.206269624284813
Encrypted:	false
SSDEEP:	96:YjjLPU67DTJpXyrsaHkVUwdIE48a60q9pX94ayhZir09Z9Oq586n7e:GLN7DvyrsaHk72Et0EpX9KLir0d55a
MD5:	1109585CAEA8B2602278187F93643578
SHA1:	2C8B1117679C23B9E1653212355E84CEDB93AA41
SHA-256:	72C254E298C13A662B311336A98CAE20D39108B3E02A0946AAF9771CC808912A
SHA-512:	9343F771796E3B894D79510F17A4AA6DC0E1086F94D232AEB888A619A42D76528AC18CB0A433F5166A9D776174C09001BF391AB49E9AC3F581862FFE75438829
Malicious:	false
Reputation:	low
Preview:	"use strict";function GSPB_render_Swiper(e,t=document){let a="auto"==e.dataset.slidesperview?"auto":parseFloat(e.dataset.slidesperview),s="auto"==e.dataset.slidesperviewmd?"auto":parseFloat(e.dataset.slidesperviewmd),r="auto"==e.dataset.slidesperviewsm?"auto":parseFloat(e.dataset.slidesperviewsm),o="auto"==e.dataset.slidesperviewxs?"auto":parseFloat(e.dataset.slidesperviewxs),l=parseFloat(e.dataset.slidespergroup)\|\|1,i=parseFloat(e.dataset.slidespergroupmd),d=parseFloat(e.dataset.slidespergroupsm),n=parseFloat(e.dataset.slidespergroupxs),c=parseInt(e.dataset.spacebetween),p=parseInt(e.dataset.spacebetweenmd),u=parseInt(e.dataset.spacebetweensm),f=parseInt(e.dataset.spacebetweenxs),w=parseInt(e.dataset.speed),g=JSON.parse(e.dataset.loop),v=JSON.parse(e.dataset.autoheight),y=JSON.parse(e.dataset.grabcursor),b=JSON.parse(e.dataset.freemode),h=e.dataset.keyboard,m=e.dataset.onlyinviewport,S=e.dataset.mousewheel,x=e.dataset.forcetoaxis,$=e.dataset.releaseonedges,k=e.dataset.freemodesticky,_

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	5.004814475878462
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjOnFrPNncEQ9bDxH1lMckFHaZ4VI1VQ6hllo/:2diO4f1QKFrPNcEQPMcMHa4Qnhllo/
MD5:	52173E05E203D57DB4229A117C6EB0B5
SHA1:	34D6E418111D09BA5924ED36DE48BDE06E243550
SHA-256:	32C7ABF2A57953AB1F45A851355FDEE9875D65DAB38ADC40824EA051E2818F41
SHA-512:	81AB3DAF55E0752F089CC8A1650ADC8A2315B968B9FCBD0A24EFAD83AAC27F26085714201AF11279744FF7D5C208C1DCD0BBE7A3B8CA6E290E430A496800B98F
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/log-in-041.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M9.33398 6L12.334 9M12.334 9L9.33398 12M12.334 9H2.58398M2.83735 5.25C4.13414 3.00824 6.55793 1.5 9.33398 1.5C13.4761 1.5 16.834 4.85786 16.834 9C16.834 13.1421 13.4761 16.5 9.33398 16.5C6.55793 16.5 4.13414 14.9918 2.83735 12.75" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	751
Entropy (8bit):	4.743570531722352
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjK7yWcqTRS8CNQ1INQ4ak8TB2uVOSqjdSWJW4Lr36xRQjCuW+QCAFE:2diO4I1zUFcmRS8CNQtvk7SqhSmW4n3R
MD5:	979421E4152D0823941A6CF03CF2DED6
SHA1:	2DC52078B81E8686D14C50E76585E7502736CD74
SHA-256:	2DFCE3F2D7D8B23D0C6826D1E4D8868E8351B9C24826EC94E6A7C1519580D73A
SHA-512:	9B0DFB26FCBA27E53ED25D7EEB4AD0628F8CB3BE0383B9469A32DE87F7A00F6C022C8CBB63A91C85501D42A36C76A94B7DE0EAA0218BA4E57D964BD0781056F5
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/08/certificate-021.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.75 13.875H11.25M5.25 11.25H12.75M3.75 1.5H14.25C15.0784 1.5 15.75 2.24619 15.75 3.16667V14.8333C15.75 15.7538 15.0784 16.5 14.25 16.5H3.75C2.92157 16.5 2.25 15.7538 2.25 14.8333V3.16667C2.25 2.24619 2.92157 1.5 3.75 1.5ZM8.9982 4.65895C8.47337 4.0746 7.59818 3.91741 6.94061 4.4525C6.28303 4.9876 6.19045 5.88224 6.70685 6.5151C7.22325 7.14796 8.9982 8.625 8.9982 8.625C8.9982 8.625 10.7732 7.14796 11.2896 6.5151C11.806 5.88224 11.7247 4.98197 11.0558 4.4525C10.3869 3.92304 9.52303 4.0746 8.9982 4.65895Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19117
Entropy (8bit):	4.284692936783414
Encrypted:	false
SSDEEP:	192:eH/B6Tz+eN2rNKqT0d9TD/g6sqCqiPdjBTD6B5kjYnyJH2n7XhnK1sFylCFj5EbE:efcCeN2p0FS54FEhS
MD5:	08D2B88F8E07998C02B62B3C86968D7C
SHA1:	17DF33E9EA1D802E21963EA942BD9DA883ED735E
SHA-256:	4C1D5DA826BB3E6A0700FA18D2DE07C1B638BE6430D99342368311CA8B008069
SHA-512:	66253758A79B76B1FC497EDE3E1F606F022200FAD6BCDEF8A1245ECE327EEE4CE67E979D41DCF6CF23003CF7F22E31EFD427B35BF30827A4F795AEAE022B0916
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function() {. if (typeof jsVars !== 'undefined') {. if (typeof jsVars.sanitation_rules !== 'undefined') {. apply_santitation(jsVars.sanitation_rules);. }. }.});..function apply_santitation(sanitationRules) {. var simulatedInputEvent;.. if ('function' === typeof(Event)) {. simulatedInputEvent = new Event('input');. } else {. simulatedInputEvent = document.createEvent('Event');. simulatedInputEvent.initEvent('input', true, true);. }.. var validationRules = {. numeric: function (element, key) {. var regex = new RegExp(sanitationRules['numeric']),. result = true;.. if (!regex.test(key) \|\| !verifyZeroValue(element.val())) {. result = false;. }.. return result;. },. decimal: function (element, key) {. var regex = new RegExp(sanitationRules['decimal']),. result = true;.. if (!r

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65279)
Category:	dropped
Size (bytes):	135676
Entropy (8bit):	5.2512893359679715
Encrypted:	false
SSDEEP:	3072:BJkI9s9zLjkTbkC75OrynIm1/T5W9D/EL74ami0lLHb:BJv9YzLjkTbkC9OrynImRT5W9D/iP0lP
MD5:	62C6F89AAD925EFBDB3AA034C0A7AE69
SHA1:	55CD3831254BCD17BAD5B9C933D2BF36B05BEC9C
SHA-256:	E43A5802D5ED9337DA2E507C39C43080DE4305DB7E520E22FE3EC9FD83C1B72F
SHA-512:	BFEA48CEA1157F4F8EE742ECF6C730E830D94F93A7E86E709D72CB3128D895F249ACD7BE64258AF38F4F0546100DA81929CDB5DB958A6096375EE80B370C0F7C
Malicious:	false
Reputation:	low
Preview:	/*. Swiper 7.3.1. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2021 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 24, 2021. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s={},a={}){Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],style:{},setAttribute(){},getElem

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	5.16069672605295
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzKJUGFcAjryZj69VGs4VqmqZlloqo:TMHdiO4UJfDjGZ6Z4Vqhllo/
MD5:	F05BDAAB84318928C4309DC39C1D2301
SHA1:	23292F8B99051FB4EE6244C36A428801940964F0
SHA-256:	2CFCEE599980397D1877D136B83940E4A07DFCE8AF23ECFC754ECF7382308223
SHA-512:	2B4CBC0DDAB3F6E7A1149400D263596FC69FC1AFC071E449FFEF49E0A8F31CF22AA6CAFEF9845C2AA90E96C7A7D55A341E611469F7FB66B9C84752B23C36401E
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/prev-grey.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M12.5 7H1.5M1.5 7L7 12.5M1.5 7L7 1.5" stroke="#9AA4B2" stroke-width="1.57143" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	891
Entropy (8bit):	4.604993038776683
Encrypted:	false
SSDEEP:	24:2diO4I1zfE8jsU6POpaWB4kZkbE5bUYEQnhllo/:c31/aGw04wIY+
MD5:	E9AD2BF14D4DAF510C50BAFFB83407C6
SHA1:	46231BE4971FD8C27D8ED51B958F5CD9793E0C05
SHA-256:	8E6BFD4671F39C4EA4D322063AD25D3B3B8B5DB94CE68B1590CC36EBAF8862B9
SHA-512:	71965ED67CB8FF79EE6913C74E46277D45DF6BB9BEF4F212A2C20FCF4AB59A2CFF57E33F48CB93819187D96E524D13CBB328CF1F3261CED21B44F8B8E48876C5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M7.5 12H10.5M6.6 16.5H11.4C12.6601 16.5 13.2902 16.5 13.7715 16.2548C14.1948 16.039 14.539 15.6948 14.7548 15.2715C15 14.7902 15 14.1601 15 12.9V5.1C15 3.83988 15 3.20982 14.7548 2.72852C14.539 2.30516 14.1948 1.96095 13.7715 1.74524C13.2902 1.5 12.6601 1.5 11.4 1.5H6.6C5.33988 1.5 4.70982 1.5 4.22852 1.74524C3.80516 1.96095 3.46095 2.30516 3.24524 2.72852C3 3.20982 3 3.83988 3 5.1V12.9C3 14.1601 3 14.7902 3.24524 15.2715C3.46095 15.6948 3.80516 16.039 4.22852 16.2548C4.70982 16.5 5.33988 16.5 6.6 16.5ZM11.25 6.75C11.25 7.99264 10.2426 9 9 9C7.75736 9 6.75 7.99264 6.75 6.75C6.75 5.50736 7.75736 4.5 9 4.5C10.2426 4.5 11.25 5.50736 11.25 6.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33454
Entropy (8bit):	7.986802816061147
Encrypted:	false
SSDEEP:	768:pWIvlCIFXttrL+oLqX7KDHOl8KiOmLxDEqkHdM+:P0IZttrL9LmMHOl3/yxQqkv
MD5:	D40DA4DF9519C6441F04C638BC28C808
SHA1:	55AA15D00917D7C66289EC31F1F8EC662CDB2F97
SHA-256:	E31F02901021E615432F59203D3CBE994ABB2B5108216463408ABAAC9C589D38
SHA-512:	25D0B0059E2AC3DA399888D84EAFA3CFBA89CF3CB2B1B64D984CF69C9C1614121881C0AD38F6B0C8AF075904B8C85F5C970BCF136C421AAC0EA384C862DD98C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a....XIDATx..[h.U...g,.4...........>VY.>.E.E}.A.&(.R. "."....m..N..T}..T...R....d;f....s;.....&M.39.s~.e...s....wf.Er....Rc.L.x.P1R.R.=.2...Js.V..>U.m..8$...U.)....Yi....'.e..x...5,;.....x.`.ZnP..g;6'.eQ..<5Sl..J..H..V.?S..J.}.B.B.BX...5M.)T...r..H...o>...sn.I!H!.8L..q...YBD...>V...s.L.A..o..^.\.......X..%. ....5.....Dx.\|~c..>.$. ....,.SnF....n..h....B@B.Pn.#"..A",,....\.B.B.R..Z..mC.].".a...u.a..z.$!..[7+.......;v0E..J..Y.....$L...K.R....B`....s....K:..l.U..fQU.C"..G.X..D.....L...9.{.Q7...G..R0y.....(...L..3.4..*.Qw.>..(..b``... ..~.A..(.......x..h......H2.... `..+1.s..........D,o0a.&.....D.....b"..r.......$..m..$.%....N.k..V." 3e...y<..2..w....L..I/....P.g..B.....C$.._j..Cy.=.F.......&.....L.@......$b[../.t..w.B............q-z...G.0:..H.a..f.drC.'Rh!$....?..Y.S...q.h.......R.8.....Al!tQ....,.r...t,..u....H)D.dR..D.,.......W....2l.......3...).ki PU..........].EQ.!BD..L..d.F94i ..z

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61260), with no line terminators
Category:	dropped
Size (bytes):	333021
Entropy (8bit):	5.665811304759481
Encrypted:	false
SSDEEP:	6144:rwSPrhC62ERkfYQWoY6SKL4rOPpUxzFgIAhqDsd03E7fXaKX6AmFRxm:rwSPrhC62ERkfYQWoY6SKbUpFgIAhqDo
MD5:	E1135C7F31A16440D5FC9944B7402D81
SHA1:	5DB6750E524410C681240C0FCE41A67610D2E20B
SHA-256:	850B42447426E232E97C525DF9BC3AC34A1C18D888C70B771D400306BFA4B954
SHA-512:	00E0FAE9C0548B9DFD5CE9445E366B947834F6AB2FB1D7971BA2B6217CAFCCED98FD5A211178AFE24A3D0D9549A75B722C94669AA9FE82D90AE2CEBB79250E3E
Malicious:	false
Reputation:	low
Preview:	(()=>{var f={5605:function(f,e){const t=["crossAxis","alignment","allowedPlacements","autoAlignment"],d=["mainAxis","crossAxis","fallbackPlacements","fallbackStrategy","fallbackAxisSideDirection","flipAlignment"],r=["strategy"],n=["mainAxis","crossAxis","limiter"],a=["apply"];!function(f){"use strict";function e(f){return f.split("-")[1]}function o(f){return"y"===f?"height":"width"}function i(f){return f.split("-")[0]}function c(f){return["top","bottom"].includes(i(f))?"x":"y"}function s(f,t,d){let{reference:r,floating:n}=f;const a=r.x+r.width/2-n.width/2,s=r.y+r.height/2-n.height/2,l=c(t),u=o(l),b=r[u]/2-n[u]/2,h="x"===l;let p;switch(i(t)){case"top":p={x:a,y:r.y-n.height};break;case"bottom":p={x:a,y:r.y+r.height};break;case"right":p={x:r.x+r.width,y:s};break;case"left":p={x:r.x-n.width,y:s};break;default:p={x:r.x,y:r.y}}switch(e(t)){case"start":p[l]-=b(d&&h?-1:1);break;case"end":p[l]+=b(d&&h?-1:1)}return p}function l(f,e){return"function"==typeof f?f(e):f}function u(f){return"number

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35622
Entropy (8bit):	7.9860087146220415
Encrypted:	false
SSDEEP:	768:MxzxngcFcDdXTBCZ/uOsVxhy5a5p+jrxS3ClHnDGe47EECr:slgycDdXTBCZWO0xhN5p+jrM3YHDGeQk
MD5:	4DE715318D0A84FA88EE0B6FDB563CDE
SHA1:	1B9DFF186779E2C4C9312B9013F0172B05B76C5B
SHA-256:	09DA22C15A66A6154904B3A0C9A69A926F9433D2025CC02F12D7D8D12640163A
SHA-512:	D40353A088B40FED6027B5281516C7B9D035823FC56565C5303B162B8B028205A2B2E1927631D789BA8734BC759826553465234E6317656A8AC8140D76AC161B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a.....IDATx.....`....P(.Yx...^.W`.6.V^.....X...............09\|.$.N.C....(..w...../..^Hp.H^n[.6.......<J..Z:.s\|..oB,.....X[..t....i.=K.Xj.\.O....@%....:..,y.X...Q....]..e-....$.}.#.k.}.q]>....j[..3...:4I:...C.>m.3.I.ye-.@..?...h2).`.,I.-...Y.?P.....B..].p..i.=A.1...D.....<..x.a..I..c,0W.9.U.gq.s..g..<G^...ZY`.h.O....Z./_<G.)..w...#..D<M.J..h.$M.%).?......UwOU....i.c...0..Q.v....I.#+J.....u.\...(.....o.y{.?...6PJ.....x...l.I.BU5.F.O.C..0.#.Rd..R..o77.L"$q...-......O4M.c.;......$....!.Vh!.~..v...u......4u.q.Sz.Z.H.ET..A..bn../..E..\...e...D@.5q.\\..."w..ePD..Bo.B[hiO.....%f..$....<..sN....<.#...NwW'.....7C.#LM..Y.....\|..C{....LN..x...f.n'&.YYq33.........C....1.b..?.....-....5.W..v...026".~.qv..S..a\03>9FwO..}]..74..n....b. ...33.,/.wpH..3=5..M.\.&......4........0.].,..au.. .k\|H.!E...Bva.J..1..r.R5.......N.....VK .E4.....T....\|...b6.Q..),".....(.J9fZV.j...>.pH.....@/..UW.....z.mlR...``

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	38936
Entropy (8bit):	7.96745499047785
Encrypted:	false
SSDEEP:	768:pv2cp6SDTGj7hdo3CdKV736CO4M0FtT9BCvIEm4OPODiz/:DDTGjI3CdA3wnEh9BC7mziiz/
MD5:	940E3B6A2F2D6F415434D34E4454D300
SHA1:	93B6BB8DC2B4622DA5F09BCF36EE22285C3B2797
SHA-256:	035FD4F34195BC7D63F75F5AF3B8811435BC2ABC4323274826FAAE2627B15F37
SHA-512:	23F1DE52278EAABC65C81FC36AC18A977E99085B7294120779C46F576530F2558D2F1835C7E4C505EBF23F5B9868F3A1A5655003C9A716723EEF3058CAB8D7F4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............6...................................................................{.o&X.\|.JZ..^..i.H.r.ig%.Y...ff+.m...9.......,.b4j..5...c..f._..p'..cZ5X...6s...616...1.........H...R......J..MR.z./Gpf+.m..t;.,....O9%mfb..5$..b.....`.^.w.j.K.....&hA....n..}/.w..<.tkRV...V./lz...M.W........9.,w1f.u.c..1. ....&.a.3....Z....cVn'...1.#M.].0..+..ag...c.J.O......w.].O..u.;;3T.KT.f.<....;..h=.....5&..OQ..3.0;qb..Q..9.E....?6...........k...\|.tm\|zk..]i.\|zkN.f\.J3U.`.:....-..b.3n8.......0H........$I...<...6Q...,.`,.O.....C.....]6..M...%.t.L..w#.....1..Oc..l-............Y.9KR.Ghv..-BkBra...I.6....L.\|........g..B4...m.M...F}..;=.....&.J.Ft.b...=.........qb.E.....K....fv-..a.>...:.T."H..e.....s.../4.p....B6.a....]...#.w=k.(.83..c.@.m.....a.Ob.t6.v.1I.f.Wj1..v+...G.y.m.........".L..OL.o......

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 66060, version 1.0
Category:	downloaded
Size (bytes):	66060
Entropy (8bit):	7.997103368363453
Encrypted:	true
SSDEEP:	768:wxaqnzYiAEoioj1dIKnTEuKsiPK6rEeSQDdXVFXqYJdRDccGEfp+HyItxio/pT4s:wMUYjEo7kyu3EMXNdicPItxd/pTSwi/E
MD5:	446B2478B492C0E073BD42C367F73BD5
SHA1:	807D07B2F6B46872507B6E65622C3094464DDEF4
SHA-256:	42278BB8297B40524CF20F5A28D777D91A9046E714F46C0E32A5962C705F072C
SHA-512:	2C7DBE15FB1444D6A6B00AB87913CFE7B96FE6D1151587EBE4686E3874BBC44353117BD2715B7148A96B53ED9950A627F0364CE4FCE919B9E6AB44E4CE62C3A0
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/blocks/fonts/Roboto-Bold.0919898f.woff2
Preview:	wOF2...............p............................?FFTM..~...$..L.`....H..<........E.....6.$..8. ..}..y..)[......n.....IU...P.v#rw.%F.&.7.O.c/..M..v....\%.........../..y.%.8Z..v...As.DL)..1..7.u....>..bUG.)..&b..f.s.w..~.s.H..2.7.@..0..Ksa.h.).D.....R....d..6..s...I.;\....._`C....,.+n.."...E.....s..Z..ay.C...E.f<(....Q.f.i.J5..q/0..j...u]....}/......Y.....2^t{.)......Ag......_?..E.../..L..4....,...c.."U......fl.....J........b......jRL..K..^......3..;.......p...i..1..k.\.f..M..3L6&Z.S.R..'..;.......L.q..:..`Uy-...)I.,.1.W...)(..L.......ai..'o.Y.U.].Q.c.}/..N.,.Wm...#T...f.*........U...-..R...</..D.....}......bF.D&.k......Em..... 0`T......,..-)X1.PL..+\|D...J0.......#'.b7.G.Z..%...(......"B..1J$.F.A.62...[m..X. Hm..dT.1.a.lllDn#F...2..<..._....&x7}........x...bk....jHb.Q.o...3...n........<.5Z7&.'.GD.'.....[MO..;.Ip..!...)..(E.u......s..[.+.f..N.t....'.z........]..x.e.!h..........y._..1....5.J.(......-....A.3..FR.`....U.3...P.Bc.. .Y..R..5....

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21637
Entropy (8bit):	5.424116787566319
Encrypted:	false
SSDEEP:	384:yEgCETEIECnE8EzEnDxCDnDBDdnD9DADdRdgCRCRsRwnRORnRynyCnOngnMnnvK8:fyAtJBgDaDlZR2jdz+kOKRMfQiYvEz9C
MD5:	34F3C91A648E13199AAB212D68548E71
SHA1:	1432E377EB181BD29833D7766EDE6907D8F54628
SHA-256:	48F530DC793A4E71729D3AFF42D1519F4052674D15FFFCA0923D57C88368C150
SHA-512:	84E2EF3BBDA7063C51CE7DBB9567C0A56D7C9C6CA2BE362B9E5EEB74697ECB77C4D91CF94EC16697ABCF0C95C6F0E906E364B6D5CE1AC471977A5F063CE0948D
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,300;0,400;0,500;0,700;0,900;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gsta

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.554100478248077
Encrypted:	false
SSDEEP:	3:OrniuPcoSTXLcnY:O79UPTXIY
MD5:	9BEFC807D03D5A3FBE579A5D0FF85F1A
SHA1:	F81C88EFAE0FFC8558F66E8B47D3898323BD4743
SHA-256:	230A87BEE05E11A72FB66915F27CA13FFE5313542FC67D323E00921F507B9876
SHA-512:	E3B13437AFEF19FC86B38FCC3F796DF2988093F5AA0DA5768E0E3F383DCB7A14EFE1BD3E119B9ED1157EB32473BE7A3DB411747E08207B709BDC7DD36FF5EEB6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSJQkGEN8_lFVMBBIFDW3a7h0SBQ1oq9a6EgUN6qwpMxIFDY8jtmA=?alt=proto
Preview:	CiQKBw1t2u4dGgAKBw1oq9a6GgAKBw3qrCkzGgAKBw2PI7ZgGgA=

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65509)
Category:	dropped
Size (bytes):	72821
Entropy (8bit):	5.3846680156395665
Encrypted:	false
SSDEEP:	1536:jFb2fh8RSBSBHY/Zkb3A2FWKst3WCl7uXYQ84k2c7FNBANcVJOYOrW:jFb2E/CTntF6XV8jFWIOYL
MD5:	BE024C31DCAA0A265B9F8AFF1A9B8364
SHA1:	9F0CE95BF807CB1EA2C304E8F56D9A59AFE88475
SHA-256:	9CFB97C223560A0BC1D5870DFA50663EDB399D3430E51C241E377547A4D56C76
SHA-512:	12E45BF9803AEB5B9F49B7F8E4D908701EA7D69F896BACA949DBD279C3FDCFD40E0F5A1EA103786F1256B2AF7A8A37617D60101A57B85A15498C2122CE322F9F
Malicious:	false
Reputation:	low
Preview:	/! 20241102-3-RELEASE /..function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}!function(t){var e='TFASC';e.indexOf("{jsScope}")>-1&&(e="TRC"),t[e]\|\|(t[e]={})}(window),function(t,e){t.TRC=t.TRC\|\|{};var n=function t(){return!0},r=function n(r,i,o,a){var s=r+"/"+encodeURIComponent(o\|\|t.TRC.publisherId)+"/log/3"+"/"+i;return a&&(s+="?"+e.TRCLogger.formatParams(a)),s},i=function e(r,i,a,s){var c,u=new(t.XDomainRequest\|\|t.XMLHttpRequest);return u.open(r,i),u.onload="function"==typeof s?s:n,u.onerror=n,u.ontimeout=n,u.onprogress=n,u.withCredentials=!0,a&&o(u,a),u},o=function t(e,n){for(var r in n)n.hasOwnProperty(r)&&e.setRequestHeader(r,n[r])};t.TRC.TRCLogger=e.TRCLogger={post:function n(o,a,s,c,u,l){var f=r(o,a,c,u),d=i("POST",f);l&&"function"==typeof t.navigator.sendBeacon?t.na

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4148)
Category:	downloaded
Size (bytes):	36425
Entropy (8bit):	5.332174087233619
Encrypted:	false
SSDEEP:	768:so/MPtWU9YwxAHXUpxbY/Y3YOgQxz0SYeYZYHYZYVY+YSYQ84OKOzOVD+CzjQ3uy:RIT76HXsZwuvLqS54WAcl/C
MD5:	6EC2438E07F00B225420A7B386C9433F
SHA1:	968F0FA71607B142941C71DDA14C9008B1294365
SHA-256:	4AC72D4F35094C36F31D578EAE5D8D658829614BD537732BF58B4BE23FCA2AAD
SHA-512:	8B792DEA4ECFD57F7912EC41540AC66D9E60C334867B0F36C308756801EC78B0B346518FD40135E260FCEF48D58072CA8F2006513EF5285BB5E842C6494EE31C
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/289310888271145?v=2.9.176&r=stable&domain=kartra.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113%2C201%2C200%2C202%2C207%2C208%2C209%2C205%2C197%2C132%2C163%2C196%2C198%2C122%2C157%2C145%2C151%2C129%2C233%2C116%2C127%2C234%2C165%2C119%2C236%2C166%2C136%2C123%2C154%2C148%2C193%2C114%2C128
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	470054
Entropy (8bit):	7.984990174187891
Encrypted:	false
SSDEEP:	12288:CFcd8aSaDt7AFxyD+2JEv7J2vzHagPJknG7fulLNu1Dki46U:CFBaSMtUFxG+2Jy76/RknG7aNSVU
MD5:	388A89082C61D9486E7CE120450C9D36
SHA1:	B7D4439408268685D8872EC66C0560604C896732
SHA-256:	DBF988BC26AB93A07EC579DCF4DA8D66E0CB3DA64BB306C6559E0963EBD465B3
SHA-512:	C07E2194E4CFF6FA02D45DD2008D8CD7ED03B5252B142274CCA8DCF5963A710CDB8522C08209512126AC5E051042DE5AE577B84A940C6845E944DD4CF28C3C90
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/Screenshot-2024-10-31-134439.png
Preview:	RIFF.,..WEBPVP8L.,../.....Hl.H..S......?...I ....;..K>..... .$j"...Oz;...........P@..1qx.f....L....6.N.re...R@.@.K...Lc..........R..k.Fj~.....W.b.=35.....l.R....&..TWY.Z.4...Re.i..n*.....''.u`.^^....w,..."....[.Y..{eg.'..1..F...........jN...g.-.{.1.i7.4@bzc.$f'....H...Fs2.JT..9...@..L.\$<\|x...N....._;.m#'.m.VF...J....n....z8.<.@9.$I..R...m/ q.s.C.....%.nm..f..Q......."\._I......jd.....1"....."".."FD..c.."........1b...`..D .<b..c....1"".y..@..K`.......D..j..1...cn..#...N..@.@.........IP.....+%...... "...1"..D.@.b.$J...$.zw..i....8\|..3. ..H......hx.J)..O.#p9..........R....@....y..bc.e..4.e.6.@+.(cA...2.L.?.`./0.e .............`......r.eV..I......q%#"b ........B\|......O\|.r..y...c..LX.?..D\F.0..^4...x.......... ..@.on.F9D.!.G0X........\|...c.[. ."...>.../...`p4.0.....R...x../...#".s..`...Y....<.".d.....ga........F..^.....@..$..'....q8D.........!Vr=....,...@<<<<....?..W... .....y...X70.e.xl.J.0.U`.....?).._n...!^<<<~>~>D..U......f.....X.z.&.t..xy.........gmg3

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	839
Entropy (8bit):	4.556860668528336
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjFeT9jvBroJ7aTEPgX0sjPuR70BOSivPb28mqgAwqW3I1VQ6hllo/:2diO4I1z5KodaTOUuHSmg6W3Qnhllo/
MD5:	1A963085A80F29714592D7592D5A0298
SHA1:	5C76711327B64AE91F88C79F998516FC8E6E5827
SHA-256:	67E4585DF3D751555AAD1353EDE06F0EB921B8E5611FE494921C2CA521FD10C3
SHA-512:	55ED3910332923F476D28C532FFB928D4395AE37D93739840AF46CECDA3A40DD39C0A6B78D9A3AE1A0877FBE3B54D73E00B3B5A1FC6A8429B5B39974C4B08762
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/create-icons-3.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M16.5 15.75V14.25C16.5 12.8521 15.5439 11.6775 14.25 11.3445M11.625 2.46807C12.7244 2.91311 13.5 3.99098 13.5 5.25C13.5 6.50902 12.7244 7.58689 11.625 8.03193M12.75 15.75C12.75 14.3522 12.75 13.6533 12.5216 13.1019C12.2172 12.3669 11.6331 11.7828 10.8981 11.4784C10.3467 11.25 9.64783 11.25 8.25 11.25H6C4.60218 11.25 3.90326 11.25 3.35195 11.4784C2.61687 11.7828 2.03284 12.3669 1.72836 13.1019C1.5 13.6533 1.5 14.3522 1.5 15.75M10.125 5.25C10.125 6.90685 8.78185 8.25 7.125 8.25C5.46815 8.25 4.125 6.90685 4.125 5.25C4.125 3.59315 5.46815 2.25 7.125 2.25C8.78185 2.25 10.125 3.59315 10.125 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1211
Entropy (8bit):	4.319167383453353
Encrypted:	false
SSDEEP:	24:feqWqJGEHgj5Np5/r5l3J56cr5iej5f50KPLmDN5Av:ZG2gjTpRrjJgcrAIFOKi2
MD5:	AB79D6E66C74886D4A29AD0CC8522CE8
SHA1:	B1CEC2EBA330856AAF1B26FAB2BFF7D6E6A90844
SHA-256:	B8898B6D4796F5E14D6F9145CF43E8A04AF3E4F12FF820419E9E69FCA561E6F4
SHA-512:	BB2BD29D66A6493052ED5BBD791A752838EB527D9E08FFB36FB91101CC26BAD6D09AE5A709E4ECDE87EA06FAC3088DEF9E256B0FFE8915965A1FDF687879C9AE
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/assets/build/images/pwa/site.webmanifest
Preview:	{. "short_name": "Kartra",. "name": "Kartra",. "description": "WordPress theme by Glide Design",. "icons": [. {. "src": "icon-48x48.png",. "sizes": "48x48",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-72x72.png",. "sizes": "72x72",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-96x96.png",. "sizes": "96x96",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-144x144.png",. "sizes": "144x144",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-152x152.png",. "sizes": "152x152",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-192x192.png",. "sizes": "192x192",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-284x284.png",. "sizes": "284x284",. "type": "image/png",. "purpose": "any". },. {. "src": "icon-512x512.png",.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	261527
Entropy (8bit):	7.988632170328057
Encrypted:	false
SSDEEP:	3072:ZW3WeDfL9BaYjcAYQgZM06gE4kVmdp7gQWKEd7LypmzA7AdCx9JGnBUN8gx8b5yD:CDfTFj8u06gE4kVggQid76MFMrX
MD5:	6D949DCD1F701A6CBD3C763FA95C8AAF
SHA1:	EAE417F38A334521C3DC2BC0758771F70997B789
SHA-256:	1507D40D3BEA51FDCAC0B761BA18D34C37259A12DDA6E50C07BCB515C3F9CB48
SHA-512:	2C9273093A39812F343D585DECB63F53173E9DFFAFECC6E6A88EEC744CCD5139226BF7D88A2FE60DB7839B93417E549D6A81F6D0B3DFD2F18C773AF7667EFD2C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/section-hero.png
Preview:	RIFF:...WEBPVP8L-.../..]..Hl.6l$.......`;..".?.z}..W.$.aK...........y7H...l%=...%@D.q!..R[.y[. ...I..1#.4.zT?O..:...t..-lr..I....7 .m..<.GN....'I.....%....#!.$.i.#>.....uN,.;.-L.R[^WYbI.I...$.....H.0+m....^B.T..A.`HP..%....c.E....m...e..&9.].X..8...9..-...l.l..."...P..kIJ.)...azZ....%i..mwY-.:....v.mw....4`?<....,..v...l..E.....I.d.%..$}....V....t....6.^h..$m.m..h.....m.u[g.l.7..$.#.mWI.;^{].....&...'..HB2!.J.-.O..n[..-..n\@'...LB2.}...%..a.].n[.{I...`..$pB&A.&v.......%hW.`..6.!..@2w2d.8..+..........qB..@n.._G9L'./.......$.I...%.......R..bw..z......9`.$.3I\|Y..f..b..]ii!.r&.0..O>j.vk...VbL..dI..).Tr.....i..n....Z#.)..d.8..._...B>j.........I....;...S.E..O.G......:....'.'.......5.r...I......`B..m..C ....!.....~;...@5.$Ab..@...$....7.r"I.l[..tW._.......H........c`.""x...szy.p..\|E.`.,e..{xM..9.qs.. ".\.R......x#"));.M.p.n..1.q\.N..?...8.dG6..p..K,.....1.#..b.......W...R..,C.i. ..".&..v.3...DD....'....l6c.xg..H.9...?....Li..^...l&..,S.C\.......I....

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1408
Entropy (8bit):	4.360668469511988
Encrypted:	false
SSDEEP:	24:2diO4I1zI8ASjTPEvaXPa9fw+lJt3CcdMLydhT5Bnxt/Dso/ZtFXP7r9yi8SfQnU:c31GSjHXi9HJtQ2td4uDruk
MD5:	30409FCEDA5C7F7224ADB45657BBF742
SHA1:	7F5D0AE93CB30DD7B4047789416B8AFA30CD9B0A
SHA-256:	8315C0D9C97B1A48632449653FBCA3F903E0774630118453B2B02F8888F9972F
SHA-512:	FBD449550A4E59337F23435AE3E42DE40080F4E7976E34043D319AEA9E381C3A773D8667C42F399414A0312A0A0738DBD9C6233E5E718B4ACC253528B5A78418
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M1.5 3.45C1.5 3.02996 1.5 2.81994 1.58175 2.65951C1.65365 2.51839 1.76839 2.40365 1.90951 2.33175C2.06994 2.25 2.27996 2.25 2.7 2.25H15.3C15.72 2.25 15.9301 2.25 16.0905 2.33175C16.2316 2.40365 16.3463 2.51839 16.4183 2.65951C16.5 2.81994 16.5 3.02996 16.5 3.45V3.95205C16.5 4.15364 16.5 4.25444 16.4754 4.34817C16.4535 4.43123 16.4176 4.50993 16.3691 4.58082C16.3144 4.66082 16.2383 4.72684 16.0859 4.85887L11.2891 9.01613C11.1367 9.14816 11.0606 9.21418 11.0059 9.29418C10.9574 9.36507 10.9215 9.44377 10.8996 9.52683C10.875 9.62056 10.875 9.72136 10.875 9.92295V13.8438C10.875 13.9905 10.875 14.0638 10.8513 14.1272C10.8304 14.1832 10.7964 14.2334 10.7522 14.2736C10.7021 14.3192 10.634 14.3464 10.4978 14.4009L7.94783 15.4209C7.67218 15.5311 7.53435 15.5863 7.4237 15.5633C7.32695 15.5432 7.24204 15.4857 7.18744 15.4033C7.125 15.3091 7.125 15.1607 7.12

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 972, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	92078
Entropy (8bit):	7.91950343137995
Encrypted:	false
SSDEEP:	1536:r0JTDD+OMrxK0NOEvyKq8K7O7uvj5gBg8rbD/3lS3uDxR1AyQCciplZP:rUPG0oy6K7O6b58lrH3A3y/KyQCdlZP
MD5:	7A26769D96C2D54257080CE345024902
SHA1:	CF0D1E1D8C9C15AF0C452C0B01502294829BA7FB
SHA-256:	A3E4CDE818BD2FF1A061C8948D120C1C3D6CF0EAE1C2A644ABFE103BC330D46F
SHA-512:	996DB3CB8C55749D03125AED2FF8B2188829D784A4F748C91DF1FC96DBFD7252ACA44A879CE899536D30DD9BCCB22B57574818962E9592CC037A7E88CE4D5CDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............,.3.....sRGB.........gAMA......a...gXIDATx...Qn.F.E.W.?...2kc..I.LD!.@..s ..v........s.....q....Jg.m..WR.....~.\|...;.......j.<.....~.....Y...m..N..l..........Um...[.5'.>v%...\.....^.N.....H"@.....0.................4......4.....s...............!@..... @.....0.................4......4.....s\|.F:.....b..;.\|I..Y.]........Kt.U.uwVT..y.k.WuRS.....!.,....[u.._...O.X{.y....TY....\|Ii.g..A.A......n.....O.qrF....<.......o.h.....................C.......->..FeM......K....<.I.......#@.........83......@......`...............9.h.......#.X.c....#C.......?YwgEU.#7\......;Ol7....I../...~...o....V[..._d..Y.t....@z..c[..............O....3......85..............9.h......h........p9.c......N..AwgEU.#.^..f..;+6.....0...W.9 .............`&..............9.h......h........p..c....3..f.....@...uwVTUX.....+T'5;...y............W.j..7{.y..3..)..~.....V.....}.M.........R.........&...\|.....0.g@..... @.....0......Q..F.E.s-.?d.H.ZI.;...A..>..e.*`...........

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (404)
Category:	downloaded
Size (bytes):	1057
Entropy (8bit):	4.8573028724948415
Encrypted:	false
SSDEEP:	24:4t5l7lA3BZ6W1BfuafMN+yoZFgyTlCI+H:m7Cy01S1IbTq
MD5:	17CB45A014A028D6413C83FD7F51B302
SHA1:	FD822EEDB15B4DE8480E18739935B5B8CD1C8336
SHA-256:	1CF6DC3C4AEC0E9AF90FEC9C73760A65244F2F4C7E349FD89240FF04C25DDC67
SHA-512:	86E7B5F2746C23061EF6F65251E0E78A9E49B849B65976BD9A59151AB3665796ABE6F40562315DBDDCDC5A3820589BFF8EF4C5B662A03E420126D524086DE03B
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/recent-posts-widget-with-thumbnails/public.css?ver=7.1.1
Preview:	.rpwwt-widget ul { list-style: outside none none; margin-left: 0; margin-right: 0; padding-left: 0; padding-right: 0; }..rpwwt-widget ul li { overflow: hidden; margin: 0 0 1.5em; }..rpwwt-widget ul li:last-child { margin: 0; }..rpwwt-widget .screen-reader-text {border: 0; clip: rect(1px, 1px, 1px, 1px); -webkit-clip-path: inset(50%); clip-path: inset(50%); height: 1px; margin: -1px; overflow: hidden; padding: 0; position: absolute !important; width: 1px; word-wrap: normal !important; word-break: normal; }..rpwwt-widget .screen-reader-text:focus {background-color: #f1f1f1; border-radius: 3px; box-shadow: 0 0 2px 2px rgba(0, 0, 0, 0.6); clip: auto !important; -webkit-clip-path: none; clip-path: none; color: #21759b; display: block; font-size: 0.875rem; font-weight: 700; height: auto; right: 5px; line-height: normal; padding: 15px 23px 14px; text-decoration: none; top: 5px; width: auto; z-index: 100000; }..rpwwt-widget ul li img { display: inline; float: left; margin: .3em .75em .75em 0;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1003
Entropy (8bit):	4.847056080139776
Encrypted:	false
SSDEEP:	24:2diO4I1zyaWwqtyBarSJdECnJ3sPfzybBF3QnhlloSFIxh:c311oaaeJdECnqfmnL
MD5:	811AC5F17EC2185534DADE0CA5CF5480
SHA1:	2FEC5D99917F183D423ABFEA0F284E43F3EB6279
SHA-256:	8F0419EBDDB6D80B7451F2066A0CE3AA107B46BBA997BE3CD5E015F949FBE465
SHA-512:	6BC199528CB9129F63ED5092C56897688321D85214403F8724F2862596091224A0FDBDEBBBC5D3284964DA53D92E09881B4AC3FF230B96CDAE117DDB54DFADAB
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/create-icons-5.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_332_2409)"><path d="M1.5 9H16.5M1.5 5.25H5.25M12.75 5.25H16.5M1.5 12.75H5.25M12.75 12.75H16.5M5.25 16.5V1.5M12.75 16.5V1.5M5.1 16.5H12.9C14.1601 16.5 14.7902 16.5 15.2715 16.2548C15.6948 16.039 16.039 15.6948 16.2548 15.2715C16.5 14.7902 16.5 14.1601 16.5 12.9V5.1C16.5 3.83988 16.5 3.20982 16.2548 2.72852C16.039 2.30516 15.6948 1.96095 15.2715 1.74524C14.7902 1.5 14.1601 1.5 12.9 1.5H5.1C3.83988 1.5 3.20982 1.5 2.72852 1.74524C2.30516 1.96095 1.96095 2.30516 1.74524 2.72852C1.5 3.20982 1.5 3.83988 1.5 5.1V12.9C1.5 14.1601 1.5 14.7902 1.74524 15.2715C1.96095 15.6948 2.30516 16.039 2.72852 16.2548C3.20982 16.5 3.83988 16.5 5.1 16.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></g><defs><clipPath id="clip0_332_2409"><rect width="18" height="18" fill="white"></rect></clipPath></defs></sv

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	43767
Entropy (8bit):	7.974190217576844
Encrypted:	false
SSDEEP:	768:3f42PNXmeJ7W/SI0VCxg6ON1GRqzr0Ohh9jwktuEzqhPVCRp7imBNcT/4gm:AAWet6Sv+Ogq/0ovtuEzoPozfBNcTxm
MD5:	8B431452CD312C761FD56A2F78271078
SHA1:	D79B2537E87E935F8AFC7413227EC05D221089D0
SHA-256:	C128240F82D5CAFDB538C618382B4477DCDE41C8E5D7F7D891059DFAF03260C8
SHA-512:	5098BF50635A081C3DDE474A76C4AED21EACBC22BE43EDEBAE499C932583D11EA7FC4E951188BBB0478892B6080E1EFD0033F06525C9BF3D256D6D3EFE978FB1
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-default-7.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............4.....................................................................gWUg.d.+....J...&(...4.....Vm.`.....m.j.Z..l...hQ1.P...h=..(..h7.P>'v...s{7.\|../..Vd..0...W.(.n...Ur+"....5...f.\|Z....Xo.`.6..@.3X65.Uj.......5..hm.3x.......?<~....S.(.N....uZ.YR.........X....h>..j'A.t..@.k..P6..EkSa.....iO...-..8L1..-.}....%z..'WJ:Q....D..dt...QZ..w6..{.c...'.l&..6..E5.3P65...2f..6..6.....>..]s.d........o.;t.:gn.[.-.quVP..E5...t.........v....Vk..V:2.a.^.@o.V.....;.6.o1.\|L.'a.[...x.JW.U.Ju...L../..]..@h..C^>.X.oc.}...\|.....q.h5..h..."...E{SA.m.A..'...c.M...h'6...~?..J.s.L..;..vJ.R.D.Y..45..t.....m.....a>.sn:...mM..XkV...."..A.}........0L.4&..~.....{eN..v.[u..q..GD......S....s{.m...;0.9...t....N...2)..Z...@.j]..2O..>:.Khm..............\...z...>...UE*..PkW.w.c.{o.;a.v..x.m..m.F.m..j.x.(...c.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.49/clarity.js
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22784, version 1.0
Category:	downloaded
Size (bytes):	22784
Entropy (8bit):	7.988669160179626
Encrypted:	false
SSDEEP:	384:dmb2s1YSoHGuucUyhlmMX78vlf/u7nQjAEOLPLm+U0GiL9m6lQDmqF:dmb2sqZHZdrmMX7mF/gQmrLFrGiJ/2LF
MD5:	2B0AE6C1AE64417B47C606680D69279B
SHA1:	5DE90855A8684A8FB8AE38F24E3305DD98E12344
SHA-256:	60469610B77A3AD808E54883E32D3D60B1D93C25C334F81980A8AF6887CEB573
SHA-512:	E8454A22B8AF2F34E44CF14231166A10D0DD76FDE6D5B4EB0EE36FDE3B8E42FD2685897B330650F3C66916A5E7B4E51D22A3B70E96A4ED8B4075EC245A71130C
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/themes/kartra/blocks/fonts/Outfit-Regular.266420a9.woff2
Preview:	wOF2......Y........0..X.........................?FFTM...R...6..`.`..F.....p..u..<..6.$..t. ..u..O..._.IP..}.. ......J....S.........F.r.......d"c.\....8QD.n..."..r)Y./..$.,MJ...Q,{...dE.Pn...M.PH4..RH.f.LY..\|..dTe.3b..2.4.!a...U.gH...2..+...\.W.A.M...M.....GJ.....b+........j....p./..b... .&sBn......)g3)x..&4B......r.....[J)..)....~}.._.`....)...I.-zP.A>.A.. y.7....9O..)..[..ED.....E..R...]..IHB2..J+z.?..O..\|t.....z.1.Q..&...;..>....d.2.+K.&..u3....,...>jN....~..}..`.....%.../_B..HU..rD...^B .$..Z..J.RRh.6.4..... ..#..G..nE.&>...C..K.nx........A.x..%iN.6....(......;az.......8.?.3a..N..........}.!.4....MP(.!.....c.j..\..........&N$..s.<...-...c(..@#.j..a.>..}._.B[^..BW....mZWUW...4.. -:9. ...Z.y..y.f2.O&.".Ulyip^o;E.9...&.C..3..V.....@..#....[.v..!....x._.........7...5.....@..l.......9..].XE.$..c....1..\|...m7(.@.........1.R.1..Y.`M..I ..o..T.r.>d..._...S..[...1.-........h.^MR1.8x.+A5.6.7[..;.....H...............l..C..R....g.2,..<9..u...]r..8.!.*H.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	downloaded
Size (bytes):	288572
Entropy (8bit):	5.559541473438558
Encrypted:	false
SSDEEP:	3072:lpwizDGLET7do2n0Z5mptcY0/H8+ARUrOS2WrDm6DcM8rT/cLK:1GLg7dojczKiSR9cM8rT/c2
MD5:	952F9969B09FEA306F7DF63B13655B23
SHA1:	14B1DBC3D6721A728E4351A3A32E9C723ABB8BCA
SHA-256:	4EA45C73676531947E278B49470896CA5D26B0E033CA0097314DC423C728C376
SHA-512:	DEC54A0A8125894920B0813D01DB49CDEA8C2DE6721B8233C46633775F5D27A2D6CD4B780B26405A40719C6736CEB136D0CF458C509416A093CF76650F6ED69A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-975786519&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-975786519","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	839
Entropy (8bit):	4.556860668528336
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjFeT9jvBroJ7aTEPgX0sjPuR70BOSivPb28mqgAwqW3I1VQ6hllo/:2diO4I1z5KodaTOUuHSmg6W3Qnhllo/
MD5:	1A963085A80F29714592D7592D5A0298
SHA1:	5C76711327B64AE91F88C79F998516FC8E6E5827
SHA-256:	67E4585DF3D751555AAD1353EDE06F0EB921B8E5611FE494921C2CA521FD10C3
SHA-512:	55ED3910332923F476D28C532FFB928D4395AE37D93739840AF46CECDA3A40DD39C0A6B78D9A3AE1A0877FBE3B54D73E00B3B5A1FC6A8429B5B39974C4B08762
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M16.5 15.75V14.25C16.5 12.8521 15.5439 11.6775 14.25 11.3445M11.625 2.46807C12.7244 2.91311 13.5 3.99098 13.5 5.25C13.5 6.50902 12.7244 7.58689 11.625 8.03193M12.75 15.75C12.75 14.3522 12.75 13.6533 12.5216 13.1019C12.2172 12.3669 11.6331 11.7828 10.8981 11.4784C10.3467 11.25 9.64783 11.25 8.25 11.25H6C4.60218 11.25 3.90326 11.25 3.35195 11.4784C2.61687 11.7828 2.03284 12.3669 1.72836 13.1019C1.5 13.6533 1.5 14.3522 1.5 15.75M10.125 5.25C10.125 6.90685 8.78185 8.25 7.125 8.25C5.46815 8.25 4.125 6.90685 4.125 5.25C4.125 3.59315 5.46815 2.25 7.125 2.25C8.78185 2.25 10.125 3.59315 10.125 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	3.101572690733941
Encrypted:	false
SSDEEP:	96:0AzRAP5W6+iyjsL/SkZnby5BnOIs666wN5aR8OhNq44aS:3Cspiy8SkZnUs666t8O7q44a
MD5:	463EA87D4C6C358D6FC1788290E7C383
SHA1:	EFF5E2BF84DED315E4B9EB5C80782BA7206EE5AC
SHA-256:	4DD624BF9FC60B4E76EE9AFF53DB516614857FFB91C99F9F725C8498ED923D57
SHA-512:	55F555FD1878099B678B317CA0F24E1297A512641D4DF1B7306CFD899D6735E81A5A25F4D1D17649E712ABDB60CDC0DA97EDEBCF92BD6A4E8BC1CD56E2145FCE
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ..................................................H./m.,m.-I....................................3.....-.................)%.........................,................................................f3.......................-../......./1.-...3..........,n........C.+.-........-l.....3........-r.........-........,............-.U.......-\|..............$..........,......0.-...2...../+..............'.,E..........,..........,......U..................-I.,E..........,..................,s................-I.,#..........,......-`.".......H................/&.....-........,..................../R.....................-l.......,............-..,..,...{........p..........@..-.....,..............................3..............1.....,...........................,...................

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (348), with no line terminators
Category:	downloaded
Size (bytes):	348
Entropy (8bit):	4.786377133406922
Encrypted:	false
SSDEEP:	6:yLzCRwlpeXsqbnawvg4zdOjvaByt3trwfKsX67DLkb5MQrS9:uSuIX72sgyd6vmm9UysqLkb5re9
MD5:	B15AD77C086DA19C344758254702B721
SHA1:	8D6B50C745B1F651847B8604B2F95EF5FF19E2A0
SHA-256:	E64D13C19BCBABCE2CCD881184D45D696A312DC04A0E974F233947587D1EC9DB
SHA-512:	0E9FB4D4586D0673A080FD5FB9FCECB42292333CC38D275EECD20200981F1506FB30CEA52C27C9AD2136B612DD10C40C71A2A59EBF83DB70094D3839048DDC01
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/greenshift-animation-and-page-builder-blocks/libs/inview/bg.js?ver=1.0
Preview:	document.addEventListener("DOMContentLoaded",function(){var e=[].slice.call(document.querySelectorAll(".gs-on-view"));if("IntersectionObserver"in window){let n=new IntersectionObserver(function(e,t){e.forEach(function(e){e.isIntersecting&&(e.target.classList.add("gs-active-view"),n.unobserve(e.target))})});e.forEach(function(e){n.observe(e)})}});

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	281
Entropy (8bit):	4.798002140939658
Encrypted:	false
SSDEEP:	6:0ULzIH2K3SW3F/UaeUSxTNAyMKA7tKKRjaK:Nz+7ZUaQ04K5aK
MD5:	938651582D2C97EAAA61C6795DD26DFC
SHA1:	0EB7AD84BD20D45F413E4A59566987CE0B17A592
SHA-256:	94DE516C65D67D5FBB3FE651CC5C18947E26E4AF17A23683B2FA507CFC61DFAD
SHA-512:	E33BC791AC7B9C9218564239C84AECBF29F9ED21918F7897930864FB9EC149B3D799A341038E87586C79B55D4E6B173B4484D4266F8FF9FF2A15D55ABE2A335D
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function()..{...$(document).on('shown','.modal', function() {.. $('body').addClass('modal-open');.. });.. $(document).on('hidden','.modal', function() {.. .if($('.modal:visible').length==0).. ..$('body').removeClass('modal-open');.. });..});

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	43767
Entropy (8bit):	7.974190217576844
Encrypted:	false
SSDEEP:	768:3f42PNXmeJ7W/SI0VCxg6ON1GRqzr0Ohh9jwktuEzqhPVCRp7imBNcT/4gm:AAWet6Sv+Ogq/0ovtuEzoPozfBNcTxm
MD5:	8B431452CD312C761FD56A2F78271078
SHA1:	D79B2537E87E935F8AFC7413227EC05D221089D0
SHA-256:	C128240F82D5CAFDB538C618382B4477DCDE41C8E5D7F7D891059DFAF03260C8
SHA-512:	5098BF50635A081C3DDE474A76C4AED21EACBC22BE43EDEBAE499C932583D11EA7FC4E951188BBB0478892B6080E1EFD0033F06525C9BF3D256D6D3EFE978FB1
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............4.....................................................................gWUg.d.+....J...&(...4.....Vm.`.....m.j.Z..l...hQ1.P...h=..(..h7.P>'v...s{7.\|../..Vd..0...W.(.n...Ur+"....5...f.\|Z....Xo.`.6..@.3X65.Uj.......5..hm.3x.......?<~....S.(.N....uZ.YR.........X....h>..j'A.t..@.k..P6..EkSa.....iO...-..8L1..-.}....%z..'WJ:Q....D..dt...QZ..w6..{.c...'.l&..6..E5.3P65...2f..6..6.....>..]s.d........o.;t.:gn.[.-.quVP..E5...t.........v....Vk..V:2.a.^.@o.V.....;.6.o1.\|L.'a.[...x.JW.U.Ju...L../..]..@h..C^>.X.oc.}...\|.....q.h5..h..."...E{SA.m.A..'...c.M...h'6...~?..J.s.L..;..vJ.R.D.Y..45..t.....m.....a>.sn:...mM..XkV...."..A.}........0L.4&..~.....{eN..v.[u..q..GD......S....s{.m...;0.9...t....N...2)..Z...@.j]..2O..>:.Khm..............\...z...>...UE*..PkW.w.c.{o.;a.v..x.m..m.F.m..j.x.(...c.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	5.165427472906603
Encrypted:	false
SSDEEP:	6:TMVBd/qOI9mc4slzKJUGFcAj9UZW9VGs4VqmqZlloqo:TMHdiO4UJfDj+wZ4Vqhllo/
MD5:	EC2A9B7A826B9F8BB5D985E6DE70472A
SHA1:	09703B1FD47A11BBF6443F42688B894381387878
SHA-256:	84916E45FE99E6B263A52D3FB06AD4E8FEB27CD01D5ABBA5776465EB25837409
SHA-512:	8085D9BC69C90D0CB47341604666B8F700E2242AB21992AC63630D6B20BDCCF2D0DE8B3E8C0C1EC4185AAC42462A4DB40A12BB0962F8A57CE951C77BD5BA30EF
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/next-grey.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 14 14" fill="none"><path d="M1.5 7H12.5M12.5 7L7 1.5M12.5 7L7 12.5" stroke="#9AA4B2" stroke-width="1.57143" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64045)
Category:	downloaded
Size (bytes):	107126
Entropy (8bit):	5.492756308480957
Encrypted:	false
SSDEEP:	3072:9+XbE9DqxhYbd0Z9qGr6QvbIgc5gWF4BmxpGftNZZBc:9QbJr6QvbK5gWF4BmxpeZZC
MD5:	843A359F48DA74BA6377FDC0F6A08E9E
SHA1:	6058855CBC88F675D8897C6E385D1413A1C1C6C6
SHA-256:	BFB50654266CD61DDC1F60811A6F517EDDAB6ABECA093E5369FE0E61DACD32F3
SHA-512:	1EED9924A950BBD9FC227B382ABF9E409BA87D7CEE47E045337653B55A4CB463C92EF5B8687CCA289798B9AB40F252029E12150B1793B5CCA45814EAEDCB1708
Malicious:	false
Reputation:	low
URL:	https://script.crazyegg.com/pages/versioned/common-scripts/c145caf9bd0f62535e3720b5d68c2190.js
Preview:	(()=>{"use strict";var e,r={},t={};function o(e){var n=t[e];if(void 0!==n)return n.exports;var i=t[e]={exports:{}};return r[e].call(i.exports,i,i.exports,o),i.exports}o.m=r,e=[],o.O=(r,t,n,i)=>{if(!t){var l=1/0;for(s=0;s<e.length;s++){for(var[t,n,i]=e[s],a=!0,u=0;u<t.length;u++)(!1&i\|\|l>=i)&&Object.keys(o.O).every((e=>o.O[e](t[u])))?t.splice(u--,1):(a=!1,i<l&&(l=i));if(a){e.splice(s--,1);var f=n();void 0!==f&&(r=f)}}return r}i=i\|\|0;for(var s=e.length;s>0&&e[s-1][2]>i;s--)e[s]=e[s-1];e[s]=[t,n,i]},o.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return o.d(r,{a:r}),r},o.d=(e,r)=>{for(var t in r)o.o(r,t)&&!o.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fkartra.com
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	4.695996530843939
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zj1ACAeVvBroJ7aTNPuR70BOSivPb28mqgAwqW3I1VQ6hllo/:2diO4I1zpACAe3odaTNuHSmg6W3QnhlY
MD5:	11803062B771A84D23F6D718EF8DF196
SHA1:	6BD16587BEBBE947E1D7C279DD81F49F0DE6F059
SHA-256:	C23188B47134F16B36F7847CB965196A1E4C81BA145280AE8BCE8876D2CB5120
SHA-512:	D2A6B380D920BCFECCC743C377CE658BFB5A2342B5FBCBA93DDE0FDD44980CE6187ED6B899BB073C0DD866E6DFC1F7D14E42969BAB98A2507CE47AB845A1B45D
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/market-icon-4.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M14.25 15.75L16.5 13.5M16.5 13.5L14.25 11.25M16.5 13.5H12M11.625 2.46807C12.7244 2.91311 13.5 3.99098 13.5 5.25C13.5 6.50902 12.7244 7.58689 11.625 8.03193M9 11.25H6C4.60218 11.25 3.90326 11.25 3.35195 11.4784C2.61687 11.7828 2.03284 12.3669 1.72836 13.1019C1.5 13.6533 1.5 14.3522 1.5 15.75M10.125 5.25C10.125 6.90685 8.78185 8.25 7.125 8.25C5.46815 8.25 4.125 6.90685 4.125 5.25C4.125 3.59315 5.46815 2.25 7.125 2.25C8.78185 2.25 10.125 3.59315 10.125 5.25Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41796
Entropy (8bit):	7.991619918316696
Encrypted:	true
SSDEEP:	768:nmkB1s9eIF3Rm2KNPoS2Z+hHbnyYk3KmQXYvx6dRZ6QIPM3MVQGI2uYZ:VU8NPoS2cZbyY4K1Ivx6dRQ+yZZ
MD5:	E16A45AC483CB389307B89848C584CD7
SHA1:	24900E25F17F0727E7D03A730E72C057BEA83575
SHA-256:	D477DC1EE36DE3C11BABDB3E6104488A6EAA9B5B459DE8B2A5CB3ABDB85EDCBB
SHA-512:	B0B37874BDC66D921FC4547D2263EE5D8421BB66CB8DBA867671AD64393F5A97FE8709BB0225D275B60DD8781B7C9ABAB14624E1CB43EDA0EAA7D622A58781EF
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/images.png
Preview:	RIFF<...WEBPVP8L0.../..@.M@.$9n..L...?`..'...O.......[N..........?H.D..h..A"...{...$..c...%......e..3h.....xq...j...Ea.f4j"..&^....T.~.z.....p......U..ag:.T%..\|.O.j.kL...A...K..De...F..h....,H..........M.L.`2f.F.b.ol.E%.;j....[%y&?....!?(.:B....xWU].(./i...4.W...\.:m..\|...........6U,$...6.if.a...5.%0.k.._Q.eY....I.m9.s.."H...{..F......."hd.....m.l.i..K<9...\...../.}...(......?V..`X.....YK...!,..?o~i~.U;.S.(.....U.Y..t}Y..[u..X._..A..8.j.S=zz-..#.?...4w..m...`6...J.]rvi.q._Ez..\|=z.m..H$..\.B....[.q.a.....B./]......4.Han..ko.4..b..9........w..D+9Rq..-.mk...\|t.....V.P.s.h....yv}.........l.!..........=..... ........+/}......@......P8j!z.m...H..\....i\|.A$....;...v\|D...H.H.0...-_.RQ.:.mO.H`.....".1I.$..D......-{....Yr.[..\|.=P.H"..".qR.y'..-i.......GM...@...@ .-d.L&!..eB...dE.=........... .p..$..m.....d,...H$3X...jK.e....C...A.G.4..l.....[.".@(..''=.4...L...%.........-.........).:..4...M.B.d.T..~........l..O..3.T...H..m3...a2.K.0..LP...0i..\#.9......

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-2S00JF6MTB&gacid=1741908784.1730971807&gtm=45je4au0v867964665z878180990za200zb78180990&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=259294468
Preview:	<html></html>

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65398)
Category:	dropped
Size (bytes):	73810
Entropy (8bit):	5.25408004055577
Encrypted:	false
SSDEEP:	1536:ttCGf7aI8FKTMRQffc5/snSIgbGVftHVC:j07Sfc5/apA
MD5:	55FF3CB6AB237E0C9F15973170011527
SHA1:	0F29932CA815292BA94085AFD3F86AB3F8E84589
SHA-256:	2C717DE8709C5BDE6C4E56CCB795CDA050E85EFB72AE1322E01CC6DF1D51F27C
SHA-512:	C0F225067591B24A0379D6A7ACE3967C5B469251E02059F0ADF92D057365D2FC4FDC2FF225883E9714923F536D08B8F8F426A4A2E70D6363E74241741D8286D9
Malicious:	false
Reputation:	low
Preview:	/*. Do not touch this file! This file created by the Popup Maker plugin using PHP. * Last modified time: Nov 06 2024, 07:59:37. */...var PUM,PUM_Accessibility,PUM_Analytics,pm_cookie,pm_cookie_json,pm_remove_cookie;!function(i){"use strict";void 0===i.fn.on&&(i.fn.on=function(e,o,t){return this.delegate(o,e,t)}),void 0===i.fn.off&&(i.fn.off=function(e,o,t){return this.undelegate(o,e,t)}),void 0===i.fn.bindFirst&&(i.fn.bindFirst=function(e,o){var t=i(this);t.unbind(e,o),t.bind(e,o),(t=(o=i._data(t[0]).events)[e]).unshift(t.pop()),o[e]=t}),void 0===i.fn.outerHtml&&(i.fn.outerHtml=function(){var e=i(this).clone();return i("<div/>").append(e).html()}),void 0===i.fn.isInViewport&&(i.fn.isInViewport=function(){var e=i(this).offset().top,o=e+i(this).outerHeight(),t=i(window).scrollTop(),n=t+i(window).height();return t<o&&e<n}),void 0===Date.now&&(Date.now=function(){return(new Date).getTime()})}(jQuery),function(a,r,s){"use strict";function n(e,o){function t(e,o,t){return o?e[o.slice(0,t?-

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/820603035?random=1730971806598&cv=11&fst=1730971806598&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Preview:	<html></html>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 260 x 259, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	57968
Entropy (8bit):	7.988266949048877
Encrypted:	false
SSDEEP:	1536:KEorjqLq7+O7JnIR12tIjBJeseKDXx3yo+yGnuR:KdyLMd6xjPQKDNyBnuR
MD5:	E8B30C597455969858C90AB782995257
SHA1:	C135FB8830E76E54E0D70F82A5B9E8A30B0E7369
SHA-256:	8B3BA38D12F02C36579FD53B04184F8239E79F67A4A533CB33D424AF731D3589
SHA-512:	A55216E4CD401C18839DFB926EBE45AA7F340A73F5A05DB3EB71635E3799B915E83AED5BFD1980B326BEA46FD43AD28515B91CF05EF38AF165E23994A7976D3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............z.....sRGB.........gAMA......a.....IDATx...Ol.W........zcoj'.n..!!.R..9 .&-..=..$@=R.P.E...B(..H.r...!$$$N.P........m..?3.G4rvd[um....}...y..a.....$I.$I.$I.$I.$I.$I.$I.$I.L..m.l.+(?..>c.^.@.. &.!.>...U.Dk).6..)/..!I.8Y.%~.O^.).gBr......yS...0.....v.F...=....Z-BH...1 ..K?.@....@.&}...r..O....eE....,K.......C^.`....@`. .eV...W.R L...9. .L0.. ...(.$6s.`P...R.....?1....\|......PE~.....B..B......x.E.\|.)..z<...__~..7o...0;7..n.j.\|._.A%.C.L......3..\%....(.....,.../..%.\}.r4.....G(.H..F..O.9.$....q..eVWW..j.......#.W.\..c}dW...,cff.FN...n..~.\|...4eX...@.,@8..z...F.z.0...0...(8..P7..KK....H.[7...eN.<.p8..).....ugi.....K...b~...zGy...iw.....d9<..S\.~.....!....0.Q..O.."....<...1...sHbT.u....Y..O.cBZ.....@x...&.K,....a...nh.B.....`P?.F.Q.n...Y......nDy....$..K.....\|...0..B}.e.Il`.DM.{S}.U....}.......(..!..M...X ....P6....`A9..eYZT...&......C 0f.)....@.....l.@H..}.B ...xw.C.....9.w.. ...!..?5.$qs...c)...m:.llm....QN.v.+...e.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4105
Entropy (8bit):	4.695009417913938
Encrypted:	false
SSDEEP:	96:12oZcVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOot:12oZcVWNXK3XuXW5Z
MD5:	154FFCF98ABEB1CDCAB01C99867D2E35
SHA1:	363FDFEBFE196A48E6F68F6E1758D9C47D0A31B8
SHA-256:	EE183B594C5FA8922E5BA3D1BD2C993F50F21A97FB2223BD7A8D04E22A0199B6
SHA-512:	07866F5A1EA1531FBB8D49B5D4E2D20463DD239B1184327CB9C4FAF5C615C509A1030A0EA531CD19FD3BCC42F9A6C8050D0FF3082F99CDDC75EAB60A205B92FF
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20497), with no line terminators
Category:	dropped
Size (bytes):	20497
Entropy (8bit):	5.4068617560011765
Encrypted:	false
SSDEEP:	384:VyP9GRmPA0s+xigucsnGDEk44rCj/f1v+nudQaAWrreJvj/ala0kJo0kMDcQhD3I:VyP9aT0sEinTrx4rCjn5JaaprreJvj/2
MD5:	0012FA2756BCC69A84C08B868B197330
SHA1:	46DE9B6FA5337AF9B7FFF7CCC9F99ACFEF364D7C
SHA-256:	7701282EA59743A1D336EE5EDE4E6805CA9572C28AD013FA956FB39F18DE0D69
SHA-512:	A02498C0B5CA87B70E049FB7D7B6CCCD75DB0A7102CF6AC97967B25DCA8BDF92765185CEFBA0CF37F7371F8B04FE6B572C5CDCDBF83BAA73208D486CCA240897
Malicious:	false
Reputation:	low
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[202,848],{9948:(e,t,r)=>{"use strict";r.r(t),r.d(t,{pageState:()=>O});const n={tagsOfIgnoredDocHeadElements:["script","noscript"],tagsOfIgnoredDocBodyElements:["script","meta","noscript"]};var s=r(5512),a=r.n(s);function o(){return a()('/! For license information please see diff.worker.worker.js.LICENSE.txt /\n(()=>{var e={22:()=>{!function(e){var t=e.CE2BH={};function r(){return t.extends=r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.defineProperty=function(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e},t.extends=r,t.objectWithoutPropertiesLoose=function(e,t){if(null==e)return{};var r,n,s={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0\|\|(s[r]=e[r]);return s}}("undefined"==type

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103360
Entropy (8bit):	5.432870280542499
Encrypted:	false
SSDEEP:	1536:1oynXQX5XkXpWY8j7di+rpsm+RBugsbecqIiDl3wrI5ZYWIh:1jKV+V8j7d5umwBfsSVg
MD5:	3CD9E20878EC5B1599B187673C886EB4
SHA1:	B87EACCCB331874CFB4EAD1F02C5B7A6E6CF08B2
SHA-256:	D6D029F5076282FC2EAF0DDED0AABBA95F22B016AAA98631DE3CDE5C164863E8
SHA-512:	E28080465023E762BD8BC8336ED9758312A0DC368A8DB46702CD8675A0D130A6847E75CF99CD0F71DD46A265F32FF3FB3E6E0856E36824A0FAD043B5739EE514
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/plugins/nelio-ab-testing/assets/dist/js/public.js?ver=b6ad90526587c27fcce4
Preview:	(()=>{var e={2151:e=>{var t={utf8:{stringToBytes:function(e){return t.bin.stringToBytes(unescape(encodeURIComponent(e)))},bytesToString:function(e){return decodeURIComponent(escape(t.bin.bytesToString(e)))}},bin:{stringToBytes:function(e){for(var t=[],n=0;n<e.length;n++)t.push(255&e.charCodeAt(n));return t},bytesToString:function(e){for(var t=[],n=0;n<e.length;n++)t.push(String.fromCharCode(e[n]));return t.join("")}}};e.exports=t},3939:e=>{var t,n;t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",n={rotl:function(e,t){return e<<t\|e>>>32-t},rotr:function(e,t){return e<<32-t\|e>>>t},endian:function(e){if(e.constructor==Number)return 16711935&n.rotl(e,8)\|4278255360&n.rotl(e,24);for(var t=0;t<e.length;t++)e[t]=n.endian(e[t]);return e},randomBytes:function(e){for(var t=[];e>0;e--)t.push(Math.floor(256Math.random()));return t},bytesToWords:function(e){for(var t=[],n=0,r=0;n<e.length;n++,r+=8)t[r>>>5]\|=e[n]<<24-r%32;return t},wordsToBytes:function(e){for(var t=[],n=0;n<32e

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7479), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19297
Entropy (8bit):	5.131964500672861
Encrypted:	false
SSDEEP:	384:0GawDBqnGGt3BMiv/g/zm/xNx0MiW/X6/dUue6oPgMfM/S0EXUAoc+jgM5w/E3uL:GdRqZU/jUnSOIkYUaF1U9aTRD2kj
MD5:	7BC4497274A6C049B846950CCCC11C59
SHA1:	C37D06BFAE73418F0572BD1AD64CEAC1C40504BB
SHA-256:	C18C68E4516DC73541B4BA19D919DF8585738BF42AC874965F2815835D2E3B51
SHA-512:	F32E6A54153E63779F249DA7E29E7DDFE60ABB98175B7ACEA7DCC310AC62D531D8688B825FB83D6FC792940FC5FF5B9CBBFDCB8C9166BFE069F379196632D903
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/pum/pum-site-styles.css?generated=1730923177&ver=1.20.2
Preview:	/*. Do not touch this file! This file created by the Popup Maker plugin using PHP. * Last modified time: Nov 06 2024, 07:59:36. /.../ Popup Google Fonts */..@import url('//fonts.googleapis.com/css?family=Montserrat:100');......@keyframes rotate-forever{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}@keyframes spinner-loader{0%{transform:rotate(0)}100%{transform:rotate(360deg)}}.pum-container,.pum-content,.pum-content+.pum-close,.pum-content+.pum-close:active,.pum-content+.pum-close:focus,.pum-content+.pum-close:hover,.pum-overlay,.pum-title{background:0 0;border:none;bottom:auto;clear:none;cursor:default;float:none;font-family:inherit;font-size:medium;font-style:normal;font-weight:400;height:auto;left:auto;letter-spacing:normal;line-height:normal;max-height:none;max-width:none;min-height:0;min-width:0;overflow:visible;position:static;right:auto;text-align:left;text-decoration:none;text-indent:0;text-transform:none;top:auto;visibility:visible;white-space:normal;width:auto;z-

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	dropped
Size (bytes):	34159
Entropy (8bit):	7.951487397569978
Encrypted:	false
SSDEEP:	768:rizNJik7Amax1Wz/jVx3Dsj7E2WNnTQaH4sqXYXp5DTx2+f:riBP7Af1O/ji7E2WNnkC4Da/R2+f
MD5:	A31ABE53ADE8BCC3FB5915F567B1F1FD
SHA1:	F89229C9CB1F416AF18E182A2F287836E8344AD7
SHA-256:	78F2C0479C22E1C71816F2206439621C4960DB36699634211D22AC1DA5E69F84
SHA-512:	4427B13220D61AF54A7C973C8C6ED9E068A4CA3BE323D0E4C43B89281A7635480196C69C3F83FB8ECCA5E6D5B30A91FCA5F82E7A6CBC866C6C01253EE62EEDBA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....l.l..............................................................................................................................................X...............5...................................................................?j\|-.R.tP.5..ul.7=.....]...^..nV..Z....m.%..[...Z.......j].e.k^...^....~=.5.G..y.OW-'W..OT.5..[.r.w.j.z......wZ.bEl..l..+.e.j...\....v......N:.m:8...v.X.R.+..C.]...k^.u.^.e.v.e......+:.Kn+...Z..v...r..].r...?..?.=..oG>......8..uQ..Cok...kZ..]..{-..u.7r.k+7u.nT..o$.v.w.2.q..5.sNzR......>.].%........us.....m..W-K[l[.e.u..[.f].[.u.WZ.TU...K-...-E.......5E.m.~.....=#...G>.=}'...oO>....z9W..F.-]...[..nk.d.....kf..m.f...f.].k...n;.....F.m.W...#....]}.z.y.......=..}......u[Z.k....k.M.k.u...r.tn..W..v.n.e...]..]..l+7.&.._...$........u.s....C..z}\S...-.R../e.e...v..[.oER.[6.R.mKj.mGeT.6..t.t%7B.i.L...A..`.......v....}.g...._..j..T....l.i...].....k..-E.T.u.z.W.K.T..].f..t..%6..q

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	492
Entropy (8bit):	4.8928799975485
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjMv2DZUGcty19UeOfzRMUcLQL5texqI1VQ6hllo/:2diO4I1zQelUcUhfz+UXte4Qnhllo/
MD5:	843C314845745B97CECC7D1C17CB78D0
SHA1:	62374038832A69EE828874B26CF3C45003782C30
SHA-256:	ABB25AFC141EC09271F06CD871167CF3D1FA9DAB5334992A6CF230EB183B59C8
SHA-512:	4D1A5F8F17510C2D0427F154CACE935D00176A7E2EFD550D5C365F8BE0F39143559A9722FFB56A6605F83D4FBE4EB1B136C92ECF3BB996F798D6432D11B65B26
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M5.625 5.25H5.25C3.17893 5.25 1.5 6.92893 1.5 9C1.5 11.0711 3.17893 12.75 5.25 12.75H6.75C8.82107 12.75 10.5 11.0711 10.5 9M12.375 12.75H12.75C14.8211 12.75 16.5 11.0711 16.5 9C16.5 6.92893 14.8211 5.25 12.75 5.25H11.25C9.17893 5.25 7.5 6.92893 7.5 9" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4108)
Category:	downloaded
Size (bytes):	4142
Entropy (8bit):	5.143362198591793
Encrypted:	false
SSDEEP:	96:06bK025NqxXv3yJqrvYjNH6h2czAikPk7iReni:zEJRBH6RcTk7iRei
MD5:	3301CE2B9EF7FA3F72C5AE2B296D4CEB
SHA1:	6CAE4885257EF4A48A875BF44023D7D8CE9BC78F
SHA-256:	688EA52C7291B980AF811CAB2DFC8AF5EBB15A01555DDC0F3F312DB77B059B74
SHA-512:	172DA6823C832800A15DB5AEEADA8769D51CE9F3084F7AFAC992916F941F3718C46E3CB6EB1B07F3C7AA591289661824E8568F6E41EA95ACAAB79DCDD6FFDC1D
Malicious:	false
Reputation:	low
URL:	https://js.go2sdk.com/v2/tune.js
Preview:	!function(){let e=e=>e?(/^[?#]/.test(e)?e.slice(1):e).split("&").reduce((e,t)=>{let[n,o]=t.split("=");return e[n]=o?decodeURIComponent(o.replace(/\+/g," ")):"",e},{}):{},t=(e,t)=>e in t&&t[e],n=e=>parseInt(e)-0==parseInt(e);var o="undefined.361912";for(tdl.identify=a,tdl.convert=i,"string"==typeof window.tdl.domain&&(window.tdl.domain={default:window.tdl.domain});window.tdl.length&&tdl.domain;){let e=window.tdl.shift(),t=e[0],n=e.slice(1),o=e[2],r=e[3];switch(o\|\|(o=()=>{}),r\|\|(r=()=>{}),t){case"identify":a(...n).then(o).catch(r);break;case"convert":i(...n).then(o).catch(r)}}async function i(n={}){let o=[];var i={...n,...e(window.location.search)};for(let e in window.tdl.domain){let d=[],c=f(n,e),s=c!=="tdl_"+e,u=function(e,t){let n=[],o=decodeURIComponent(document.cookie).split(";");for(let i=0;i<o.length;i++){let r=o[i].split("=");(r[0].trim()==e\|\|!1===t&&r[0].trim().includes(e))&&n.push(r[1].trim())}return n}(c,s);if(u.length>0&&(d=u),!s\|\|0==d.length){let e=function(e,t){let n=[];if(

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	244295
Entropy (8bit):	5.454185343611895
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713FN:pfLeYc+PJxH8NNfFcrHurPK713j
MD5:	B5322CFCA51C69074051C6B148CE5A6C
SHA1:	A995F0F78FE3147A4BF3D0503F9A123FDDAD0CD0
SHA-256:	55270971FDC4172D5CBBA95DADD779074EADB9C50BF16C2B3253CCC6BC8FC363
SHA-512:	9D1824E860609AF7AB2775ACE28D22DED11D4678B89351B34BC03A54527D7C3029238DE45C126E52150B9A87F9242039679F3A646A2F5C7E46D66EE19BB051BE
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1276
Entropy (8bit):	4.664818583382343
Encrypted:	false
SSDEEP:	24:2diO4I1zyTL3xZIYGln+FxFTGbit5TF7SxBOTFIwG0uKFt1XEmWklYFAGF3QnhlC:c31yYYGln+f1dTF7SKTFIwXFt1XnWklQ
MD5:	A65FFBF2672C501704BD16AC4EB97B28
SHA1:	9B6CD282677F56B981E45CCABF5541B2BCAF8AF4
SHA-256:	0359C761DE3E37E68B79B46D5D590EC7E7F7C6F99CDEAFD27B82869FFF75FF5B
SHA-512:	ED697194B3933233C2A87090A7D1104DF29093AF46ABCD0B5573AD1053A5554EDB75C386EAEF41CE3F42420ED72CB798F954BA7EB8ECC5D12FB6EE615BBB04A8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><g clip-path="url(#clip0_952_731)"><path d="M4.5 11.25L6 12.75L9.375 9.375M6 6V3.9C6 3.05992 6 2.63988 6.16349 2.31901C6.3073 2.03677 6.53677 1.8073 6.81901 1.66349C7.13988 1.5 7.55992 1.5 8.4 1.5H14.1C14.9401 1.5 15.3601 1.5 15.681 1.66349C15.9632 1.8073 16.1927 2.03677 16.3365 2.31901C16.5 2.63988 16.5 3.05992 16.5 3.9V9.6C16.5 10.4401 16.5 10.8601 16.3365 11.181C16.1927 11.4632 15.9632 11.6927 15.681 11.8365C15.3601 12 14.9401 12 14.1 12H12M3.9 16.5H9.6C10.4401 16.5 10.8601 16.5 11.181 16.3365C11.4632 16.1927 11.6927 15.9632 11.8365 15.681C12 15.3601 12 14.9401 12 14.1V8.4C12 7.55992 12 7.13988 11.8365 6.81901C11.6927 6.53677 11.4632 6.3073 11.181 6.16349C10.8601 6 10.4401 6 9.6 6H3.9C3.05992 6 2.63988 6 2.31901 6.16349C2.03677 6.3073 1.8073 6.53677 1.66349 6.81901C1.5 7.13988 1.5 7.55992 1.5 8.4V14.1C1.5 14.9401 1.5 15.3601 1.66349 15.681C1.8073 15.9

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4240
Entropy (8bit):	7.917793220927768
Encrypted:	false
SSDEEP:	96:dYmo41LDFXM3ht1L82E4a1sFGYm09Rgn/xSWE/JSA7:uELZ83htPE4a1sFGYm4RLDSA7
MD5:	936B44156F53137F3E63B111564536B4
SHA1:	77AD7A33A114E8266BB750DABC142E3F90B70041
SHA-256:	D649AA6471EAF58E9E4E00BDA4DE41F4E7288CC7EED861903C4623E43A62FE92
SHA-512:	5EF20FF1C9737E87A7BC8FE347E62D7FBF0A99E9DABB8DA2E665000540EFB42BA912E296F70CD3D0CE261633FB59FA5435ECFA1A8466D02BE28E13F359566A87
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............F.....sRGB........JIDATx^.ytTE.....W...T.."..&...l.l!.d.b.....8.pf.q\8(. ........\......A.......N.........~.u....Uu.W..Wu.-....4....>. F.d1... ..... ..da..d.K....\|...H2.....K>YX.$..R@..%.,,...p) ..O...I.....q.'.K.$.\.H...%@....$@\.... ..... ..da..d.K....\|...H2.....K>YX.$..R@..%.,,..`ijG...6T...jG....OA...>......?..!1...1......2-@..5!.p..UXQ........ .O.....,>.I...1.U........9&p.T(#6.3.GaD.......0T.. 7.....bz..1...o.\|.tV.............Cq..D.x.$... .O...b....;,.a.....HC.\?...Go...a....w.G.Tk.......Vk.ZD.iGjt.VOO...<.<..._.a...X1%..S.U.o....4......#cT....<..f...}..{.7.....=.."..%vMz.....Q!.gS=A.(.NZl.gk..}....y.@....c....'..~.c..........j?.....u.......7\..j .z.#..c...`.wV'.6..{.{...xL.:B/.......s....<.....f...H....1gh.....AC........y\by......D..)..^.....~..}W..^........$9.g.h......_<....'.7.@...T.....p............,.....9...2.....Z....G...C... .+...uf$3.@...{.@..[=...L...w.*...D..!....j..+N..H......]..Ng5#.a...X.C

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 495x482, components 3
Category:	downloaded
Size (bytes):	162108
Entropy (8bit):	7.991530231244673
Encrypted:	true
SSDEEP:	3072:U5ukmWC1I38ReuxXgBsrn1wucHhgxIv73tbRNWqUovfn/qSVmcQW:WmQ4//Lke6h+oSimc3
MD5:	A18C18E93921E7244DA22893A0CD0F01
SHA1:	7BD31D24C840299BD3665FCDDD64401B41A6EA09
SHA-256:	15821B232807768E3CC9A44237071FA95E74163823EB32E49E1F52FD84F2DA02
SHA-512:	F7282BCFBA16CB5D41F7CB1CB86A41375299228EF8367D9EECCCE64D86F6AB29C4109EFA58677AEFDEC77A5470750B6B7AE3AF3F99A5518377C98349DF46EEF7
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/11/embed-hero.jpg
Preview:	......JFIF.....H.H..............................................................................................................................................................:......................................................................x.....r...k...;..K....,..rY..N.....\...0R.$......9.Y$.O....Ti.v].a.v.U.%6...3.J&a.X.5.....r.%......W<....0.3x....i....`..^.\|/...5..kEfc.db9..]..d...R...q..._&<......:.w......c....:.wu.^....f..`.'\|Y. 2..w,.uBF!Y.t8.zm&.~....{?Uk..4.... dD....Y.=.i9J"H...AV(.m:.&..n..C!b .......{.Z..X\|.Z^.z.....~..]..nU.h..6.\...._..k...v\...:.u...v_W3...r......X!..+0.f(......,.....+(&..8.....$..[.PK......2.2.E=....=...q....R.Y.^.h5..."...K......C.t....;.,.y...G.....d.......t...../8.g5......v.Wab.\..@..."X..az.:..ND.!.=...t.T...2..j..+.#..X.O;.A..G...\.k.!f5L<..0..D....u.......!...s7...d8.k..m..{.t$.A..x....h.V.\|..N....X9f....}..5..F...gt\.k0...;..t...*.}Y....&\Ua.S>.."..Qr~O.o^.$...1.$."M......}...,..6F;....:x-%..a.O

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	4.798002140939658
Encrypted:	false
SSDEEP:	6:0ULzIH2K3SW3F/UaeUSxTNAyMKA7tKKRjaK:Nz+7ZUaQ04K5aK
MD5:	938651582D2C97EAAA61C6795DD26DFC
SHA1:	0EB7AD84BD20D45F413E4A59566987CE0B17A592
SHA-256:	94DE516C65D67D5FBB3FE651CC5C18947E26E4AF17A23683B2FA507CFC61DFAD
SHA-512:	E33BC791AC7B9C9218564239C84AECBF29F9ED21918F7897930864FB9EC149B3D799A341038E87586C79B55D4E6B173B4484D4266F8FF9FF2A15D55ABE2A335D
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com/js/modal3.js
Preview:	$(document).ready(function()..{...$(document).on('shown','.modal', function() {.. $('body').addClass('modal-open');.. });.. $(document).on('hidden','.modal', function() {.. .if($('.modal:visible').length==0).. ..$('body').removeClass('modal-open');.. });..});

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	4.318957737159561
Encrypted:	false
SSDEEP:	48:c31/PllO9FWTxltA3kHqPZHJzmPRK0ZjD/hnRGl:SlUMxrxUHJn0Z3Zkl
MD5:	91C3E73956B5207556F1753C31028DA1
SHA1:	8270931F684825C478C0BA6D1C3E7F454B7B6CB2
SHA-256:	57709EE6854D899BAB09F491268BD00F8423C9A98FEE2F2C49D541C5DD23DA41
SHA-512:	8352D15C83EC3C6B409CE8FA3974DAB8F822C96DC21C8180B076B9DF574623C5F7E2E8C4BBAA449C109D3BE3011BA5F2AEF7BD022F4A443E1857FF29A319E42E
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/market-icon-3.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M10.308 1.97522L15.954 5.64512C16.1535 5.7748 16.2532 5.83964 16.3255 5.92613C16.3895 6.00269 16.4375 6.09124 16.4669 6.18661C16.5 6.29434 16.5 6.41331 16.5 6.65126V12.15C16.5 13.4102 16.5 14.0402 16.2548 14.5215C16.039 14.9449 15.6948 15.2891 15.2715 15.5048C14.7902 15.75 14.1601 15.75 12.9 15.75H5.1C3.83988 15.75 3.20982 15.75 2.72852 15.5048C2.30516 15.2891 1.96095 14.9449 1.74524 14.5215C1.5 14.0402 1.5 13.4102 1.5 12.15V6.65126C1.5 6.41331 1.5 6.29434 1.53313 6.18661C1.56245 6.09124 1.61051 6.00269 1.67449 5.92613C1.74676 5.83964 1.84651 5.7748 2.04601 5.64512L7.69203 1.97522M10.308 1.97522C9.83454 1.66748 9.59782 1.51362 9.34277 1.45375C9.11732 1.40083 8.88268 1.40083 8.65723 1.45375C8.40218 1.51362 8.16546 1.66748 7.69203 1.97522M10.308 1.97522L14.9521 4.9939C15.468 5.32923 15.7259 5.49689 15.8153 5.70951C15.8933 5.89533 15.8933 6.10474 1

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65398)
Category:	downloaded
Size (bytes):	73810
Entropy (8bit):	5.25408004055577
Encrypted:	false
SSDEEP:	1536:ttCGf7aI8FKTMRQffc5/snSIgbGVftHVC:j07Sfc5/apA
MD5:	55FF3CB6AB237E0C9F15973170011527
SHA1:	0F29932CA815292BA94085AFD3F86AB3F8E84589
SHA-256:	2C717DE8709C5BDE6C4E56CCB795CDA050E85EFB72AE1322E01CC6DF1D51F27C
SHA-512:	C0F225067591B24A0379D6A7ACE3967C5B469251E02059F0ADF92D057365D2FC4FDC2FF225883E9714923F536D08B8F8F426A4A2E70D6363E74241741D8286D9
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/pum/pum-site-scripts.js?defer&generated=1730923177&ver=1.20.2
Preview:	/*. Do not touch this file! This file created by the Popup Maker plugin using PHP. * Last modified time: Nov 06 2024, 07:59:37. */...var PUM,PUM_Accessibility,PUM_Analytics,pm_cookie,pm_cookie_json,pm_remove_cookie;!function(i){"use strict";void 0===i.fn.on&&(i.fn.on=function(e,o,t){return this.delegate(o,e,t)}),void 0===i.fn.off&&(i.fn.off=function(e,o,t){return this.undelegate(o,e,t)}),void 0===i.fn.bindFirst&&(i.fn.bindFirst=function(e,o){var t=i(this);t.unbind(e,o),t.bind(e,o),(t=(o=i._data(t[0]).events)[e]).unshift(t.pop()),o[e]=t}),void 0===i.fn.outerHtml&&(i.fn.outerHtml=function(){var e=i(this).clone();return i("<div/>").append(e).html()}),void 0===i.fn.isInViewport&&(i.fn.isInViewport=function(){var e=i(this).offset().top,o=e+i(this).outerHeight(),t=i(window).scrollTop(),n=t+i(window).height();return t<o&&e<n}),void 0===Date.now&&(Date.now=function(){return(new Date).getTime()})}(jQuery),function(a,r,s){"use strict";function n(e,o){function t(e,o,t){return o?e[o.slice(0,t?-

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	27984
Entropy (8bit):	7.961470708160992
Encrypted:	false
SSDEEP:	768:tT3CSRtxMZ6bMSDlMwFwq8SvGokLZjZIGQvCQ2Or:tT3CXngXvzk9VTQ6nOr
MD5:	194A36A630EA6FDD3782D148F1C0EE9F
SHA1:	BC2A3B5573A8C051D55DCD8747F5E2FD09CC550A
SHA-256:	44FD9104386739754AD010A92C0848B6AC708FEF4F2815A370CE97A72CC25DF1
SHA-512:	B46AABFF3789DF1341D44F84E0768905551C50A43A4BC5D7EE437FC91A7332F83EA1D5268563997389A2E0F36A80AA8F9A8770066517EE97BA846D45D8C92E5F
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-default-5.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............7.....................................................................W..~..a..K..k..f..U'lC.f..Ha.%K.\Sb..r.....2.......3....s.g...J1...U(..P.v.3..t...o....'~..D.Tvv;m.....I....ls..S.9.h..P...:.U..(..k..}..!\|.l...r..T...T..S=.L.e............it..F...R.lq...3g.0\|3g..v..".......t..jGF.:.P..h3)m..0......@UL...S!Y..j..........G..mt.R.....lC..X..-..!.;.aC...U.XU..(.R......b..uf..\B..@@(4..4.'.d..o.z..zq..Wd..E..QA....m....m..Z1.s8....P.u.......Pkb......r..T...U(.E...i.F..........vN...u..p...9.'1.. ..1b..f.E.wZ..ac..v...lC....Use#.%IWU!2).".l....3...~z..}..=H.w..v.....M...;P.;lHb.....`.3.X;.qVZ8..am...j5....Ub........Qr..f.y.h.42.4(....?.}^~..t.N...Vp...U..!..v..RI..0f...]..U.....T.:...v.E...s.,......T.2#..0f....B......7..\|.;%......\.`.M....uk..;...(..h.qWZ8...]...P.l.*..c.I

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 495x482, components 3
Category:	dropped
Size (bytes):	36020
Entropy (8bit):	7.974030777706171
Encrypted:	false
SSDEEP:	768:C2ju2i58yBiJW0x9WzwK9bpsPsVc/W6TCXukUMQvxZCQyAZe:hU5WW0xw8K99Vc/zKyLvxpe
MD5:	A301A89DDAD0E315307937AE376266E5
SHA1:	F2FF56248E207B46CCA5CECF20F6933D2D51F48C
SHA-256:	7066918F815A1739D03AC75EE473B733EE56E039FEB344DBA8763FA3A24D1FBF
SHA-512:	3EBF47894D691D8666867021BFD67BF47555F6DD0F7CB44713AC00FB99AB4A2522B92ACEFB3543A019207B8E1B54356F379B9F73ED89F5EBCF3D06D40C2FB739
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6................................................................................................................................................."..........6....................................................................gM=.N..{..6*.m.y..n.#....Y.t...:i.X.<..t.%.f.f.c3...l.v\.r[...:.....?...g(...V/....#.z......0B...{.C..1.c>.R(.xE.A.\...2H.D.....[..m\|.+Hs..&OYU..c).P....>u...+r@.......)..o...#..#29#.sm#p..w...8..!$....Q..M]}.59..b.r..oP...8.&2.(....O..GN..\|{.kAr.>.m0.J.B...A.......c5v...

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	26750
Entropy (8bit):	4.727780395143468
Encrypted:	false
SSDEEP:	768:5vTZ1WqxHiJt0Ts2NHKVxSXiE4jsxLp1u4p5mDo:5VXOo
MD5:	69958763DF4C5711F170CF28E80D1BE9
SHA1:	CF4A68B627494F08AFFCD4C9648F462036FEFE72
SHA-256:	7E569E5066B9C856D887C6ABD9D37505455E266553EA0E0552F48D6949BEF7D6
SHA-512:	B7A754FE1BCE913F1B7CAFC120CA68A17027B7D15B469DF6F650A88398836650D8546921A156B7D5CE8ED58AE19C95F95BB18558938296DD4CCA0642330B393E
Malicious:	false
Reputation:	low
URL:	https://app.kartra.com//resources/js/optin_front_javascript?form_id=ddb30680a691d157187ee1cf9e896d03
Preview:	(function(window){. var replaceUrl = false;. var url = new URL(window.location.href);. var searchParams = new URLSearchParams(url.search);.. if ('undefined' === typeof window.kuuid) {. setUuidParam();. }.. if ('undefined' === typeof window.kll) {. setKllParam();. }.. if ('undefined' === typeof window.kref) {. setKrefParam();. }.. setKaffParam();.. if (replaceUrl) {. window.history.replaceState(. null,. null,. url.toString(). );. }.. function getCookie(name) {. var cookieRegex = '(?:(?:^\|.; )' + name + ' = ([^;]).$)\|^.$';. var cookie = document.cookie.match(cookieRegex)[1];.. if (cookie) {. return decodeURIComponent(cookie);. }. }.. function setCookie(name, value, options) {. if (options && options.days) {. options['max-age'] = options.days 60 * 60 * 24;.. delete options.days;. }.. var

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1408
Entropy (8bit):	4.360668469511988
Encrypted:	false
SSDEEP:	24:2diO4I1zI8ASjTPEvaXPa9fw+lJt3CcdMLydhT5Bnxt/Dso/ZtFXP7r9yi8SfQnU:c31GSjHXi9HJtQ2td4uDruk
MD5:	30409FCEDA5C7F7224ADB45657BBF742
SHA1:	7F5D0AE93CB30DD7B4047789416B8AFA30CD9B0A
SHA-256:	8315C0D9C97B1A48632449653FBCA3F903E0774630118453B2B02F8888F9972F
SHA-512:	FBD449550A4E59337F23435AE3E42DE40080F4E7976E34043D319AEA9E381C3A773D8667C42F399414A0312A0A0738DBD9C6233E5E718B4ACC253528B5A78418
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/market-icon-5.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M1.5 3.45C1.5 3.02996 1.5 2.81994 1.58175 2.65951C1.65365 2.51839 1.76839 2.40365 1.90951 2.33175C2.06994 2.25 2.27996 2.25 2.7 2.25H15.3C15.72 2.25 15.9301 2.25 16.0905 2.33175C16.2316 2.40365 16.3463 2.51839 16.4183 2.65951C16.5 2.81994 16.5 3.02996 16.5 3.45V3.95205C16.5 4.15364 16.5 4.25444 16.4754 4.34817C16.4535 4.43123 16.4176 4.50993 16.3691 4.58082C16.3144 4.66082 16.2383 4.72684 16.0859 4.85887L11.2891 9.01613C11.1367 9.14816 11.0606 9.21418 11.0059 9.29418C10.9574 9.36507 10.9215 9.44377 10.8996 9.52683C10.875 9.62056 10.875 9.72136 10.875 9.92295V13.8438C10.875 13.9905 10.875 14.0638 10.8513 14.1272C10.8304 14.1832 10.7964 14.2334 10.7522 14.2736C10.7021 14.3192 10.634 14.3464 10.4978 14.4009L7.94783 15.4209C7.67218 15.5311 7.53435 15.5863 7.4237 15.5633C7.32695 15.5432 7.24204 15.4857 7.18744 15.4033C7.125 15.3091 7.125 15.1607 7.12

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	738
Entropy (8bit):	4.627998385776436
Encrypted:	false
SSDEEP:	12:TMHdiO4I1zjGjcPI0LzcB2tbQhOcUHW8K4yY24bXtkqZkhZo+s+ICCL6OWFUWkdj:2diO4I1z6jcKwbQhuqfYF7VZso+lICCn
MD5:	B57C7EF46C272CCDA46A47A14926EA26
SHA1:	B7438D6C7319515D66B69071B8281FB305626131
SHA-256:	9CC702C8697180427A80DC4AD755E35FF3A507A0EB8C20F010DA5B57904619EE
SHA-512:	BE6672C3326452A25ABC32B928CD6AFB2BDE3A16020CFD20DA2CC36EDFE18A4FE5D55A6718220D4807E0ABC323FA2FDE164E22609D8EBECD0E28A1D6A4557453
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M15.75 9L6.75 9M15.75 4.5L6.75 4.5M15.75 13.5L6.75 13.5M3.75 9C3.75 9.41421 3.41421 9.75 3 9.75C2.58579 9.75 2.25 9.41421 2.25 9C2.25 8.58579 2.58579 8.25 3 8.25C3.41421 8.25 3.75 8.58579 3.75 9ZM3.75 4.5C3.75 4.91421 3.41421 5.25 3 5.25C2.58579 5.25 2.25 4.91421 2.25 4.5C2.25 4.08579 2.58579 3.75 3 3.75C3.41421 3.75 3.75 4.08579 3.75 4.5ZM3.75 13.5C3.75 13.9142 3.41421 14.25 3 14.25C2.58579 14.25 2.25 13.9142 2.25 13.5C2.25 13.0858 2.58579 12.75 3 12.75C3.41421 12.75 3.75 13.0858 3.75 13.5Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24206), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	510129
Entropy (8bit):	5.481614899251927
Encrypted:	false
SSDEEP:	6144:Fou50PbT0mg5mwnm5gn0FLhTLSq7Eq/VDhIhjZ/qnTmTBM4xPBM4xagBM4xPBM4n:nn0ZhTLSq73d9IhjUmmQ
MD5:	FCCBB49E63E61D98D39B5479BF727308
SHA1:	E5CB9D5253466E94A51C570FA63A4E8BD95C2773
SHA-256:	2C85D6FDC619104241017117001BDF4E82EC377681D030DA3A7FC136FE7EEA8E
SHA-512:	398C864C7F89632C6AE528B3E0B1001FE63ED01887AD127C008F5C6BBE54CD3D576221A4F082CB3A546147AC072C29A3E37403947167FEAE9BFE746E7A0DEF2D
Malicious:	false
Reputation:	low
URL:	https://kartra.com/
Preview:	<!DOCTYPE html>.<html lang="en-US">..<head>..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1.0, minimal-ui" />..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />..<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />... Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-W78XJT7');..try {.. // *****.. // DO NOT CHANGE THE CODE ABOVE UNLESS YOU KNOW WHAT YOU ARE DOING.. // CHANGE THE PRODUCT PROPERTIES BELOW.. // ADD NEW PRODUCTS BASED ON THE ID.. // *****.... var universalProperties = {.. quantity: 1,.. shipping_tier: 'digital',.. currency: 'USD',.. payment_type: 'Credit Card',.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fkartra.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8189)
Category:	downloaded
Size (bytes):	21464
Entropy (8bit):	5.303481082929494
Encrypted:	false
SSDEEP:	384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhBGX0CiS9rH/OrLrErJ29FkFvd:iS33Z5vK47kv
MD5:	8FBC22C79D40119DDE9A5D16897002B9
SHA1:	E9837519ACA724457792E2D5EE98A97A0367CDF9
SHA-256:	7E84C9F8D71BC6EB2DAC2FCE59A6CAEA62DA51FFA8CF56B41806F59386AB1322
SHA-512:	3118A198A3710C839C15D6C4B5DC9F9ADCD637913AF2E26F438B01C80B27281F4937E25AAD2817855D8B3EB36207C61AE16D62B17E698799C5316E86F52AC6FC
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Preview:	/! jQuery UI - v1.13.3 - 2024-04-26. https://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sort

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	4.678626467860632
Encrypted:	false
SSDEEP:	48:YU9EDHL0Zo7URDUTpF2MXaE9mT4oWOo70u5MwYI:pEDrcUlFfX9FOE0YMw1
MD5:	F2A2D634E8D671F4D42A4CF9ECB7D7ED
SHA1:	D4D3C74CF6470FA9B7C57B11C507ED4F9C410C4F
SHA-256:	14612FAEFC54E67007084332E850F554CA6BA980BEBD2F88BEB4051DFFA87D61
SHA-512:	33504CEB09E899B2DA21828D466D647A758E64B4AC18347A3351CE4F7C755554484DD5AA77D6FEFC904A350E2D6A6C4D1103818B130533E3479B0FD7C1DBAC1B
Malicious:	false
Reputation:	low
Preview:	{"cky_notice_title":"We value your privacy","cky_notice_description":"<p>We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking \"Accept All\", you consent to our use of cookies.</p>","cky_notice_close_label":"Close","cky_readmore_text":"Cookie Policy","cky_readmore_privacyLink":"","cky_revisit_title":"Consent Preferences","cky_video_placeholder_title":"Please accept cookies to access this content","cky_accept_text":"Accept All","cky_reject_text":"Reject All","cky_settings_text":"Customize","cky_preference_title":"Customize Consent Preferences","cky_preference_description":"<p>We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.</p><p>The cookies that are categorized as \"Necessary\" are stored on your browser as they are essential for enabling the basic functionalities of the site. </p><p>We also use thir

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1028
Entropy (8bit):	4.47539981859334
Encrypted:	false
SSDEEP:	24:2diO4I1z8GGeiUngo1oEjYGwjTIaqoadFNn+/aQt4o+IEnVRcivwQE+jS/Qnhlle:c31YGGeRTYbjTIZo6n+/ai4o/EYWwQEB
MD5:	18E3BCA58F8E841FAE0F7D6E260A8411
SHA1:	26519CA3A61249DCBAEB12B0DC433EA51244543D
SHA-256:	806182E5D33A77217DC33C80AB6F9CC8E19C5873C1CB9214B2D2B27C90EA5EE3
SHA-512:	0158324C4851C0F7D1A13C6B27DBC49DE62E34DD469BAC0E0133FC69991DF51A58BB7E5C7FE092672DA2B6591B7B973F7E62D8C25483B1CA99ACF6A7CE713C2A
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/scale-icon-4.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6.8175 6.75C6.99383 6.24875 7.34186 5.82608 7.79997 5.55685C8.25807 5.28762 8.79667 5.1892 9.32038 5.27903C9.84409 5.36886 10.3191 5.64114 10.6613 6.04765C11.0035 6.45415 11.1908 6.96864 11.19 7.5C11.19 9 8.94 9.75 8.94 9.75M9 12.75H9.0075M5.85 15.75H12.15C13.4101 15.75 14.0402 15.75 14.5215 15.5048C14.9448 15.289 15.289 14.9448 15.5048 14.5215C15.75 14.0402 15.75 13.4101 15.75 12.15V5.85C15.75 4.58988 15.75 3.95982 15.5048 3.47852C15.289 3.05516 14.9448 2.71095 14.5215 2.49524C14.0402 2.25 13.4101 2.25 12.15 2.25H5.85C4.58988 2.25 3.95982 2.25 3.47852 2.49524C3.05516 2.71095 2.71095 3.05516 2.49524 3.47852C2.25 3.95982 2.25 4.58988 2.25 5.85V12.15C2.25 13.4101 2.25 14.0402 2.49524 14.5215C2.71095 14.9448 3.05516 15.289 3.47852 15.5048C3.95982 15.75 4.58988 15.75 5.85 15.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-lin

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4105
Entropy (8bit):	4.695009417913938
Encrypted:	false
SSDEEP:	96:12oZcVWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOot:12oZcVWNXK3XuXW5Z
MD5:	154FFCF98ABEB1CDCAB01C99867D2E35
SHA1:	363FDFEBFE196A48E6F68F6E1758D9C47D0A31B8
SHA-256:	EE183B594C5FA8922E5BA3D1BD2C993F50F21A97FB2223BD7A8D04E22A0199B6
SHA-512:	07866F5A1EA1531FBB8D49B5D4E2D20463DD239B1184327CB9C4FAF5C615C509A1030A0EA531CD19FD3BCC42F9A6C8050D0FF3082F99CDDC75EAB60A205B92FF
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/187089157.js
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?insights=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4832), with no line terminators
Category:	downloaded
Size (bytes):	4832
Entropy (8bit):	5.815891427061646
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU4Dw:1DY0hf1bT47OIqWb1dDw
MD5:	3238772FE7A390E85CBB791DE3671AD6
SHA1:	9552D5BB01D447779529B396378B4F4CA7EF12F9
SHA-256:	F4B0DCB2D8B30B76F994B854899AA846FCE808B5A45DA92167B0643DE16AAD9C
SHA-512:	F181530B96B0B12D96BE91C581BB4006CE3303A1F2D10CDACA4C03E5021EE2E425C00D4B32CCE056FDF5D3CB8C8C0FE1533963FAFCECB9154F174D0E63BAF182
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/820603035/?random=1730971806598&cv=11&fst=1730971806598&bg=ffffff&guid=ON&async=1&gtm=45be4au0z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 108x108, segment length 16, progressive, precision 8, 450x600, components 3
Category:	downloaded
Size (bytes):	38936
Entropy (8bit):	7.96745499047785
Encrypted:	false
SSDEEP:	768:pv2cp6SDTGj7hdo3CdKV736CO4M0FtT9BCvIEm4OPODiz/:DDTGjI3CdA3wnEh9BC7mziiz/
MD5:	940E3B6A2F2D6F415434D34E4454D300
SHA1:	93B6BB8DC2B4622DA5F09BCF36EE22285C3B2797
SHA-256:	035FD4F34195BC7D63F75F5AF3B8811435BC2ABC4323274826FAAE2627B15F37
SHA-512:	23F1DE52278EAABC65C81FC36AC18A977E99085B7294120779C46F576530F2558D2F1835C7E4C505EBF23F5B9868F3A1A5655003C9A716723EEF3058CAB8D7F4
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/10/card-default-1.jpg
Preview:	......JFIF.....l.l..............................................................................................................................................X...............6...................................................................{.o&X.\|.JZ..^..i.H.r.ig%.Y...ff+.m...9.......,.b4j..5...c..f._..p'..cZ5X...6s...616...1.........H...R......J..MR.z./Gpf+.m..t;.,....O9%mfb..5$..b.....`.^.w.j.K.....&hA....n..}/.w..<.tkRV...V./lz...M.W........9.,w1f.u.c..1. ....&.a.3....Z....cVn'...1.#M.].0..+..ag...c.J.O......w.].O..u.;;3T.KT.f.<....;..h=.....5&..OQ..3.0;qb..Q..9.E....?6...........k...\|.tm\|zk..]i.\|zkN.f\.J3U.`.:....-..b.3n8.......0H........$I...<...6Q...,.`,.O.....C.....]6..M...%.t.L..w#.....1..Oc..l-............Y.9KR.Ghv..-BkBra...I.6....L.\|........g..B4...m.M...F}..;=.....&.J.Ft.b...=.........qb.E.....K....fv-..a.>...:.T."H..e.....s.../4.p....B6.a....]...#.w=k.(.83..c.@.m.....a.Ob.t6.v.1I.f.Wj1..v+...G.y.m.........".L..OL.o......

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28345)
Category:	dropped
Size (bytes):	28884
Entropy (8bit):	5.071200132131638
Encrypted:	false
SSDEEP:	768:ECkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:O8ZMSmZ7z
MD5:	B63AD4872174EF872657385E4AC15D51
SHA1:	A9D0D57293BA0857B08E966A1C9E4E9111E21E59
SHA-256:	035987520D452EF505B8B4D3651B9CE03729B59B977226188B8F87FE3F23E043
SHA-512:	652CF291B27942EDB52552E5A4D19CBE4F08975C3D0E67A856765832058FE82C3D6C19D07411D835D71007B38A58B46918583E557C1E64896EAC8123F71D3BCC
Malicious:	false
Reputation:	low
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2013 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.//Edited the support.transition function to auto-execute once is created because of issues of conflicting $(document).ready()..!function(a){(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})()}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"clic

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65280)
Category:	dropped
Size (bytes):	143660
Entropy (8bit):	5.248916100261213
Encrypted:	false
SSDEEP:	3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvD:RJLC4dkEUYnafpl9v8cIWybV4y+oGMM4
MD5:	C6D5E2A29F484739EF9B1BAE04430742
SHA1:	764C62A516E9BFF08758F6C6808F995594ECE29D
SHA-256:	55297D02AABE7F2222AA1173D679CEC9BFCD2EFF3ECFF97A7D110F1D9459D3D2
SHA-512:	284522274D87B711110CC1C4FEAEE419FD5271315D5DE72AD84AF14E4F7A2B8741F9A4DD1F2693197D8DE8350B29A4F53D94BFFDF2CAA66C9AD98A8E9D12F200
Malicious:	false
Reputation:	low
Preview:	/*. Swiper 8.4.7. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2023 Vladimir Kharlampidi. . Released under the MIT License. . Released on: January 30, 2023. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],st

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	4.563462646672984
Encrypted:	false
SSDEEP:	24:2diO4I1zzYGwjTIaqoadFNn+/aQt4o+IEnVRcivwQE+jS/Qnhllo/:c31nYbjTIZo6n+/ai4o/EYWwQE+4
MD5:	0DB4497321505BA4E952816DFB3637AF
SHA1:	3FCDC2E73450AF5E4A038784853D35E877F84C3A
SHA-256:	74DB3A69CE535881A904352F0611E76831B64A1CDCDD866B0EF690AC875C91E0
SHA-512:	2613E13D65F34DD732EC2CE3846B8E8270837541F153DB41E5ECF311A36F86A5E49ED9CB3F3142FB0AE9011CAA23E5A9BDC249EAD6855804C19660EE53F720CA
Malicious:	false
Reputation:	low
URL:	https://kartra.com/wp-content/uploads/2024/02/scale-icon-1.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 18 18" fill="none"><path d="M6 2.25L12 15.75M2.25 12.75L9 9M5.85 15.75H12.15C13.4101 15.75 14.0402 15.75 14.5215 15.5048C14.9448 15.289 15.289 14.9448 15.5048 14.5215C15.75 14.0402 15.75 13.4101 15.75 12.15V5.85C15.75 4.58988 15.75 3.95982 15.5048 3.47852C15.289 3.05516 14.9448 2.71095 14.5215 2.49524C14.0402 2.25 13.4101 2.25 12.15 2.25H5.85C4.58988 2.25 3.95982 2.25 3.47852 2.49524C3.05516 2.71095 2.71095 3.05516 2.49524 3.47852C2.25 3.95982 2.25 4.58988 2.25 5.85V12.15C2.25 13.4101 2.25 14.0402 2.49524 14.5215C2.71095 14.9448 3.05516 15.289 3.47852 15.5048C3.95982 15.75 4.58988 15.75 5.85 15.75Z" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	471
Entropy (8bit):	5.004814475878462
Encrypted:	false
SSDEEP:	12:TMHdiO4f1QjOnFrPNncEQ9bDxH1lMckFHaZ4VI1VQ6hllo/:2diO4f1QKFrPNcEQPMcMHa4Qnhllo/
MD5:	52173E05E203D57DB4229A117C6EB0B5
SHA1:	34D6E418111D09BA5924ED36DE48BDE06E243550
SHA-256:	32C7ABF2A57953AB1F45A851355FDEE9875D65DAB38ADC40824EA051E2818F41
SHA-512:	81AB3DAF55E0752F089CC8A1650ADC8A2315B968B9FCBD0A24EFAD83AAC27F26085714201AF11279744FF7D5C208C1DCD0BBE7A3B8CA6E290E430A496800B98F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?> <svg xmlns="http://www.w3.org/2000/svg" width="19" height="18" viewBox="0 0 19 18" fill="none"><path d="M9.33398 6L12.334 9M12.334 9L9.33398 12M12.334 9H2.58398M2.83735 5.25C4.13414 3.00824 6.55793 1.5 9.33398 1.5C13.4761 1.5 16.834 4.85786 16.834 9C16.834 13.1421 13.4761 16.5 9.33398 16.5C6.55793 16.5 4.13414 14.9918 2.83735 12.75" stroke="#364152" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"></path></svg>

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 7, 2024 10:29:15.304513931 CET	192.168.2.11	1.1.1.1	0x9dbe	Standard query (0)	krtra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:15.304753065 CET	192.168.2.11	1.1.1.1	0x9516	Standard query (0)	krtra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:16.565371990 CET	192.168.2.11	1.1.1.1	0x53a8	Standard query (0)	app.kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.566031933 CET	192.168.2.11	1.1.1.1	0xd56b	Standard query (0)	app.kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:17.741090059 CET	192.168.2.11	1.1.1.1	0x52aa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:17.741290092 CET	192.168.2.11	1.1.1.1	0xcf44	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:18.883171082 CET	192.168.2.11	1.1.1.1	0x2a5d	Standard query (0)	d2uolguxr56s4e.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:18.883533001 CET	192.168.2.11	1.1.1.1	0x551a	Standard query (0)	d2uolguxr56s4e.cloudfront.net	65	IN (0x0001)	false
Nov 7, 2024 10:29:20.133285046 CET	192.168.2.11	1.1.1.1	0x11c	Standard query (0)	app.kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.134146929 CET	192.168.2.11	1.1.1.1	0xc65a	Standard query (0)	app.kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:20.194392920 CET	192.168.2.11	1.1.1.1	0x1549	Standard query (0)	d2uolguxr56s4e.cloudfront.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.195033073 CET	192.168.2.11	1.1.1.1	0xde2f	Standard query (0)	d2uolguxr56s4e.cloudfront.net	65	IN (0x0001)	false
Nov 7, 2024 10:29:20.329607010 CET	192.168.2.11	1.1.1.1	0x2f47	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.330071926 CET	192.168.2.11	1.1.1.1	0x872b	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:22.038058996 CET	192.168.2.11	1.1.1.1	0x8812	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:22.038564920 CET	192.168.2.11	1.1.1.1	0x1087	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:36.568274021 CET	192.168.2.11	1.1.1.1	0x7389	Standard query (0)	www.kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:36.568416119 CET	192.168.2.11	1.1.1.1	0x83af	Standard query (0)	www.kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:37.567090034 CET	192.168.2.11	1.1.1.1	0xadde	Standard query (0)	kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:37.567245960 CET	192.168.2.11	1.1.1.1	0xe787	Standard query (0)	kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:38.820171118 CET	192.168.2.11	1.1.1.1	0x4f31	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:38.820511103 CET	192.168.2.11	1.1.1.1	0x5599	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:40.322145939 CET	192.168.2.11	1.1.1.1	0xb750	Standard query (0)	log.cookieyes.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.322652102 CET	192.168.2.11	1.1.1.1	0x1144	Standard query (0)	log.cookieyes.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:40.368484974 CET	192.168.2.11	1.1.1.1	0x2110	Standard query (0)	cdn-cookieyes.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.369071007 CET	192.168.2.11	1.1.1.1	0xd3d7	Standard query (0)	cdn-cookieyes.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:41.128067970 CET	192.168.2.11	1.1.1.1	0x3040	Standard query (0)	kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:41.128572941 CET	192.168.2.11	1.1.1.1	0x67ae	Standard query (0)	kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:43.812215090 CET	192.168.2.11	1.1.1.1	0x17c9	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:43.812736034 CET	192.168.2.11	1.1.1.1	0x79e8	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:43.814274073 CET	192.168.2.11	1.1.1.1	0x9665	Standard query (0)	kartrastg.wpenginepowered.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:43.814443111 CET	192.168.2.11	1.1.1.1	0x2114	Standard query (0)	kartrastg.wpenginepowered.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:44.651422024 CET	192.168.2.11	1.1.1.1	0xfcb7	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:44.651657104 CET	192.168.2.11	1.1.1.1	0x33ba	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:44.654057980 CET	192.168.2.11	1.1.1.1	0x4abe	Standard query (0)	kartrastg.wpenginepowered.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:44.654298067 CET	192.168.2.11	1.1.1.1	0xd789	Standard query (0)	kartrastg.wpenginepowered.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:46.749625921 CET	192.168.2.11	1.1.1.1	0x223b	Standard query (0)	api.nelioabtesting.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:46.749861002 CET	192.168.2.11	1.1.1.1	0x3365	Standard query (0)	api.nelioabtesting.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:47.342753887 CET	192.168.2.11	1.1.1.1	0xf32e	Standard query (0)	fw-cdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.342899084 CET	192.168.2.11	1.1.1.1	0x50ed	Standard query (0)	fw-cdn.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:47.950232983 CET	192.168.2.11	1.1.1.1	0x336	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.950639963 CET	192.168.2.11	1.1.1.1	0x2d09	Standard query (0)	tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:47.971921921 CET	192.168.2.11	1.1.1.1	0x7b41	Standard query (0)	pagestates-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.972191095 CET	192.168.2.11	1.1.1.1	0xb1a9	Standard query (0)	pagestates-tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:47.973179102 CET	192.168.2.11	1.1.1.1	0x525e	Standard query (0)	assets-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.973690987 CET	192.168.2.11	1.1.1.1	0xc12e	Standard query (0)	assets-tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:51.446599960 CET	192.168.2.11	1.1.1.1	0x86fd	Standard query (0)	assets-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:51.447027922 CET	192.168.2.11	1.1.1.1	0x91c	Standard query (0)	assets-tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:52.291941881 CET	192.168.2.11	1.1.1.1	0xcc52	Standard query (0)	pagestates-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.292383909 CET	192.168.2.11	1.1.1.1	0xe58	Standard query (0)	pagestates-tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:52.361558914 CET	192.168.2.11	1.1.1.1	0x6650	Standard query (0)	fw-cdn.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.361887932 CET	192.168.2.11	1.1.1.1	0xaf7c	Standard query (0)	fw-cdn.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:52.384546995 CET	192.168.2.11	1.1.1.1	0x9d5d	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.385026932 CET	192.168.2.11	1.1.1.1	0xfff8	Standard query (0)	tracking.crazyegg.com	65	IN (0x0001)	false
Nov 7, 2024 10:29:59.229914904 CET	192.168.2.11	1.1.1.1	0x4133	Standard query (0)	pbaptfmqic.kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.320753098 CET	192.168.2.11	1.1.1.1	0xe68d	Standard query (0)	pbaptfmqic.kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:05.855006933 CET	192.168.2.11	1.1.1.1	0x8cf2	Standard query (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.855408907 CET	192.168.2.11	1.1.1.1	0x6fe6	Standard query (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:05.865019083 CET	192.168.2.11	1.1.1.1	0x78e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.865370989 CET	192.168.2.11	1.1.1.1	0x3f5c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:06.689574957 CET	192.168.2.11	1.1.1.1	0xef3e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.689733982 CET	192.168.2.11	1.1.1.1	0xd9c3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:06.708725929 CET	192.168.2.11	1.1.1.1	0x21e8	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.709001064 CET	192.168.2.11	1.1.1.1	0x349f	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:06.738610029 CET	192.168.2.11	1.1.1.1	0xb53c	Standard query (0)	js.go2sdk.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.738766909 CET	192.168.2.11	1.1.1.1	0xb85a	Standard query (0)	js.go2sdk.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:06.932643890 CET	192.168.2.11	1.1.1.1	0x38f7	Standard query (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.932785988 CET	192.168.2.11	1.1.1.1	0xe4be	Standard query (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.398941994 CET	192.168.2.11	1.1.1.1	0x6fd6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.399245977 CET	192.168.2.11	1.1.1.1	0xfa24	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.399545908 CET	192.168.2.11	1.1.1.1	0x798c	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.399682999 CET	192.168.2.11	1.1.1.1	0x115d	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.417236090 CET	192.168.2.11	1.1.1.1	0x2f41	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.417398930 CET	192.168.2.11	1.1.1.1	0xa512	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.418092966 CET	192.168.2.11	1.1.1.1	0xd936	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.418364048 CET	192.168.2.11	1.1.1.1	0x8434	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.508189917 CET	192.168.2.11	1.1.1.1	0x98cd	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.508332968 CET	192.168.2.11	1.1.1.1	0xe1e0	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.521785975 CET	192.168.2.11	1.1.1.1	0xde9d	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.521935940 CET	192.168.2.11	1.1.1.1	0x7a06	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:08.578515053 CET	192.168.2.11	1.1.1.1	0x77ad	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.579091072 CET	192.168.2.11	1.1.1.1	0x6b36	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Nov 7, 2024 10:30:11.575541019 CET	192.168.2.11	1.1.1.1	0xbdef	Standard query (0)	trc-events.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:11.576149940 CET	192.168.2.11	1.1.1.1	0x8331	Standard query (0)	trc-events.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:12.767417908 CET	192.168.2.11	1.1.1.1	0xc181	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.767716885 CET	192.168.2.11	1.1.1.1	0x6cc9	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:12.769134998 CET	192.168.2.11	1.1.1.1	0x3de5	Standard query (0)	js.go2sdk.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.769583941 CET	192.168.2.11	1.1.1.1	0xc2ac	Standard query (0)	js.go2sdk.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:12.772008896 CET	192.168.2.11	1.1.1.1	0x1f75	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.875333071 CET	192.168.2.11	1.1.1.1	0x6805	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:12.879043102 CET	192.168.2.11	1.1.1.1	0x636c	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.879396915 CET	192.168.2.11	1.1.1.1	0x8baa	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Nov 7, 2024 10:30:14.789567947 CET	192.168.2.11	1.1.1.1	0x678d	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.805974007 CET	192.168.2.11	1.1.1.1	0xbb23	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:14.955799103 CET	192.168.2.11	1.1.1.1	0x9d63	Standard query (0)	kartra.kartra.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.955971003 CET	192.168.2.11	1.1.1.1	0x81	Standard query (0)	kartra.kartra.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.085747957 CET	192.168.2.11	1.1.1.1	0xf1d0	Standard query (0)	b.clarity.ms	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.086517096 CET	192.168.2.11	1.1.1.1	0x26b3	Standard query (0)	b.clarity.ms	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.125005960 CET	192.168.2.11	1.1.1.1	0xa0ba	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.125233889 CET	192.168.2.11	1.1.1.1	0x51d7	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.127016068 CET	192.168.2.11	1.1.1.1	0x3cb6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.127211094 CET	192.168.2.11	1.1.1.1	0x7ad5	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.129075050 CET	192.168.2.11	1.1.1.1	0x98ff	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.129220963 CET	192.168.2.11	1.1.1.1	0xcb9	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.129827976 CET	192.168.2.11	1.1.1.1	0x1686	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.130053043 CET	192.168.2.11	1.1.1.1	0x1ef4	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Nov 7, 2024 10:30:15.213080883 CET	192.168.2.11	1.1.1.1	0x82e8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.213308096 CET	192.168.2.11	1.1.1.1	0xefb4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:16.640923023 CET	192.168.2.11	1.1.1.1	0xd7a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:16.641103029 CET	192.168.2.11	1.1.1.1	0xf140	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 7, 2024 10:30:17.847687960 CET	192.168.2.11	1.1.1.1	0x237e	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:17.847867012 CET	192.168.2.11	1.1.1.1	0xfc76	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Nov 7, 2024 10:30:22.001658916 CET	192.168.2.11	1.1.1.1	0x61a7	Standard query (0)	api.nelioabtesting.com	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:22.002064943 CET	192.168.2.11	1.1.1.1	0xdadc	Standard query (0)	api.nelioabtesting.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 7, 2024 10:29:15.312627077 CET	1.1.1.1	192.168.2.11	0x9dbe	No error (0)	krtra.com		104.19.213.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:15.312627077 CET	1.1.1.1	192.168.2.11	0x9dbe	No error (0)	krtra.com		104.19.212.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:15.313472033 CET	1.1.1.1	192.168.2.11	0x9516	No error (0)	krtra.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:16.574635983 CET	1.1.1.1	192.168.2.11	0x53a8	No error (0)	app.kartra.com		104.17.215.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.574635983 CET	1.1.1.1	192.168.2.11	0x53a8	No error (0)	app.kartra.com		104.17.216.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.574635983 CET	1.1.1.1	192.168.2.11	0x53a8	No error (0)	app.kartra.com		104.17.217.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.574635983 CET	1.1.1.1	192.168.2.11	0x53a8	No error (0)	app.kartra.com		104.17.218.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.574635983 CET	1.1.1.1	192.168.2.11	0x53a8	No error (0)	app.kartra.com		104.17.219.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:16.574986935 CET	1.1.1.1	192.168.2.11	0xd56b	No error (0)	app.kartra.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:17.747852087 CET	1.1.1.1	192.168.2.11	0xcf44	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:17.747904062 CET	1.1.1.1	192.168.2.11	0x52aa	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:18.893829107 CET	1.1.1.1	192.168.2.11	0x2a5d	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.130	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:18.893829107 CET	1.1.1.1	192.168.2.11	0x2a5d	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:18.893829107 CET	1.1.1.1	192.168.2.11	0x2a5d	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.214	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:18.893829107 CET	1.1.1.1	192.168.2.11	0x2a5d	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.114	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.141752005 CET	1.1.1.1	192.168.2.11	0x11c	No error (0)	app.kartra.com		104.17.215.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.141752005 CET	1.1.1.1	192.168.2.11	0x11c	No error (0)	app.kartra.com		104.17.216.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.141752005 CET	1.1.1.1	192.168.2.11	0x11c	No error (0)	app.kartra.com		104.17.217.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.141752005 CET	1.1.1.1	192.168.2.11	0x11c	No error (0)	app.kartra.com		104.17.218.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.141752005 CET	1.1.1.1	192.168.2.11	0x11c	No error (0)	app.kartra.com		104.17.219.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.142654896 CET	1.1.1.1	192.168.2.11	0xc65a	No error (0)	app.kartra.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:20.202317953 CET	1.1.1.1	192.168.2.11	0x1549	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.130	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.202317953 CET	1.1.1.1	192.168.2.11	0x1549	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.214	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.202317953 CET	1.1.1.1	192.168.2.11	0x1549	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.202317953 CET	1.1.1.1	192.168.2.11	0x1549	No error (0)	d2uolguxr56s4e.cloudfront.net		18.172.111.114	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.336301088 CET	1.1.1.1	192.168.2.11	0x2f47	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.336301088 CET	1.1.1.1	192.168.2.11	0x2f47	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:20.336638927 CET	1.1.1.1	192.168.2.11	0x872b	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:22.044744968 CET	1.1.1.1	192.168.2.11	0x8812	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:22.044744968 CET	1.1.1.1	192.168.2.11	0x8812	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:22.045300007 CET	1.1.1.1	192.168.2.11	0x1087	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:27.281683922 CET	1.1.1.1	192.168.2.11	0xe07c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:27.281683922 CET	1.1.1.1	192.168.2.11	0xe07c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:36.577136040 CET	1.1.1.1	192.168.2.11	0x7389	No error (0)	www.kartra.com	wp.wpenginepowered.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:36.577136040 CET	1.1.1.1	192.168.2.11	0x7389	No error (0)	wp.wpenginepowered.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:36.577136040 CET	1.1.1.1	192.168.2.11	0x7389	No error (0)	wp.wpenginepowered.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:36.580374002 CET	1.1.1.1	192.168.2.11	0x83af	No error (0)	www.kartra.com	wp.wpenginepowered.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:36.580374002 CET	1.1.1.1	192.168.2.11	0x83af	No error (0)	wp.wpenginepowered.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:37.577331066 CET	1.1.1.1	192.168.2.11	0xadde	No error (0)	kartra.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:37.577331066 CET	1.1.1.1	192.168.2.11	0xadde	No error (0)	kartra.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:38.826968908 CET	1.1.1.1	192.168.2.11	0x4f31	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:38.826968908 CET	1.1.1.1	192.168.2.11	0x4f31	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:38.826968908 CET	1.1.1.1	192.168.2.11	0x4f31	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:38.827872038 CET	1.1.1.1	192.168.2.11	0x5599	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:40.329473019 CET	1.1.1.1	192.168.2.11	0xb750	No error (0)	log.cookieyes.com		18.203.70.159	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.329473019 CET	1.1.1.1	192.168.2.11	0xb750	No error (0)	log.cookieyes.com		54.77.254.243	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.375514984 CET	1.1.1.1	192.168.2.11	0xd3d7	No error (0)	cdn-cookieyes.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:40.375535965 CET	1.1.1.1	192.168.2.11	0x2110	No error (0)	cdn-cookieyes.com		172.67.20.8	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.375535965 CET	1.1.1.1	192.168.2.11	0x2110	No error (0)	cdn-cookieyes.com		104.22.59.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:40.375535965 CET	1.1.1.1	192.168.2.11	0x2110	No error (0)	cdn-cookieyes.com		104.22.58.91	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:41.139170885 CET	1.1.1.1	192.168.2.11	0x3040	No error (0)	kartra.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:41.139170885 CET	1.1.1.1	192.168.2.11	0x3040	No error (0)	kartra.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:41.774413109 CET	1.1.1.1	192.168.2.11	0x569a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:41.774413109 CET	1.1.1.1	192.168.2.11	0x569a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:43.820014954 CET	1.1.1.1	192.168.2.11	0x17c9	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:43.820295095 CET	1.1.1.1	192.168.2.11	0x79e8	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:43.824197054 CET	1.1.1.1	192.168.2.11	0x9665	No error (0)	kartrastg.wpenginepowered.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:43.824197054 CET	1.1.1.1	192.168.2.11	0x9665	No error (0)	kartrastg.wpenginepowered.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:43.833180904 CET	1.1.1.1	192.168.2.11	0x2114	No error (0)	kartrastg.wpenginepowered.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:44.660089970 CET	1.1.1.1	192.168.2.11	0x33ba	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:44.660377026 CET	1.1.1.1	192.168.2.11	0xfcb7	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:44.663822889 CET	1.1.1.1	192.168.2.11	0x4abe	No error (0)	kartrastg.wpenginepowered.com		141.193.213.11	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:44.663822889 CET	1.1.1.1	192.168.2.11	0x4abe	No error (0)	kartrastg.wpenginepowered.com		141.193.213.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:44.664139986 CET	1.1.1.1	192.168.2.11	0xd789	No error (0)	kartrastg.wpenginepowered.com			65	IN (0x0001)	false
Nov 7, 2024 10:29:46.768148899 CET	1.1.1.1	192.168.2.11	0x223b	No error (0)	api.nelioabtesting.com	dfyypzw6esvc5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:46.768148899 CET	1.1.1.1	192.168.2.11	0x223b	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:46.768148899 CET	1.1.1.1	192.168.2.11	0x223b	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.24	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:46.768148899 CET	1.1.1.1	192.168.2.11	0x223b	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.7	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:46.768148899 CET	1.1.1.1	192.168.2.11	0x223b	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.63	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:46.770045042 CET	1.1.1.1	192.168.2.11	0x3365	No error (0)	api.nelioabtesting.com	dfyypzw6esvc5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:29:47.361217976 CET	1.1.1.1	192.168.2.11	0xf32e	No error (0)	fw-cdn.com		18.66.122.4	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.361217976 CET	1.1.1.1	192.168.2.11	0xf32e	No error (0)	fw-cdn.com		18.66.122.128	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.361217976 CET	1.1.1.1	192.168.2.11	0xf32e	No error (0)	fw-cdn.com		18.66.122.8	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.361217976 CET	1.1.1.1	192.168.2.11	0xf32e	No error (0)	fw-cdn.com		18.66.122.111	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.958285093 CET	1.1.1.1	192.168.2.11	0x336	No error (0)	tracking.crazyegg.com		54.195.145.208	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.958285093 CET	1.1.1.1	192.168.2.11	0x336	No error (0)	tracking.crazyegg.com		52.214.191.221	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.958285093 CET	1.1.1.1	192.168.2.11	0x336	No error (0)	tracking.crazyegg.com		63.32.145.9	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980102062 CET	1.1.1.1	192.168.2.11	0x525e	No error (0)	assets-tracking.crazyegg.com		18.66.122.57	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980102062 CET	1.1.1.1	192.168.2.11	0x525e	No error (0)	assets-tracking.crazyegg.com		18.66.122.72	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980102062 CET	1.1.1.1	192.168.2.11	0x525e	No error (0)	assets-tracking.crazyegg.com		18.66.122.74	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980102062 CET	1.1.1.1	192.168.2.11	0x525e	No error (0)	assets-tracking.crazyegg.com		18.66.122.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980139017 CET	1.1.1.1	192.168.2.11	0x7b41	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.128	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980139017 CET	1.1.1.1	192.168.2.11	0x7b41	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.58	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980139017 CET	1.1.1.1	192.168.2.11	0x7b41	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.27	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:47.980139017 CET	1.1.1.1	192.168.2.11	0x7b41	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.40	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:51.453751087 CET	1.1.1.1	192.168.2.11	0x86fd	No error (0)	assets-tracking.crazyegg.com		18.66.122.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:51.453751087 CET	1.1.1.1	192.168.2.11	0x86fd	No error (0)	assets-tracking.crazyegg.com		18.66.122.74	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:51.453751087 CET	1.1.1.1	192.168.2.11	0x86fd	No error (0)	assets-tracking.crazyegg.com		18.66.122.72	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:51.453751087 CET	1.1.1.1	192.168.2.11	0x86fd	No error (0)	assets-tracking.crazyegg.com		18.66.122.57	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.302438974 CET	1.1.1.1	192.168.2.11	0xcc52	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.40	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.302438974 CET	1.1.1.1	192.168.2.11	0xcc52	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.27	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.302438974 CET	1.1.1.1	192.168.2.11	0xcc52	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.58	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.302438974 CET	1.1.1.1	192.168.2.11	0xcc52	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.128	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.380788088 CET	1.1.1.1	192.168.2.11	0x6650	No error (0)	fw-cdn.com		18.66.122.4	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.380788088 CET	1.1.1.1	192.168.2.11	0x6650	No error (0)	fw-cdn.com		18.66.122.8	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.380788088 CET	1.1.1.1	192.168.2.11	0x6650	No error (0)	fw-cdn.com		18.66.122.128	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.380788088 CET	1.1.1.1	192.168.2.11	0x6650	No error (0)	fw-cdn.com		18.66.122.111	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.392350912 CET	1.1.1.1	192.168.2.11	0x9d5d	No error (0)	tracking.crazyegg.com		54.195.145.208	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.392350912 CET	1.1.1.1	192.168.2.11	0x9d5d	No error (0)	tracking.crazyegg.com		52.214.191.221	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:52.392350912 CET	1.1.1.1	192.168.2.11	0x9d5d	No error (0)	tracking.crazyegg.com		63.32.145.9	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.238095045 CET	1.1.1.1	192.168.2.11	0x4133	No error (0)	pbaptfmqic.kartra.com		104.17.215.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.238095045 CET	1.1.1.1	192.168.2.11	0x4133	No error (0)	pbaptfmqic.kartra.com		104.17.216.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.238095045 CET	1.1.1.1	192.168.2.11	0x4133	No error (0)	pbaptfmqic.kartra.com		104.17.217.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.238095045 CET	1.1.1.1	192.168.2.11	0x4133	No error (0)	pbaptfmqic.kartra.com		104.17.219.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.238095045 CET	1.1.1.1	192.168.2.11	0x4133	No error (0)	pbaptfmqic.kartra.com		104.17.218.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:29:59.329339027 CET	1.1.1.1	192.168.2.11	0xe68d	No error (0)	pbaptfmqic.kartra.com			65	IN (0x0001)	false
Nov 7, 2024 10:30:05.873153925 CET	1.1.1.1	192.168.2.11	0x78e1	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.873171091 CET	1.1.1.1	192.168.2.11	0x3f5c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 7, 2024 10:30:05.874691010 CET	1.1.1.1	192.168.2.11	0x8cf2	No error (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com		162.159.140.147	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.874691010 CET	1.1.1.1	192.168.2.11	0x8cf2	No error (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com		172.66.0.145	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.886986971 CET	1.1.1.1	192.168.2.11	0xd11b	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:05.886986971 CET	1.1.1.1	192.168.2.11	0xd11b	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:05.886986971 CET	1.1.1.1	192.168.2.11	0xd11b	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.696949959 CET	1.1.1.1	192.168.2.11	0xef3e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:06.696949959 CET	1.1.1.1	192.168.2.11	0xef3e	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.697079897 CET	1.1.1.1	192.168.2.11	0xd9c3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:06.697079897 CET	1.1.1.1	192.168.2.11	0xd9c3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:06.697079897 CET	1.1.1.1	192.168.2.11	0xd9c3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:06.716931105 CET	1.1.1.1	192.168.2.11	0x21e8	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:06.716931105 CET	1.1.1.1	192.168.2.11	0x21e8	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.716931105 CET	1.1.1.1	192.168.2.11	0x21e8	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.716931105 CET	1.1.1.1	192.168.2.11	0x21e8	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.716931105 CET	1.1.1.1	192.168.2.11	0x21e8	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.717458963 CET	1.1.1.1	192.168.2.11	0x349f	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:06.745944023 CET	1.1.1.1	192.168.2.11	0xb53c	No error (0)	js.go2sdk.com		18.66.102.43	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.745944023 CET	1.1.1.1	192.168.2.11	0xb53c	No error (0)	js.go2sdk.com		18.66.102.122	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.745944023 CET	1.1.1.1	192.168.2.11	0xb53c	No error (0)	js.go2sdk.com		18.66.102.5	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.745944023 CET	1.1.1.1	192.168.2.11	0xb53c	No error (0)	js.go2sdk.com		18.66.102.17	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.949569941 CET	1.1.1.1	192.168.2.11	0x38f7	No error (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com		162.159.140.147	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:06.949569941 CET	1.1.1.1	192.168.2.11	0x38f7	No error (0)	genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com		172.66.0.145	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:07.313666105 CET	1.1.1.1	192.168.2.11	0xeee8	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:07.313666105 CET	1.1.1.1	192.168.2.11	0xeee8	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:07.313666105 CET	1.1.1.1	192.168.2.11	0xeee8	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.406021118 CET	1.1.1.1	192.168.2.11	0x6fd6	No error (0)	googleads.g.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.406053066 CET	1.1.1.1	192.168.2.11	0xfa24	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:08.407072067 CET	1.1.1.1	192.168.2.11	0x798c	No error (0)	td.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.424267054 CET	1.1.1.1	192.168.2.11	0x2f41	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.424267054 CET	1.1.1.1	192.168.2.11	0x2f41	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.424267054 CET	1.1.1.1	192.168.2.11	0x2f41	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.424267054 CET	1.1.1.1	192.168.2.11	0x2f41	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.424267054 CET	1.1.1.1	192.168.2.11	0x2f41	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.426676989 CET	1.1.1.1	192.168.2.11	0xd936	No error (0)	stats.g.doubleclick.net		108.177.15.154	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.426676989 CET	1.1.1.1	192.168.2.11	0xd936	No error (0)	stats.g.doubleclick.net		108.177.15.155	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.426676989 CET	1.1.1.1	192.168.2.11	0xd936	No error (0)	stats.g.doubleclick.net		108.177.15.157	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.426676989 CET	1.1.1.1	192.168.2.11	0xd936	No error (0)	stats.g.doubleclick.net		108.177.15.156	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.515881062 CET	1.1.1.1	192.168.2.11	0x98cd	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.515881062 CET	1.1.1.1	192.168.2.11	0x98cd	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.515881062 CET	1.1.1.1	192.168.2.11	0x98cd	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.515881062 CET	1.1.1.1	192.168.2.11	0x98cd	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.515881062 CET	1.1.1.1	192.168.2.11	0x98cd	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.517911911 CET	1.1.1.1	192.168.2.11	0xe1e0	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.528424978 CET	1.1.1.1	192.168.2.11	0xde9d	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.528424978 CET	1.1.1.1	192.168.2.11	0xde9d	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.528424978 CET	1.1.1.1	192.168.2.11	0xde9d	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.528424978 CET	1.1.1.1	192.168.2.11	0xde9d	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.528424978 CET	1.1.1.1	192.168.2.11	0xde9d	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.529006958 CET	1.1.1.1	192.168.2.11	0x7a06	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.585614920 CET	1.1.1.1	192.168.2.11	0x77ad	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.585614920 CET	1.1.1.1	192.168.2.11	0x77ad	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.585614920 CET	1.1.1.1	192.168.2.11	0x77ad	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.585614920 CET	1.1.1.1	192.168.2.11	0x77ad	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:08.586461067 CET	1.1.1.1	192.168.2.11	0x6b36	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.586461067 CET	1.1.1.1	192.168.2.11	0x6b36	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.918415070 CET	1.1.1.1	192.168.2.11	0x1b87	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:08.918415070 CET	1.1.1.1	192.168.2.11	0x1b87	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:11.582135916 CET	1.1.1.1	192.168.2.11	0xbdef	No error (0)	trc-events.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:11.582135916 CET	1.1.1.1	192.168.2.11	0xbdef	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:11.582668066 CET	1.1.1.1	192.168.2.11	0x8331	No error (0)	trc-events.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.774343967 CET	1.1.1.1	192.168.2.11	0xc181	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.774343967 CET	1.1.1.1	192.168.2.11	0xc181	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.774343967 CET	1.1.1.1	192.168.2.11	0xc181	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.774343967 CET	1.1.1.1	192.168.2.11	0xc181	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.774343967 CET	1.1.1.1	192.168.2.11	0xc181	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.775547028 CET	1.1.1.1	192.168.2.11	0x6cc9	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.776710033 CET	1.1.1.1	192.168.2.11	0x3de5	No error (0)	js.go2sdk.com		18.66.102.122	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.776710033 CET	1.1.1.1	192.168.2.11	0x3de5	No error (0)	js.go2sdk.com		18.66.102.5	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.776710033 CET	1.1.1.1	192.168.2.11	0x3de5	No error (0)	js.go2sdk.com		18.66.102.17	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.776710033 CET	1.1.1.1	192.168.2.11	0x3de5	No error (0)	js.go2sdk.com		18.66.102.43	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.779061079 CET	1.1.1.1	192.168.2.11	0x1f75	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.779061079 CET	1.1.1.1	192.168.2.11	0x1f75	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:12.882308006 CET	1.1.1.1	192.168.2.11	0x6805	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.882308006 CET	1.1.1.1	192.168.2.11	0x6805	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:12.882308006 CET	1.1.1.1	192.168.2.11	0x6805	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:12.885900021 CET	1.1.1.1	192.168.2.11	0x636c	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.885900021 CET	1.1.1.1	192.168.2.11	0x636c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.886560917 CET	1.1.1.1	192.168.2.11	0x8baa	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:12.886560917 CET	1.1.1.1	192.168.2.11	0x8baa	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:14.796710014 CET	1.1.1.1	192.168.2.11	0x678d	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:14.796710014 CET	1.1.1.1	192.168.2.11	0x678d	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.812885046 CET	1.1.1.1	192.168.2.11	0xbb23	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:14.966571093 CET	1.1.1.1	192.168.2.11	0x9d63	No error (0)	kartra.kartra.com		104.17.215.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.966571093 CET	1.1.1.1	192.168.2.11	0x9d63	No error (0)	kartra.kartra.com		104.17.216.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.966571093 CET	1.1.1.1	192.168.2.11	0x9d63	No error (0)	kartra.kartra.com		104.17.217.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.966571093 CET	1.1.1.1	192.168.2.11	0x9d63	No error (0)	kartra.kartra.com		104.17.218.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.966571093 CET	1.1.1.1	192.168.2.11	0x9d63	No error (0)	kartra.kartra.com		104.17.219.242	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:14.969953060 CET	1.1.1.1	192.168.2.11	0x81	No error (0)	kartra.kartra.com			65	IN (0x0001)	false
Nov 7, 2024 10:30:15.093440056 CET	1.1.1.1	192.168.2.11	0xf1d0	No error (0)	b.clarity.ms	vmss-clarity-ingest-eus2.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.093735933 CET	1.1.1.1	192.168.2.11	0x26b3	No error (0)	b.clarity.ms	vmss-clarity-ingest-eus2.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.132596016 CET	1.1.1.1	192.168.2.11	0xa0ba	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.132596016 CET	1.1.1.1	192.168.2.11	0xa0ba	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.132596016 CET	1.1.1.1	192.168.2.11	0xa0ba	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.132596016 CET	1.1.1.1	192.168.2.11	0xa0ba	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.132596016 CET	1.1.1.1	192.168.2.11	0xa0ba	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.133816957 CET	1.1.1.1	192.168.2.11	0x3cb6	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.133938074 CET	1.1.1.1	192.168.2.11	0x7ad5	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 7, 2024 10:30:15.133996964 CET	1.1.1.1	192.168.2.11	0x51d7	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.135965109 CET	1.1.1.1	192.168.2.11	0x98ff	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.135965109 CET	1.1.1.1	192.168.2.11	0x98ff	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.135965109 CET	1.1.1.1	192.168.2.11	0x98ff	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.135965109 CET	1.1.1.1	192.168.2.11	0x98ff	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.135965109 CET	1.1.1.1	192.168.2.11	0x98ff	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136384010 CET	1.1.1.1	192.168.2.11	0xcb9	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136641979 CET	1.1.1.1	192.168.2.11	0x1686	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136641979 CET	1.1.1.1	192.168.2.11	0x1686	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136641979 CET	1.1.1.1	192.168.2.11	0x1686	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136641979 CET	1.1.1.1	192.168.2.11	0x1686	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136797905 CET	1.1.1.1	192.168.2.11	0x1ef4	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.136797905 CET	1.1.1.1	192.168.2.11	0x1ef4	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:15.219830036 CET	1.1.1.1	192.168.2.11	0x82e8	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:15.219996929 CET	1.1.1.1	192.168.2.11	0xefb4	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 7, 2024 10:30:16.647717953 CET	1.1.1.1	192.168.2.11	0xd7a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:16.647717953 CET	1.1.1.1	192.168.2.11	0xd7a	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:16.647742033 CET	1.1.1.1	192.168.2.11	0xf140	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:17.854609966 CET	1.1.1.1	192.168.2.11	0xfc76	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:17.854609966 CET	1.1.1.1	192.168.2.11	0xfc76	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:17.855068922 CET	1.1.1.1	192.168.2.11	0x237e	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:17.855068922 CET	1.1.1.1	192.168.2.11	0x237e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:22.009021997 CET	1.1.1.1	192.168.2.11	0x61a7	No error (0)	api.nelioabtesting.com	dfyypzw6esvc5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:22.009021997 CET	1.1.1.1	192.168.2.11	0x61a7	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.33	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:22.009021997 CET	1.1.1.1	192.168.2.11	0x61a7	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.24	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:22.009021997 CET	1.1.1.1	192.168.2.11	0x61a7	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.7	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:22.009021997 CET	1.1.1.1	192.168.2.11	0x61a7	No error (0)	dfyypzw6esvc5.cloudfront.net		143.204.98.63	A (IP address)	IN (0x0001)	false
Nov 7, 2024 10:30:22.017669916 CET	1.1.1.1	192.168.2.11	0xdadc	No error (0)	api.nelioabtesting.com	dfyypzw6esvc5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:27.969659090 CET	1.1.1.1	192.168.2.11	0xcda1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 7, 2024 10:30:27.969659090 CET	1.1.1.1	192.168.2.11	0xcda1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.11	49704	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:10 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:10 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:10 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 05 Nov 2024 17:40:36 GMT ETag: "0x8DCFDC0F4F27BCD" x-ms-request-id: 991f3130-801e-00a0-27ce-2f2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092910Z-17df447cdb528ltlhC1DFWnt1c000000043g0000000012w9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:10 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-07 09:29:10 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-07 09:29:11 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.11	49708	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:13 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:13 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:13 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7513f58e-b01e-005c-2901-2d4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092913Z-16547b76f7fmbrhqhC1DFWkds8000000080g000000005413 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:13 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.11	49707	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:13 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:13 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: d78ce712-d01e-007a-194f-2ef38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092913Z-15869dbbcc6m5ms4hC1DFWx02800000009100000000024vz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:13 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.11	49706	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:13 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:13 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:13 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 5dfad506-901e-0029-2a46-2e274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092913Z-15869dbbcc6tjwwhhC1DFWn228000000015000000000bbf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:13 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.11	49709	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:13 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:13 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: f37a8315-901e-002a-2902-2f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092913Z-17df447cdb5l865xhC1DFW9n7g000000014g0000000065ds x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.11	49705	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:13 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:13 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:13 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: ece73ca0-101e-007a-073f-2e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092913Z-15869dbbcc6zbpm7hC1DFW75xg0000000190000000002d2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:13 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.11	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:14 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: d3a7539b-d01e-0049-4855-2ee7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092914Z-17df447cdb5g2j9ghC1DFWev080000000400000000006ucf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.11	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:14 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b71120f-601e-0050-0560-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092914Z-15869dbbcc662ldwhC1DFWbd5g00000001dg000000005fxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.11	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:14 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a2886317-b01e-00ab-6c01-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092914Z-16547b76f7f7jnp2hC1DFWfc300000000830000000000e9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.11	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:14 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 00beaf03-101e-0065-2c60-2e4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092914Z-15869dbbcc6lq45jhC1DFWbkc800000001qg0000000000a7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.11	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:14 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:14 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092914Z-16547b76f7f2g4rlhC1DFWnx8800000007sg00000000dndk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.11	49723	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:15 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092915Z-16547b76f7fvllnfhC1DFWxkg80000000810000000004dp0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.11	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:15 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: f5f9dbe8-f01e-0071-2e5c-2e431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092915Z-15869dbbcc6gt87nhC1DFWh9un000000088g00000000ehfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.11	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:15 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 27ecdcda-401e-0064-5072-3054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092915Z-17df447cdb54qlp6hC1DFWqcfc0000000460000000002h9g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.11	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:15 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:15 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092915Z-16547b76f7fxdzxghC1DFWmf7n000000082g000000004tvq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.11	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:15 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:15 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e16c3d14-801e-00a3-050a-2d7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092915Z-16547b76f7f7rtshhC1DFWrtqn00000007x000000000bpnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49725	104.19.213.33	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	666	OUT	GET /t/onJtp2YcgmoQ HTTP/1.1 Host: krtra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:16 UTC	335	IN	HTTP/1.1 302 Found Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/html Content-Length: 154 Connection: close location: https://app.kartra.com/analytics/traking_links/onJtp2YcgmoQ strict-transport-security: max-age=31536000; includeSubDomains CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8dec4c43ea614794-DFW
2024-11-07 09:29:16 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.11	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: bfc5cfc9-a01e-0070-0546-2e573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092916Z-15869dbbcc6tjwwhhC1DFWn228000000016g000000007u8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.11	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:16 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 18242d92-601e-005c-0fb0-2ff06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092916Z-15869dbbcc6sg5zbhC1DFWzt6c00000001bg00000000ctet x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.11	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 9ed27c23-f01e-0020-6955-2e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092916Z-15869dbbcc6m5ms4hC1DFWx02800000008w000000000a6g5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:16 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.11	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 7f7db364-701e-005c-2f05-2dbb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092916Z-16547b76f7fp46ndhC1DFW66zg00000007vg00000000gfn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.11	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:16 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:16 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 5f65caf2-701e-006f-6f55-2eafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092916Z-17df447cdb5c9wvxhC1DFWn08n0000000490000000007gdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49734	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	693	OUT	GET /analytics/traking_links/onJtp2YcgmoQ HTTP/1.1 Host: app.kartra.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:17 UTC	370	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://app.kartra.com/error/deactivated strict-transport-security: max-age=0 CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 8dec4c4b1c51e772-DFW
2024-11-07 09:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.11	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: f9b7bb91-701e-0021-1460-2e3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092917Z-15869dbbcc6xcpf8hC1DFWxtx000000008t000000000324q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.11	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: cc46dee9-d01e-007a-0efd-2cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092917Z-16547b76f7fxdzxghC1DFWmf7n00000007yg00000000evbh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.11	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 75035ba1-b01e-005c-42fb-2c4c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092917Z-16547b76f7f7scqbhC1DFW0m5w00000007tg000000007c98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.11	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 9f11ee7d-201e-0096-73f2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092917Z-16547b76f7fp6mhthC1DFWrggn0000000830000000004c08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:17 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.11	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:17 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:17 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 1e45a1cf-401e-0029-3ef1-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092917Z-16547b76f7fsjlq8hC1DFWehq000000007rg000000005t1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	49746	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	674	OUT	GET /error/deactivated HTTP/1.1 Host: app.kartra.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:18 UTC	564	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq; expires=Thu, 07-Nov-2024 14:29:18 GMT; Max-Age=18000; path=/; secure; HttpOnly; SameSite=None expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate pragma: no-cache strict-transport-security: max-age=0 CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Server: cloudflare CF-RAY: 8dec4c52ba962e54-DFW
2024-11-07 09:29:18 UTC	805	IN	Data Raw: 33 32 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 69 64 3d 22 76 69 65 77 70 6f 72 74 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4b 61 72 74 72 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 2f 69 6d 61 67 65 2f 69 63 6f 22 20 68 72 65 66 3d 22 2f Data Ascii: 322<!DOCTYPE HTML><html lang="en-US"> <head> <meta charset="UTF-8"> <meta id="viewport" name="viewport" content="width=device-width,initial-scale=1, user-scalable=no"> <title>Kartra</title> <link rel="icon" type="/image/ico" href="/
2024-11-07 09:29:18 UTC	4	IN	Data Raw: 20 20 0d 0a Data Ascii:
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 6b 61 72 74 72 61 2d 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2d 31 2e 38 2f 6a 71 75 65 72 79 2d 31 2e 38 2e 33 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 6b 61 72 74 72 61 2d 62 6f 6f 74 73 74 72 61 70 2f 64 69 73 74 2f 6a 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 6a 73 2f 73 61 6e 74 69 74 61 74 69 Data Ascii: 7ffa<script type="text/javascript" src="/js/node_modules/kartra-jquery/jquery-1.8/jquery-1.8.3.min.js"></script> <script src="/js/node_modules/kartra-bootstrap/dist/js/bootstrap.min.js"></script> <script type="text/javascript" src="/js/santitati
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 36 62 5c 5c 5c 75 30 31 36 61 5c 5c 5c 75 30 30 65 30 5c 5c 5c 75 30 30 65 38 5c 5c 5c 75 30 30 65 39 5c 5c 5c 75 30 30 65 63 5c 5c 5c 75 30 30 65 64 5c 5c 5c 75 30 30 65 65 5c 5c 5c 75 30 30 66 32 5c 5c 5c 75 30 30 66 33 5c 5c 5c 75 30 30 66 39 5c 5c 5c 75 30 30 66 61 5c 5c 5c 75 30 30 63 30 5c 5c 5c 75 30 30 63 38 5c 5c 5c 75 30 30 63 39 5c 5c 5c 75 30 30 63 63 5c 5c 5c 75 30 30 63 64 5c 5c 5c 75 30 30 63 65 5c 5c 5c 75 30 30 64 32 5c 5c 5c 75 30 30 64 33 5c 5c 5c 75 30 30 64 39 5c 5c 5c 75 30 30 64 61 5c 5c 5c 75 30 30 65 31 5c 5c 5c 75 30 30 65 39 5c 5c 5c 75 30 30 65 64 5c 5c 5c 75 30 30 66 31 5c 5c 5c 75 30 30 66 33 5c 5c 5c 75 30 30 66 61 5c 5c 5c 75 30 30 66 63 5c 5c 5c 75 30 30 63 31 5c 5c 5c 75 30 30 63 39 5c 5c 5c 75 30 30 63 64 5c 5c 5c 75 30 Data Ascii: 6b\\\u016a\\\u00e0\\\u00e8\\\u00e9\\\u00ec\\\u00ed\\\u00ee\\\u00f2\\\u00f3\\\u00f9\\\u00fa\\\u00c0\\\u00c8\\\u00c9\\\u00cc\\\u00cd\\\u00ce\\\u00d2\\\u00d3\\\u00d9\\\u00da\\\u00e1\\\u00e9\\\u00ed\\\u00f1\\\u00f3\\\u00fa\\\u00fc\\\u00c1\\\u00c9\\\u00cd\\\u0
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 32 5c 5c 5c 75 30 33 62 64 5c 5c 5c 75 30 33 39 64 5c 5c 5c 75 30 33 62 63 5c 5c 5c 75 30 33 39 63 5c 5c 5c 75 30 33 61 63 5c 5c 5c 75 30 33 61 64 5c 5c 5c 75 30 33 61 65 5c 5c 5c 75 30 33 61 66 5c 5c 5c 75 30 33 63 61 5c 5c 5c 75 30 33 39 30 5c 5c 5c 75 30 33 63 63 5c 5c 5c 75 30 33 63 64 5c 5c 5c 75 30 33 63 62 5c 5c 5c 75 30 33 62 30 5c 5c 5c 75 30 33 63 65 5c 5c 5c 75 30 30 63 31 5c 5c 5c 75 30 30 63 34 5c 5c 5c 75 30 31 30 63 5c 5c 5c 75 30 31 30 65 5c 5c 5c 75 30 30 63 39 5c 5c 5c 75 30 30 63 64 5c 5c 5c 75 30 31 33 39 5c 5c 5c 75 30 31 33 64 5c 5c 5c 75 30 31 34 37 5c 5c 5c 75 30 30 64 33 5c 5c 5c 75 30 30 64 34 5c 5c 5c 75 30 31 35 34 5c 5c 5c 75 30 31 36 30 5c 5c 5c 75 30 31 36 34 5c 5c 5c 75 30 30 64 61 5c 5c 5c 75 30 30 64 64 5c 5c 5c 75 30 31 Data Ascii: 2\\\u03bd\\\u039d\\\u03bc\\\u039c\\\u03ac\\\u03ad\\\u03ae\\\u03af\\\u03ca\\\u0390\\\u03cc\\\u03cd\\\u03cb\\\u03b0\\\u03ce\\\u00c1\\\u00c4\\\u010c\\\u010e\\\u00c9\\\u00cd\\\u0139\\\u013d\\\u0147\\\u00d3\\\u00d4\\\u0154\\\u0160\\\u0164\\\u00da\\\u00dd\\\u01
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 5c 75 30 32 31 61 5c 5c 5c 75 30 31 30 33 5c 5c 5c 75 30 30 65 32 5c 5c 5c 75 30 30 65 65 5c 5c 5c 75 30 32 31 39 5c 5c 5c 75 30 32 31 62 5c 5c 5c 75 30 30 65 33 5c 5c 5c 75 30 30 63 33 5c 5c 5c 75 30 34 35 31 5c 5c 5c 75 30 34 30 31 5c 5c 5c 75 30 34 34 61 5c 5c 5c 75 30 34 32 61 5c 5c 5c 75 30 34 34 66 5c 5c 5c 75 30 34 32 66 5c 5c 5c 75 30 34 34 38 5c 5c 5c 75 30 34 32 38 5c 5c 5c 75 30 34 33 35 5c 5c 5c 75 30 34 31 35 5c 5c 5c 75 30 34 34 30 5c 5c 5c 75 30 34 32 30 5c 5c 5c 75 30 34 34 32 5c 5c 5c 75 30 34 32 32 5c 5c 5c 75 30 34 34 62 5c 5c 5c 75 30 34 32 62 5c 5c 5c 75 30 34 34 33 5c 5c 5c 75 30 34 32 33 5c 5c 5c 75 30 34 33 38 5c 5c 5c 75 30 34 31 38 5c 5c 5c 75 30 34 33 65 5c 5c 5c 75 30 34 31 65 5c 5c 5c 75 30 34 33 66 5c 5c 5c 75 30 34 31 66 5c Data Ascii: \u021a\\\u0103\\\u00e2\\\u00ee\\\u0219\\\u021b\\\u00e3\\\u00c3\\\u0451\\\u0401\\\u044a\\\u042a\\\u044f\\\u042f\\\u0448\\\u0428\\\u0435\\\u0415\\\u0440\\\u0420\\\u0442\\\u0422\\\u044b\\\u042b\\\u0443\\\u0423\\\u0438\\\u0418\\\u043e\\\u041e\\\u043f\\\u041f\
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 22 3a 22 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 5c 2d 5c 5c 5f 5c 5c 2e 5c 5c 20 5c 5c 5c 75 30 30 65 30 5c 5c 5c 75 30 30 65 32 5c 5c 5c 75 30 30 65 34 5c 5c 5c 75 30 30 66 34 5c 5c 5c 75 30 30 65 39 5c 5c 5c 75 30 30 65 38 5c 5c 5c 75 30 30 65 62 5c 5c 5c 75 30 30 65 61 5c 5c 5c 75 30 30 65 66 5c 5c 5c 75 30 30 65 65 5c 5c 5c 75 30 30 65 37 5c 5c 5c 75 30 30 66 39 5c 5c 5c 75 30 30 66 62 5c 5c 5c 75 30 30 66 63 5c 5c 5c 75 30 30 66 66 5c 5c 5c 75 30 30 65 36 5c 5c 5c 75 30 31 35 33 5c 5c 5c 75 30 30 63 30 5c 5c 5c 75 30 30 63 32 5c 5c 5c 75 30 30 63 34 5c 5c 5c 75 30 30 64 34 5c 5c 5c 75 30 30 63 39 5c 5c 5c 75 30 30 63 38 5c 5c 5c 75 30 30 63 62 5c 5c 5c 75 30 30 63 61 5c 5c 5c 75 30 30 63 66 5c 5c 5c 75 30 30 63 65 5c 5c 5c 75 30 31 37 38 5c 5c 5c 75 30 30 Data Ascii: ":"[a-zA-Z0-9\\-\\_\\.\\ \\\u00e0\\\u00e2\\\u00e4\\\u00f4\\\u00e9\\\u00e8\\\u00eb\\\u00ea\\\u00ef\\\u00ee\\\u00e7\\\u00f9\\\u00fb\\\u00fc\\\u00ff\\\u00e6\\\u0153\\\u00c0\\\u00c2\\\u00c4\\\u00d4\\\u00c9\\\u00c8\\\u00cb\\\u00ca\\\u00cf\\\u00ce\\\u0178\\\u00
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 5c 5c 5c 75 30 34 33 39 5c 5c 5c 75 30 34 31 39 5c 5c 5c 75 30 34 33 61 5c 5c 5c 75 30 34 31 61 5c 5c 5c 75 30 34 33 62 5c 5c 5c 75 30 34 31 62 5c 5c 5c 75 30 34 34 63 5c 5c 5c 75 30 34 32 63 5c 5c 5c 75 30 34 33 36 5c 5c 5c 75 30 34 31 36 5c 5c 5c 75 30 34 33 37 5c 5c 5c 75 30 34 31 37 5c 5c 5c 75 30 34 34 35 5c 5c 5c 75 30 34 32 35 5c 5c 5c 75 30 34 34 36 5c 5c 5c 75 30 34 32 36 5c 5c 5c 75 30 34 33 32 5c 5c 5c 75 30 34 31 32 5c 5c 5c 75 30 34 33 31 5c 5c 5c 75 30 34 31 31 5c 5c 5c 75 30 34 33 64 5c 5c 5c 75 30 34 31 64 5c 5c 5c 75 30 34 33 63 5c 5c 5c 75 30 34 31 63 5c 5c 5c 75 30 33 62 38 5c 5c 5c 75 30 33 39 38 5c 5c 5c 75 30 33 63 39 5c 5c 5c 75 30 33 61 39 5c 5c 5c 75 30 33 62 35 5c 5c 5c 75 30 33 39 35 5c 5c 5c 75 30 33 63 31 5c 5c 5c 75 30 33 61 Data Ascii: \\\u0439\\\u0419\\\u043a\\\u041a\\\u043b\\\u041b\\\u044c\\\u042c\\\u0436\\\u0416\\\u0437\\\u0417\\\u0445\\\u0425\\\u0446\\\u0426\\\u0432\\\u0412\\\u0431\\\u0411\\\u043d\\\u041d\\\u043c\\\u041c\\\u03b8\\\u0398\\\u03c9\\\u03a9\\\u03b5\\\u0395\\\u03c1\\\u03a
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 5c 5c 5c 75 30 31 35 62 5c 5c 5c 75 30 31 37 61 5c 5c 5c 75 30 31 37 63 5c 5c 5c 75 30 31 30 34 5c 5c 5c 75 30 31 30 36 5c 5c 5c 75 30 31 31 38 5c 5c 5c 75 30 31 34 31 5c 5c 5c 75 30 31 34 33 5c 5c 5c 75 30 30 64 33 5c 5c 5c 75 30 31 35 61 5c 5c 5c 75 30 31 37 39 5c 5c 5c 75 30 31 37 62 5c 5c 5c 75 30 31 31 37 5c 5c 5c 75 30 31 31 36 5c 5c 5c 75 30 31 32 66 5c 5c 5c 75 30 31 32 65 5c 5c 5c 75 30 31 37 33 5c 5c 5c 75 30 31 37 33 5c 5c 5c 75 30 31 37 32 5c 5c 5c 75 30 31 36 62 5c 5c 5c 75 30 31 36 61 5c 5c 5c 75 30 30 65 30 5c 5c 5c 75 30 30 65 38 5c 5c 5c 75 30 30 65 39 5c 5c 5c 75 30 30 65 63 5c 5c 5c 75 30 30 65 64 5c 5c 5c 75 30 30 65 65 5c 5c 5c 75 30 30 66 32 5c 5c 5c 75 30 30 66 33 5c 5c 5c 75 30 30 66 39 5c 5c 5c 75 30 30 66 61 5c 5c 5c 75 30 30 63 Data Ascii: \\\u015b\\\u017a\\\u017c\\\u0104\\\u0106\\\u0118\\\u0141\\\u0143\\\u00d3\\\u015a\\\u0179\\\u017b\\\u0117\\\u0116\\\u012f\\\u012e\\\u0173\\\u0173\\\u0172\\\u016b\\\u016a\\\u00e0\\\u00e8\\\u00e9\\\u00ec\\\u00ed\\\u00ee\\\u00f2\\\u00f3\\\u00f9\\\u00fa\\\u00c
2024-11-07 09:29:18 UTC	1369	IN	Data Raw: 5c 5c 75 30 33 63 36 5c 5c 5c 75 30 33 61 36 5c 5c 5c 75 30 33 62 33 5c 5c 5c 75 30 33 39 33 5c 5c 5c 75 30 33 62 37 5c 5c 5c 75 30 33 39 37 5c 5c 5c 75 30 33 63 32 5c 5c 5c 75 30 33 63 32 5c 5c 5c 75 30 33 62 61 5c 5c 5c 75 30 33 39 61 5c 5c 5c 75 30 33 62 62 5c 5c 5c 75 30 33 39 62 5c 5c 5c 75 30 33 62 36 5c 5c 5c 75 30 33 39 36 5c 5c 5c 75 30 33 63 37 5c 5c 5c 75 30 33 61 37 5c 5c 5c 75 30 33 62 65 5c 5c 5c 75 30 33 39 65 5c 5c 5c 75 30 33 62 32 5c 5c 5c 75 30 33 39 32 5c 5c 5c 75 30 33 62 64 5c 5c 5c 75 30 33 39 64 5c 5c 5c 75 30 33 62 63 5c 5c 5c 75 30 33 39 63 5c 5c 5c 75 30 33 61 63 5c 5c 5c 75 30 33 61 64 5c 5c 5c 75 30 33 61 65 5c 5c 5c 75 30 33 61 66 5c 5c 5c 75 30 33 63 61 5c 5c 5c 75 30 33 39 30 5c 5c 5c 75 30 33 63 63 5c 5c 5c 75 30 33 63 64 Data Ascii: \\u03c6\\\u03a6\\\u03b3\\\u0393\\\u03b7\\\u0397\\\u03c2\\\u03c2\\\u03ba\\\u039a\\\u03bb\\\u039b\\\u03b6\\\u0396\\\u03c7\\\u03a7\\\u03be\\\u039e\\\u03b2\\\u0392\\\u03bd\\\u039d\\\u03bc\\\u039c\\\u03ac\\\u03ad\\\u03ae\\\u03af\\\u03ca\\\u0390\\\u03cc\\\u03cd

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.11	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 0a8e697d-a01e-0002-295f-2e5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092918Z-15869dbbcc6gt87nhC1DFWh9un00000008e0000000003mxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:18 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.11	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 231ce337-901e-0083-5701-2dbb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092918Z-16547b76f7fkcrm9hC1DFWxdag00000007y000000000epf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.11	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 8e718dad-301e-0051-6df1-2c38bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092918Z-16547b76f7fkcrm9hC1DFWxdag000000081g000000006g4u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:18 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.11	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 47d81796-701e-0021-2403-2d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092918Z-16547b76f7fr28cchC1DFWnuws000000083g000000003k85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.11	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:18 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:18 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d33f60ae-f01e-0085-74ec-2b88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092918Z-16547b76f7frbg6bhC1DFWr54000000007v0000000007wbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49751	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	654	OUT	GET /css/new/css/v5/stylesheets_frontend/blank_page/styles.css HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/css Content-Length: 211513 Connection: close last-modified: Tue, 05 Nov 2024 10:18:56 GMT etag: "6729f110-33a39" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 2951 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c593bcde76a-DFW
2024-11-07 09:29:19 UTC	957	IN	Data Raw: ef bb bf 3a 72 6f 6f 74 3a 6e 6f 74 28 2e 64 61 72 6b 2d 6d 6f 64 65 29 7b 2d 2d 6d 61 69 6e 2d 62 67 3a 20 72 67 62 28 32 35 31 2c 20 32 35 32 2c 20 32 35 35 29 3b 2d 2d 6d 61 69 6e 2d 62 67 2d 64 69 66 66 2d 31 3a 20 72 67 62 28 32 35 31 2c 20 32 35 32 2c 20 32 35 35 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 67 2d 64 65 66 3a 20 72 67 62 28 32 35 35 2c 20 32 34 39 2c 20 32 32 37 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 64 65 66 3a 20 72 67 62 28 32 35 31 2c 20 31 39 36 2c 20 31 29 3b 2d 2d 62 75 6d 70 2d 32 2d 74 69 74 6c 65 2d 62 67 2d 64 65 66 3a 20 72 67 62 28 32 35 35 2c 20 32 33 37 2c 20 31 37 36 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 67 2d 61 63 74 69 76 65 3a 20 72 67 62 28 32 34 37 2c 20 32 35 33 2c 20 32 35 32 29 3b 2d 2d Data Ascii: :root:not(.dark-mode){--main-bg: rgb(251, 252, 255);--main-bg-diff-1: rgb(251, 252, 255);--bump-2-bg-def: rgb(255, 249, 227);--bump-2-border-color-def: rgb(251, 196, 1);--bump-2-title-bg-def: rgb(255, 237, 176);--bump-2-bg-active: rgb(247, 253, 252);--
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 31 34 31 2c 20 2e 30 35 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 35 3a 20 72 67 62 28 31 31 32 2c 20 31 32 30 2c 20 31 32 38 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 3a 20 72 67 62 28 38 39 2c 20 39 35 2c 20 31 30 31 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 31 30 3a 20 72 67 62 61 28 38 39 2c 20 39 35 2c 20 31 30 31 2c 20 2e 31 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 35 30 3a 20 72 67 62 61 28 38 39 2c 20 39 35 2c 20 31 30 31 2c 20 2e 35 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 37 30 3a 20 72 67 62 61 28 38 39 2c 20 39 35 2c 20 31 30 31 2c 20 2e 37 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 38 30 3a 20 72 67 62 61 28 38 39 2c 20 39 35 2c 20 31 30 31 2c 20 2e 38 29 3b 2d 2d 6e 65 75 74 Data Ascii: 141, .05);--neutral-d-5: rgb(112, 120, 128);--neutral-d-15: rgb(89, 95, 101);--neutral-d-15-o-10: rgba(89, 95, 101, .1);--neutral-d-15-o-50: rgba(89, 95, 101, .5);--neutral-d-15-o-70: rgba(89, 95, 101, .7);--neutral-d-15-o-80: rgba(89, 95, 101, .8);--neut
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2d 6c 2d 34 34 2d 64 69 66 66 2d 33 3a 20 72 67 62 28 32 34 35 2c 20 32 34 35 2c 20 32 34 36 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 6c 2d 34 35 3a 20 72 67 62 28 32 34 37 2c 20 32 34 38 2c 20 32 34 38 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 6c 2d 34 36 3a 20 72 67 62 28 32 35 30 2c 20 32 35 30 2c 20 32 35 31 29 3b 2d 2d 67 6f 6c 64 65 6e 2d 70 6f 70 70 79 2d 6c 2d 34 30 3a 20 72 67 62 28 32 35 35 2c 20 32 34 33 2c 20 32 30 31 29 3b 2d 2d 77 68 69 74 65 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 30 32 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 34 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 30 34 29 3b 2d 2d 77 68 69 74 65 2d Data Ascii: -l-44-diff-3: rgb(245, 245, 246);--neutral-l-45: rgb(247, 248, 248);--neutral-l-46: rgb(250, 250, 251);--golden-poppy-l-40: rgb(255, 243, 201);--white: rgb(255, 255, 255);--white-o-2: rgba(255, 255, 255, .02);--white-o-4: rgba(255, 255, 255, .04);--white-
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2c 20 30 2c 20 30 2c 20 2e 34 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 35 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 35 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 36 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 36 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 36 30 2d 64 69 66 66 2d 31 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 36 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 37 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 37 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 38 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 38 29 3b 2d 2d 62 6c 61 63 6b 2d 6f 2d 39 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 39 29 7d 3a 72 6f 6f 74 2e 64 61 72 6b 2d 6d 6f 64 65 7b 2d 2d 6d 61 69 6e 2d 62 67 3a 20 72 67 62 28 32 39 2c 20 33 31 2c 20 33 33 29 3b 2d Data Ascii: , 0, 0, .4);--black-o-50: rgba(0, 0, 0, .5);--black-o-60: rgba(0, 0, 0, .6);--black-o-60-diff-1: rgba(0, 0, 0, .6);--black-o-70: rgba(0, 0, 0, .7);--black-o-80: rgba(0, 0, 0, .8);--black-o-90: rgba(0, 0, 0, .9)}:root.dark-mode{--main-bg: rgb(29, 31, 33);-
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6c 2d 64 2d 31 35 2d 6f 2d 35 30 3a 20 72 67 62 61 28 31 36 36 2c 20 31 37 31 2c 20 31 37 37 2c 20 2e 35 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 37 30 3a 20 72 67 62 61 28 31 36 36 2c 20 31 37 31 2c 20 31 37 37 2c 20 2e 37 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 6f 2d 38 30 3a 20 72 67 62 61 28 31 36 36 2c 20 31 37 31 2c 20 31 37 37 2c 20 2e 38 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 64 69 66 66 2d 31 3a 20 72 67 62 28 31 33 39 2c 20 31 34 36 2c 20 31 35 33 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 31 35 2d 64 69 66 66 2d 33 3a 20 72 67 62 28 32 30 37 2c 20 32 31 30 2c 20 32 31 32 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 32 30 2d 64 69 66 66 2d 31 3a 20 72 67 62 28 37 37 2c 20 38 32 2c 20 38 37 29 3b 2d 2d 6e 65 75 Data Ascii: l-d-15-o-50: rgba(166, 171, 177, .5);--neutral-d-15-o-70: rgba(166, 171, 177, .7);--neutral-d-15-o-80: rgba(166, 171, 177, .8);--neutral-d-15-diff-1: rgb(139, 146, 153);--neutral-d-15-diff-3: rgb(207, 210, 212);--neutral-d-20-diff-1: rgb(77, 82, 87);--neu
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2d 77 68 69 74 65 3a 20 72 67 62 28 34 31 2c 20 34 34 2c 20 34 37 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 30 32 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 34 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 30 34 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 35 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 30 35 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 31 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 30 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 32 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 30 2d 66 69 78 65 64 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 32 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 35 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c Data Ascii: -white: rgb(41, 44, 47);--white-o-2: rgba(0, 0, 0, .02);--white-o-4: rgba(0, 0, 0, .04);--white-o-5: rgba(0, 0, 0, .05);--white-o-10: rgba(0, 0, 0, .1);--white-o-20: rgba(0, 0, 0, .2);--white-o-20-fixed: rgba(255, 255, 255, .2);--white-o-25: rgba(0, 0, 0,
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 29 7d 2e 6b 61 72 74 72 61 5f 63 6c 6f 73 65 5f 73 69 64 65 62 61 72 3a 6e 6f 74 28 2e 64 61 72 6b 2d 6d 6f 64 65 29 7b 2d 2d 6d 61 69 6e 2d 62 67 3a 20 72 67 62 28 32 35 31 2c 20 32 35 32 2c 20 32 35 35 29 3b 2d 2d 6d 61 69 6e 2d 62 67 2d 64 69 66 66 2d 31 3a 20 72 67 62 28 32 35 31 2c 20 32 35 32 2c 20 32 35 35 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 67 2d 64 65 66 3a 20 72 67 62 28 32 35 35 2c 20 32 34 39 2c 20 32 32 37 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 64 65 66 3a 20 72 67 62 28 32 35 31 2c 20 31 39 36 2c 20 31 29 3b 2d 2d 62 75 6d 70 2d 32 2d 74 69 74 6c 65 2d 62 67 2d 64 65 66 3a 20 72 67 62 28 32 35 35 2c 20 32 33 37 2c 20 31 37 36 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 67 2d 61 63 74 69 76 65 3a 20 72 67 62 28 32 34 Data Ascii: )}.kartra_close_sidebar:not(.dark-mode){--main-bg: rgb(251, 252, 255);--main-bg-diff-1: rgb(251, 252, 255);--bump-2-bg-def: rgb(255, 249, 227);--bump-2-border-color-def: rgb(251, 196, 1);--bump-2-title-bg-def: rgb(255, 237, 176);--bump-2-bg-active: rgb(24
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 38 32 2c 20 38 37 2c 20 2e 36 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 32 35 3a 20 72 67 62 28 36 35 2c 20 36 39 2c 20 37 34 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 32 35 2d 64 69 66 66 2d 31 3a 20 72 67 62 28 36 35 2c 20 36 39 2c 20 37 34 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 32 35 2d 64 69 66 66 2d 32 3a 20 72 67 62 28 36 35 2c 20 36 39 2c 20 37 34 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 33 30 2d 64 69 66 66 2d 31 2d 6f 2d 38 30 3a 20 72 67 62 61 28 35 33 2c 20 35 37 2c 20 36 30 2c 20 2e 38 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 34 30 3a 20 72 67 62 28 32 39 2c 20 33 31 2c 20 33 33 29 3b 2d 2d 6e 65 75 74 72 61 6c 2d 64 2d 34 30 2d 6f 2d 37 30 3a 20 72 67 62 61 28 32 39 2c 20 33 31 2c 20 33 33 2c 20 2e 37 29 3b 2d 2d 6e 65 75 74 72 61 6c Data Ascii: 82, 87, .6);--neutral-d-25: rgb(65, 69, 74);--neutral-d-25-diff-1: rgb(65, 69, 74);--neutral-d-25-diff-2: rgb(65, 69, 74);--neutral-d-30-diff-1-o-80: rgba(53, 57, 60, .8);--neutral-d-40: rgb(29, 31, 33);--neutral-d-40-o-70: rgba(29, 31, 33, .7);--neutral
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 35 35 2c 20 2e 32 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 32 35 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 32 35 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 33 30 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 33 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 34 30 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 34 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 35 30 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 35 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 36 30 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 36 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 37 30 3a 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 2e 37 29 3b 2d 2d 77 68 69 74 65 2d 6f 2d 38 30 3a 20 72 67 62 61 Data Ascii: 55, .2);--white-o-25: rgba(255, 255, 255, .25);--white-o-30: rgba(255, 255, 255, .3);--white-o-40: rgba(255, 255, 255, .4);--white-o-50: rgba(255, 255, 255, .5);--white-o-60: rgba(255, 255, 255, .6);--white-o-70: rgba(255, 255, 255, .7);--white-o-80: rgba
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2d 64 65 66 3a 20 72 67 62 28 37 33 2c 20 35 37 2c 20 30 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 67 2d 61 63 74 69 76 65 3a 20 72 67 62 28 37 2c 20 33 34 2c 20 33 30 29 3b 2d 2d 62 75 6d 70 2d 32 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 72 67 62 28 32 34 2c 20 31 31 39 2c 20 31 30 33 29 3b 2d 2d 62 75 6d 70 2d 32 2d 74 69 74 6c 65 2d 62 67 2d 61 63 74 69 76 65 3a 20 72 67 62 28 31 31 2c 20 35 35 2c 20 34 38 29 3b 2d 2d 62 75 6d 70 2d 33 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 61 63 74 69 76 65 3a 20 72 67 62 28 32 34 2c 20 31 32 32 2c 20 33 34 29 3b 2d 2d 62 75 6d 70 2d 33 2d 74 69 74 6c 65 2d 62 67 2d 61 63 74 69 76 65 3a 20 72 67 62 28 32 30 2c 20 31 30 31 2c 20 32 38 29 3b 2d 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 2d 6c 69 67 Data Ascii: -def: rgb(73, 57, 0);--bump-2-bg-active: rgb(7, 34, 30);--bump-2-border-color-active: rgb(24, 119, 103);--bump-2-title-bg-active: rgb(11, 55, 48);--bump-3-border-color-active: rgb(24, 122, 34);--bump-3-title-bg-active: rgb(20, 101, 28);--theme-primary-lig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49752	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	643	OUT	GET /js/node_modules/kartra-jquery/jquery-1.8/jquery-1.8.3.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	441	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 151029 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-24df5" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3856 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c59399247a8-DFW
2024-11-07 09:29:19 UTC	928	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 38 2e 33 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 54 75 65 20 4e 6f 76 20 31 33 20 32 30 31 32 20 30 38 3a 32 30 3a 33 33 20 47 4d 54 2d 30 Data Ascii: /* jQuery JavaScript Library v1.8.3 http://jquery.com/ Includes Sizzle.js http://sizzlejs.com/ Copyright 2012 jQuery Foundation and other contributors Released under the MIT license http://jquery.org/license Date: Tue Nov 13 2012 08:20:33 GMT-0
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 0a 20 20 20 20 63 6f 72 65 5f 72 6e 6f 74 77 68 69 74 65 3d 2f 5c 53 2f 2c 63 6f 72 65 5f 72 73 70 61 63 65 3d 2f 5c 73 2b 2f 2c 72 74 72 69 6d 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 72 71 75 69 63 6b 45 78 70 72 3d 2f 5e 28 3f 3a 5c 73 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 7c 23 28 5b 5c 77 2d 5d 2a 29 29 24 2f 2c 72 73 69 6e 67 6c 65 54 61 67 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 2c 72 76 61 6c 69 64 63 68 61 72 73 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 72 76 61 6c 69 64 62 72 61 63 65 73 3d 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c Data Ascii: :[eE][\-+]?\d+\|)/.source, core_rnotwhite=/\S/,core_rspace=/\s+/,rtrim=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,rquickExpr=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,rsingleTag=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,rvalidchars=/^[\],:{}\s]*$/,rvalidbraces=/(?:^\|:\|,)(?:\
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 6f 72 3d 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 6d 61 74 63 68 5b 31 5d 2c 64 6f 63 2c 74 72 75 65 29 3b 69 66 28 72 73 69 6e 67 6c 65 54 61 67 2e 74 65 73 74 28 6d 61 74 63 68 5b 31 5d 29 26 26 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 63 6f 6e 74 65 78 74 29 29 74 68 69 73 2e 61 74 74 72 2e 63 61 6c 6c 28 73 65 6c 65 63 74 6f 72 2c 63 6f 6e 74 65 78 74 2c 74 72 75 65 29 3b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 74 68 69 73 2c 73 65 6c 65 63 74 6f 72 29 7d 65 6c 73 65 7b 65 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 61 74 63 68 5b 32 5d 29 3b 69 66 28 65 6c 65 6d 26 26 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 65 6c 65 6d Data Ascii: selector=jQuery.parseHTML(match[1],doc,true);if(rsingleTag.test(match[1])&&jQuery.isPlainObject(context))this.attr.call(selector,context,true);return jQuery.merge(this,selector)}else{elem=document.getElementById(match[2]);if(elem&&elem.parentNode){if(elem
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 65 71 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 3d 2b 69 3b 72 65 74 75 72 6e 20 69 3d 3d 3d 2d 31 3f 74 68 69 73 2e 73 6c 69 63 65 28 69 29 3a 74 68 69 73 2e 73 6c 69 63 65 28 69 2c 69 2b 31 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 6f 72 65 5f 73 6c 69 63 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 22 73 6c 69 63 65 22 2c 63 6f 72 65 5f 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 6a 6f 69 6e 28 22 2c 22 Data Ascii: eq:function(i){i=+i;return i===-1?this.slice(i):this.slice(i,i+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(core_slice.apply(this,arguments),"slice",core_slice.call(arguments).join(","
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 77 2e 24 3d 5f 24 3b 69 66 28 64 65 65 70 26 26 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 3d 3d 6a 51 75 65 72 79 29 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 5f 6a 51 75 65 72 79 3b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 7d 2c 69 73 52 65 61 64 79 3a 66 61 6c 73 65 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 68 6f 6c 64 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 68 6f 6c 64 29 7b 69 66 28 68 6f 6c 64 29 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 2b 2b 3b 65 6c 73 65 20 6a 51 75 65 72 79 2e 72 65 61 64 79 28 74 72 75 65 29 7d 2c 0a 20 20 20 20 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 77 61 69 74 29 7b 69 66 28 77 61 69 74 3d 3d 3d 74 72 75 65 3f 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 3a 6a 51 75 65 72 79 2e 69 73 52 65 61 64 79 29 72 Data Ascii: w.$=_$;if(deep&&window.jQuery===jQuery)window.jQuery=_jQuery;return jQuery},isReady:false,readyWait:1,holdReady:function(hold){if(hold)jQuery.readyWait++;else jQuery.ready(true)}, ready:function(wait){if(wait===true?--jQuery.readyWait:jQuery.isReady)r
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 74 73 29 7b 76 61 72 20 70 61 72 73 65 64 3b 69 66 28 21 64 61 74 61 7c 7c 74 79 70 65 6f 66 20 64 61 74 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 63 6f 6e 74 65 78 74 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 73 63 72 69 70 74 73 3d 63 6f 6e 74 65 78 74 3b 63 6f 6e 74 65 78 74 3d 30 7d 63 6f 6e 74 65 78 74 3d 63 6f 6e 74 65 78 74 7c 7c 64 6f 63 75 6d 65 6e 74 3b 69 66 28 70 61 72 73 65 64 3d 72 73 69 6e 67 6c 65 54 61 67 2e 65 78 65 63 28 64 61 74 61 29 29 72 65 74 75 72 6e 5b 63 6f 6e 74 65 78 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 61 72 73 65 64 5b 31 5d 29 5d 3b 70 61 72 73 65 64 3d 6a 51 75 65 72 79 2e 62 75 69 6c 64 46 72 61 67 6d 65 6e 74 28 5b 64 61 74 61 5d 2c 63 6f 6e 74 Data Ascii: ts){var parsed;if(!data\|\|typeof data!=="string")return null;if(typeof context==="boolean"){scripts=context;context=0}context=context\|\|document;if(parsed=rsingleTag.exec(data))return[context.createElement(parsed[1])];parsed=jQuery.buildFragment([data],cont
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2c 66 63 61 6d 65 6c 43 61 73 65 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 0a 20 20 20 20 20 20 20 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 2c 63 61 6c 6c 62 61 63 6b 2c 61 72 67 73 29 7b 76 61 72 20 6e 61 6d 65 2c 69 3d 30 2c 6c 65 6e 67 74 68 3d 6f 62 6a 2e 6c 65 6e 67 74 68 2c 69 73 4f 62 6a 3d 6c 65 6e 67 74 68 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 3b 69 66 28 61 72 67 73 29 69 66 28 69 73 4f 62 6a 29 66 Data Ascii: ,fcamelCase)},nodeName:function(elem,name){return elem.nodeName&&elem.nodeName.toLowerCase()=== name.toLowerCase()},each:function(obj,callback,args){var name,i=0,length=obj.length,isObj=length===undefined\|\|jQuery.isFunction(obj);if(args)if(isObj)f
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 3d 73 65 63 6f 6e 64 5b 6a 2b 2b 5d 3b 66 69 72 73 74 2e 6c 65 6e 67 74 68 3d 69 3b 72 65 74 75 72 6e 20 66 69 72 73 74 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 69 6e 76 29 7b 76 61 72 20 72 65 74 56 61 6c 2c 72 65 74 3d 5b 5d 2c 69 3d 30 2c 6c 65 6e 67 74 68 3d 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 3b 69 6e 76 3d 21 21 69 6e 76 3b 66 6f 72 28 3b 69 3c 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 72 65 74 56 61 6c 3d 21 21 63 61 6c 6c 62 61 63 6b 28 65 6c 65 6d 73 5b 69 5d 2c 69 29 3b 69 66 28 69 6e 76 21 3d 3d 72 65 74 56 61 6c 29 72 65 74 2e 70 75 73 68 28 65 6c 65 6d 73 5b 69 5d 29 7d 72 65 74 75 72 6e 20 72 65 74 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 61 72 67 Data Ascii: =second[j++];first.length=i;return first},grep:function(elems,callback,inv){var retVal,ret=[],i=0,length=elems.length;inv=!!inv;for(;i<length;i++){retVal=!!callback(elems[i],i);if(inv!==retVal)ret.push(elems[i])}return ret},map:function(elems,callback,arg
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6d 2c 6b 65 79 2c 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 65 78 65 63 2e 63 61 6c 6c 28 6a 51 75 65 72 79 28 65 6c 65 6d 29 2c 76 61 6c 75 65 29 7d 7d 65 6c 73 65 7b 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 2c 76 61 6c 75 65 29 3b 66 6e 3d 6e 75 6c 6c 7d 69 66 28 66 6e 29 66 6f 72 28 3b 69 3c 6c 65 6e 67 74 68 3b 69 2b 2b 29 66 6e 28 65 6c 65 6d 73 5b 69 5d 2c 6b 65 79 2c 65 78 65 63 3f 76 61 6c 75 65 2e 63 61 6c 6c 28 65 6c 65 6d 73 5b 69 5d 2c 69 2c 66 6e 28 65 6c 65 6d 73 5b 69 5d 2c 6b 65 79 29 29 3a 76 61 6c 75 65 2c 70 61 73 73 29 3b 63 68 61 69 6e 61 62 6c 65 3d 31 7d 72 65 74 75 72 6e 20 63 68 61 69 6e 61 62 6c 65 3f 65 6c 65 6d 73 3a 62 75 6c 6b 3f 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 29 3a 6c 65 6e 67 74 68 3f 66 6e 28 65 6c 65 6d 73 5b 30 5d Data Ascii: m,key,value){return exec.call(jQuery(elem),value)}}else{fn.call(elems,value);fn=null}if(fn)for(;i<length;i++)fn(elems[i],key,exec?value.call(elems[i],i,fn(elems[i],key)):value,pass);chainable=1}return chainable?elems:bulk?fn.call(elems):length?fn(elems[0]
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 61 6c 6c 62 61 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 6f 70 74 69 6f 6e 73 3d 74 79 70 65 6f 66 20 6f 70 74 69 6f 6e 73 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 6f 70 74 69 6f 6e 73 43 61 63 68 65 5b 6f 70 74 69 6f 6e 73 5d 7c 7c 63 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 6f 70 74 69 6f 6e 73 29 3a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 70 74 69 6f 6e 73 29 3b 76 61 72 20 6d 65 6d 6f 72 79 2c 66 69 72 65 64 2c 66 69 72 69 6e 67 2c 66 69 72 69 6e 67 53 74 61 72 74 2c 66 69 72 69 6e 67 4c 65 6e 67 74 68 2c 66 69 72 69 6e 67 49 6e 64 65 78 2c 6c 69 73 74 3d 5b 5d 2c 73 74 61 63 6b 3d 21 6f 70 74 69 6f 6e 73 2e 6f 6e 63 65 26 26 0a 20 20 20 20 5b 5d 2c 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 6d 65 6d 6f Data Ascii: allbacks=function(options){options=typeof options==="string"?optionsCache[options]\|\|createOptions(options):jQuery.extend({},options);var memory,fired,firing,firingStart,firingLength,firingIndex,list=[],stack=!options.once&& [],fire=function(data){memo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49755	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	640	OUT	GET /js/node_modules/kartra-bootstrap/dist/js/bootstrap.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 28884 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-70d4" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 6948 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c593c11e813-DFW
2024-11-07 09:29:19 UTC	930	IN	Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6d 6f 64 61 6c 2d 62 6f 64 79 22 29 2e 6c 6f 61 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 62 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 68 69 73 Data Ascii: s.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.prototype={constructor:b,toggle:function(){return this[this
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 75 70 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 77 68 69 63 68 3d 3d 32 37 26 26 61 2e 68 69 64 65 28 29 7d 29 3a 74 68 69 73 2e 69 73 53 68 6f 77 6e 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 22 6b 65 79 75 70 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 29 7d 2c 68 69 64 65 57 69 74 68 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 Data Ascii: hown&&this.options.keyboard?this.$element.on("keyup.dismiss.modal",function(b){b.which==27&&a.hide()}):this.isShown\|\|this.$element.off("keyup.dismiss.modal")},hideWithTransition:function(){var b=this,c=setTimeout(function(){b.$element.off(a.support.transi
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6e 2e 6d 6f 64 61 6c 2e 64 65 66 61 75 6c 74 73 2c 64 2e 64 61 74 61 28 29 2c 74 79 70 65 6f 66 20 63 3d 3d 22 6f 62 6a 65 63 74 22 26 26 63 29 3b 65 7c 7c 64 2e 64 61 74 61 28 22 6d 6f 64 61 6c 22 2c 65 3d 6e 65 77 20 62 28 74 68 69 73 2c 66 29 29 2c 74 79 70 65 6f 66 20 63 3d 3d 22 73 74 72 69 6e 67 22 3f 65 5b 63 5d 28 29 3a 66 2e 73 68 6f 77 26 26 65 2e 73 68 6f 77 28 29 7d 29 7d 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 64 65 66 61 75 6c 74 73 3d 7b 62 61 63 6b 64 72 6f 70 3a 21 30 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 68 6f 77 3a 21 30 7d 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 62 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 6d Data Ascii: n.modal.defaults,d.data(),typeof c=="object"&&c);e\|\|d.data("modal",e=new b(this,f)),typeof c=="string"?e[c]():f.show&&e.show()})},a.fn.modal.defaults={backdrop:!0,keyboard:!0,show:!0},a.fn.modal.Constructor=b,a.fn.modal.noConflict=function(){return a.fn.m
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 69 6f 6e 28 63 29 7b 76 61 72 20 64 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 69 66 28 21 2f 28 33 38 7c 34 30 7c 32 37 29 2f 2e 74 65 73 74 28 63 2e 6b 65 79 43 6f 64 65 29 29 72 65 74 75 72 6e 3b 64 3d 61 28 74 68 69 73 29 2c 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 69 66 28 64 2e 69 73 28 22 2e 64 69 73 61 62 6c 65 64 2c 20 3a 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 68 3d 65 28 64 29 2c 69 3d 68 2e 68 61 73 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 3b 69 66 28 21 69 7c 7c 69 26 26 63 2e 6b 65 79 43 6f 64 65 3d 3d 32 37 29 72 65 74 75 72 6e 20 63 2e 77 68 69 63 68 3d 3d 32 37 26 26 68 2e 66 69 6e 64 28 62 29 2e 66 6f 63 75 73 28 29 2c 64 2e 63 6c 69 63 6b 28 29 3b 66 3d 61 28 Data Ascii: ion(c){var d,f,g,h,i,j;if(!/(38\|40\|27)/.test(c.keyCode))return;d=a(this),c.preventDefault(),c.stopPropagation();if(d.is(".disabled, :disabled"))return;h=e(d),i=h.hasClass("open");if(!i\|\|i&&c.keyCode==27)return c.which==27&&h.find(b).focus(),d.click();f=a(
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3b 74 68 69 73 2e 6f 66 66 73 65 74 73 3d 61 28 5b 5d 29 2c 74 68 69 73 2e 74 61 72 67 65 74 73 3d 61 28 5b 5d 29 2c 63 3d 74 68 69 73 2e 24 62 6f 64 79 2e 66 69 6e 64 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 64 3d 63 2e 64 61 74 61 28 22 74 61 72 67 65 74 22 29 7c 7c 63 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 65 3d 2f 5e 23 5c 77 2f 2e 74 65 73 74 28 64 29 26 26 61 28 64 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 26 26 5b 5b 65 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 74 6f 70 2b 28 21 61 2e 69 73 57 69 6e 64 6f 77 28 62 2e 24 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 Data Ascii: h:function(){var b=this,c;this.offsets=a([]),this.targets=a([]),c=this.$body.find(this.selector).map(function(){var c=a(this),d=c.data("target")\|\|c.attr("href"),e=/^#\w/.test(d)&&a(d);return e&&e.length&&[[e.position().top+(!a.isWindow(b.$scrollElement.ge
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 73 70 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 63 2c 74 68 69 73 7d 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 3b 62 2e 73 63 72 6f 6c 6c 73 70 79 28 62 2e 64 61 74 61 28 29 29 7d 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 28 62 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f Data Ascii: scrollspy.noConflict=function(){return a.fn.scrollspy=c,this},a(window).on("load",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(window.jQuery),!function(a){var b=function(b){this.element=a(b)};b.prototype={co
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6c 69 63 6b 2e 74 61 62 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 5d 2c 20 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 70 69 6c 6c 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 28 74 68 69 73 29 2e 74 61 62 28 22 73 68 6f 77 22 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 6e 69 74 28 22 74 6f 6f 6c 74 69 70 22 2c 61 2c 62 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 62 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 3b 74 68 Data Ascii: lick.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})}(window.jQuery),!function(a){var b=function(a,b){this.init("tooltip",a,b)};b.prototype={constructor:b,init:function(b,c,d){var e,f,g,h,i;th
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6f 6e 73 2e 64 65 6c 61 79 2e 73 68 6f 77 29 7d 2c 6c 65 61 76 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 28 62 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 5b 74 68 69 73 2e 74 79 70 65 5d 28 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 29 2e 64 61 74 61 28 74 68 69 73 2e 74 79 70 65 29 3b 74 68 69 73 2e 74 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 3b 69 66 28 21 63 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 7c 7c 21 63 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 2e 68 69 64 65 29 72 65 74 75 72 6e 20 63 2e 68 69 64 65 28 29 3b 63 2e 68 6f 76 65 72 53 74 61 74 65 3d 22 6f 75 74 22 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ons.delay.show)},leave:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);this.timeout&&clearTimeout(this.timeout);if(!c.options.delay\|\|!c.options.delay.hide)return c.hide();c.hoverState="out",this.timeout=setTimeout(function()
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2c 62 3d 3d 22 62 6f 74 74 6f 6d 22 7c 7c 62 3d 3d 22 74 6f 70 22 3f 28 68 3d 30 2c 61 2e 6c 65 66 74 3c 30 26 26 28 68 3d 61 2e 6c 65 66 74 2a 2d 32 2c 61 2e 6c 65 66 74 3d 30 2c 63 2e 6f 66 66 73 65 74 28 61 29 2c 66 3d 63 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 67 3d 63 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2c 74 68 69 73 2e 72 65 70 6c 61 63 65 41 72 72 6f 77 28 68 2d 64 2b 66 2c 66 2c 22 6c 65 66 74 22 29 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 41 72 72 6f 77 28 67 2d 65 2c 67 2c 22 74 6f 70 22 29 2c 69 26 26 63 2e 6f 66 66 73 65 74 28 61 29 7d 2c 72 65 70 6c 61 63 65 41 72 72 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 72 72 6f 77 28 29 2e 63 73 73 28 63 2c 61 3f 35 30 2a 28 31 2d 61 2f 62 29 2b Data Ascii: ,b=="bottom"\|\|b=="top"?(h=0,a.left<0&&(h=a.left-2,a.left=0,c.offset(a),f=c[0].offsetWidth,g=c[0].offsetHeight),this.replaceArrow(h-d+f,f,"left")):this.replaceArrow(g-e,g,"top"),i&&c.offset(a)},replaceArrow:function(a,b,c){this.arrow().css(c,a?50(1-a/b)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49753	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	600	OUT	GET /js/santitation.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19117 Connection: close last-modified: Wed, 25 Sep 2024 17:01:24 GMT etag: "66f441e4-4aad" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 2951 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c594e546bf8-DFW
2024-11-07 09:29:19 UTC	930	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 56 61 72 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 56 61 72 73 2e 73 61 6e 69 74 61 74 69 6f 6e 5f 72 75 6c 65 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 6c 79 5f 73 61 6e 74 69 74 61 74 69 6f 6e 28 6a 73 56 61 72 73 2e 73 61 6e 69 74 61 74 69 6f 6e 5f 72 75 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 5f 73 61 6e 74 69 74 61 74 69 6f 6e 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 29 20 Data Ascii: $(document).ready(function() { if (typeof jsVars !== 'undefined') { if (typeof jsVars.sanitation_rules !== 'undefined') { apply_santitation(jsVars.sanitation_rules); } }});function apply_santitation(sanitationRules)
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6e 52 75 6c 65 73 5b 27 64 65 63 69 6d 61 6c 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 20 7c 7c 20 28 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 6d 61 74 63 68 28 2f 5c 2e 2f 67 29 20 7c 7c 20 5b 5d 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 26 26 20 6b 65 79 20 3d 3d 3d 20 27 2e 27 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 76 65 72 69 66 79 56 61 6c 75 65 4c 65 6e 67 74 68 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 Data Ascii: nRules['decimal']), result = true; if (!regex.test(key) \|\| ((element.val().match(/\./g) \|\| []).length > 1 && key === '.') \|\| !verifyValueLength(element.val())) { result = false; }
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 73 5f 6e 75 6d 62 65 72 73 5f 73 70 65 63 69 61 6c 5f 63 68 61 72 5f 6e 6f 5f 73 70 61 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 Data Ascii: result = true; if (!regex.test(key)) { result = false; } return result; }, letters_numbers_special_char_no_space: function (element, key) { var regex = new RegExp(sanitati
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6e 6f 74 68 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6e 61 6d 65 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b Data Ascii: }, nothing: function (element, key) { return false; }, name: function (element, key) { var regex = new RegExp(sanitationRules['name']), result = true; if (!regex.test(key)) {
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 5f 64 6f 6d 61 69 6e 5f 64 6f 6d 61 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b Data Ascii: result = true; if (!regex.test(key)) { result = false; } return result; }, custom_domain_domain: function (element, key) { var regex = new RegExp(sanitationRules[
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 22 27 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 5f 66 69 65 6c 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 63 75 73 74 6f 6d 5f 66 69 65 6c 64 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "'")) { result = false; } return result; }, custom_field: function (element, key) { var regex = new RegExp(sanitationRules['custom_field']), result = true;
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6e 65 67 61 74 69 76 65 5f 6e 75 6d 65 72 69 63 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 65 72 63 65 6e 74 61 67 65 5f 73 69 6e 67 6c 65 5f 64 65 63 69 6d 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: regex = new RegExp(sanitationRules['negative_numeric']), result = true; if (!regex.test(key)) { result = false; } return result; }, percentage_single_decimal: function(
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6b 65 79 77 6f 72 64 5f 6e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6b 65 79 77 6f 72 64 5f 6e 61 6d 65 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 Data Ascii: { result = false; } return result; }, keyword_name: function (element, key) { var regex = new RegExp(sanitationRules['keyword_name']), result = true; if (!
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 27 6e 6f 74 68 69 6e 67 27 20 3d 3d 3d 20 74 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 2e 76 61 6c 28 6c 61 73 74 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 5b 30 5d 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 69 6d 75 6c 61 74 65 64 49 6e 70 75 74 45 76 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 64 64 65 64 20 20 20 3d 20 66 69 6e 64 43 68 61 72 61 63 74 65 72 73 28 63 75 72 72 65 6e 74 56 61 6c 75 65 2c 20 6c 61 73 74 56 61 6c 75 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: if ('nothing' === type) { $self.val(lastValue); $self[0].dispatchEvent(simulatedInputEvent); } else { var added = findCharacters(currentValue, lastValue),
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 24 73 65 6c 66 5b 30 5d 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 69 6d 75 6c 61 74 65 64 49 6e 70 75 74 45 76 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 2e 64 61 74 61 28 27 6c 61 73 74 2d 76 61 6c 75 65 27 2c 20 24 73 65 6c 66 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 66 6f 63 75 73 27 2c 20 27 2e 6a 73 5f 6b 61 72 74 72 61 5f 73 61 6e 74 69 74 61 74 69 6f 6e 27 2c Data Ascii: $self[0].dispatchEvent(simulatedInputEvent); } } } $self.data('last-value', $self.val()); } }); }); $(document).on('focus', '.js_kartra_santitation',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49754	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	595	OUT	GET /js/modal3.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 281 Connection: close last-modified: Wed, 21 Dec 2022 10:18:19 GMT etag: "63a2dd6b-119" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 180 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c59496ce91e-DFW
2024-11-07 09:29:19 UTC	281	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 73 68 6f 77 6e 27 2c 27 2e 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 64 61 6c 2d 6f 70 65 6e 27 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 68 69 64 64 65 6e 27 2c 27 2e 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 09 69 66 28 24 28 27 2e 6d 6f 64 61 6c 3a 76 69 73 69 62 6c 65 27 29 2e 6c 65 6e 67 74 68 3d 3d 30 29 0d 0a 20 20 20 20 09 09 24 28 27 62 6f 64 79 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6d Data Ascii: $(document).ready(function(){$(document).on('shown','.modal', function() { $('body').addClass('modal-open'); }); $(document).on('hidden','.modal', function() { if($('.modal:visible').length==0) $('body').removeClass('m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	49750	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	625	OUT	GET /js/node_modules/jquery-form/jquery.form.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:19 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 43811 Connection: close last-modified: Sun, 18 May 2014 13:38:43 GMT etag: "5378b7e3-ab23" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3043 Expires: Thu, 07 Nov 2024 09:34:19 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c596a492e77-DFW
2024-11-07 09:29:19 UTC	930	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 46 6f 72 6d 20 50 6c 75 67 69 6e 0a 20 2a 20 76 65 72 73 69 6f 6e 3a 20 33 2e 35 30 2e 30 2d 32 30 31 34 2e 30 32 2e 30 35 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 35 20 6f 72 20 6c 61 74 65 72 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 6e 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 66 6f 72 6d 2f 0a 20 2a 20 50 72 6f 6a 65 63 74 20 72 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6c 73 75 70 2f 66 6f 72 6d 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 Data Ascii: /! jQuery Form Plugin * version: 3.50.0-2014.02.05 * Requires jQuery v1.5 or later * Copyright (c) 2013 M. Alsup * Examples and documentation at: http://malsup.com/jquery/form/ * Project repository: https://github.com/malsup/form * Dual licensed
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 6e 64 6c 65 72 20 74 6f 20 74 68 65 20 66 6f 72 6d 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 27 23 6d 79 46 6f 72 6d 27 29 2e 6f 6e 28 27 73 75 62 6d 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 20 2f 2f 20 3c 2d 2d 20 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 61 6a 61 78 53 75 62 6d 69 74 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3a 20 27 23 6f 75 74 70 75 74 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 Data Ascii: ndler to the form. For example, $(document).ready(function() { $('#myForm').on('submit', function(e) { e.preventDefault(); // <-- important $(this).ajaxSubmit({ target: '#output' });
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 69 73 2e 70 72 6f 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 69 66 20 28 20 28 20 76 61 6c 20 26 26 20 76 61 6c 2e 6a 71 75 65 72 79 20 29 20 7c 7c 20 74 79 70 65 6f 66 20 76 61 6c 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 61 74 74 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 61 6a 61 78 53 75 62 6d 69 74 28 29 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 73 75 62 6d 69 74 74 69 6e 67 0a 20 2a 20 61 6e 20 48 54 4d 4c 20 66 6f 72 6d 20 75 73 Data Ascii: is.prop.apply(this, arguments); if ( ( val && val.jquery ) \|\| typeof val === 'string' ) { return val; } return this.attr.apply(this, arguments);};/** * ajaxSubmit() provides a mechanism for immediately submitting * an HTML form us
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 73 20 65 78 74 72 61 63 74 65 64 3b 0a 20 20 20 20 2f 2f 20 63 6f 6e 76 65 6e 69 65 6e 74 20 66 6f 72 20 75 73 65 20 77 69 74 68 20 72 69 63 68 20 65 64 69 74 6f 72 73 20 6c 69 6b 65 20 74 69 6e 79 4d 43 45 20 6f 72 20 46 43 4b 45 64 69 74 6f 72 0a 20 20 20 20 76 61 72 20 76 65 74 6f 20 3d 20 7b 7d 3b 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 66 6f 72 6d 2d 70 72 65 2d 73 65 72 69 61 6c 69 7a 65 27 2c 20 5b 74 68 69 73 2c 20 6f 70 74 69 6f 6e 73 2c 20 76 65 74 6f 5d 29 3b 0a 20 20 20 20 69 66 20 28 76 65 74 6f 2e 76 65 74 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 67 28 27 61 6a 61 78 53 75 62 6d 69 74 3a 20 73 75 62 6d 69 74 20 76 65 74 6f 65 64 20 76 69 61 20 66 6f 72 6d 2d 70 72 65 2d 73 65 72 69 61 6c 69 7a 65 20 74 72 69 67 67 65 72 Data Ascii: s extracted; // convenient for use with rich editors like tinyMCE or FCKEditor var veto = {}; this.trigger('form-pre-serialize', [this, options, veto]); if (veto.veto) { log('ajaxSubmit: submit vetoed via form-pre-serialize trigger
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 20 20 20 76 61 72 20 71 20 3d 20 24 2e 70 61 72 61 6d 28 61 2c 20 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 0a 20 20 20 20 69 66 20 28 71 78 29 20 7b 0a 20 20 20 20 20 20 20 20 71 20 3d 20 28 20 71 20 3f 20 28 71 20 2b 20 27 26 27 20 2b 20 71 78 29 20 3a 20 71 78 20 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 74 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3d 3d 20 27 47 45 54 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 75 72 6c 20 2b 3d 20 28 6f 70 74 69 6f 6e 73 2e 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 3e 3d 20 30 20 3f 20 27 26 27 20 3a 20 27 3f 27 29 20 2b 20 71 3b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 20 20 2f 2f 20 64 61 74 61 20 69 Data Ascii: var q = $.param(a, traditional); if (qx) { q = ( q ? (q + '&' + qx) : qx ); } if (options.type.toUpperCase() == 'GET') { options.url += (options.url.indexOf('?') >= 0 ? '&' : '?') + q; options.data = null; // data i
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 6c 64 45 72 72 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 3b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 78 68 72 2c 20 73 74 61 74 75 73 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 74 65 78 74 20 3d 20 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 78 74 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 6c 64 45 72 72 6f 72 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2c 20 5b 78 68 72 2c 20 73 74 61 74 75 73 2c 20 65 72 72 6f 72 2c 20 24 66 6f 72 6d 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b Data Ascii: } }; if (options.error) { var oldError = options.error; options.error = function(xhr, status, error) { var context = options.context \|\| this; oldError.apply(context, [xhr, status, error, $form]); };
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 2f 20 68 61 63 6b 20 74 6f 20 66 69 78 20 53 61 66 61 72 69 20 68 61 6e 67 20 28 74 68 61 6e 6b 73 20 74 6f 20 54 69 6d 20 4d 6f 6c 65 6e 64 69 6a 6b 20 66 6f 72 20 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 2f 2f 20 73 65 65 3a 20 20 68 74 74 70 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 72 6f 75 70 2f 6a 71 75 65 72 79 2d 64 65 76 2f 62 72 6f 77 73 65 5f 74 68 72 65 61 64 2f 74 68 72 65 61 64 2f 33 36 33 39 35 62 37 61 62 35 31 30 64 64 35 64 0a 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4b 65 65 70 41 6c 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 67 65 74 28 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4b 65 65 70 41 6c 69 76 65 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 Data Ascii: / hack to fix Safari hang (thanks to Tim Molendijk for this) // see: http://groups.google.com/group/jquery-dev/browse_thread/thread/36395b7ab510dd5d if (options.closeKeepAlive) { $.get(options.closeKeepAlive, function() {
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 72 74 5b 30 5d 29 2c 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 61 72 74 5b 31 5d 29 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 2f 2f 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 4c 65 76 65 6c 20 32 20 66 69 6c 65 20 75 70 6c 6f 61 64 73 20 28 62 69 67 20 68 61 74 20 74 69 70 20 74 6f 20 66 72 61 6e 63 6f 69 73 32 6d 65 74 7a 29 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 69 6c 65 55 70 6c 6f 61 64 58 68 72 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 64 61 74 61 20 3d 20 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 61 2e 6c Data Ascii: rt[0]), decodeURIComponent(part[1])]); } return result; } // XMLHttpRequest Level 2 file uploads (big hat tip to francois2metz) function fileUploadXhr(a) { var formdata = new FormData(); for (var i=0; i < a.l
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 65 6e 74 2e 74 6f 74 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 6c 65 6e 67 74 68 43 6f 6d 70 75 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 65 72 63 65 6e 74 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 70 6f 73 69 74 69 6f 6e 20 2f 20 74 6f 74 61 6c 20 2a 20 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 28 65 76 65 6e 74 2c 20 70 6f 73 69 74 69 6f 6e 2c 20 74 6f 74 61 6c 2c 20 70 65 72 63 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ent.total; if (event.lengthComputable) { percent = Math.ceil(position / total * 100); } options.uploadProgress(event, position, total, percent);
2024-11-07 09:29:19 UTC	1369	IN	Data Raw: 61 62 6c 65 64 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 64 69 73 61 62 6c 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 20 7b 7d 2c 20 24 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 20 20 73 2e 63 6f 6e 74 65 78 74 20 3d 20 73 2e 63 6f 6e 74 65 78 74 20 7c 7c 20 73 3b 0a 20 20 20 20 20 20 20 20 69 64 20 3d 20 27 6a Data Ascii: abled', false); } else { el.removeAttr('disabled'); } } } s = $.extend(true, {}, $.ajaxSettings, options); s.context = s.context \|\| s; id = 'j

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.11	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 891841ce-c01e-0014-6d8e-2da6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092919Z-15869dbbcc6bdtw9hC1DFWqyfw0000000310000000009hn0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.11	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 0fb75d3f-001e-0049-755c-2e5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092919Z-17df447cdb59mt7dhC1DFWqpg40000000440000000004rss x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.11	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: e92242f2-701e-005c-7858-2ebb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092919Z-17df447cdb528ltlhC1DFWnt1c00000003x000000000dr8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.11	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:19 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5d06d88c-b01e-0084-0908-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092919Z-16547b76f7fj5p7mhC1DFWf8w400000007yg00000000cn4a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:19 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.11	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:19 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ceff4d6f-101e-007a-10c7-2c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092919Z-16547b76f7fm7xw6hC1DFW5px400000007z0000000000a3v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49756	18.172.111.130	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:19 UTC	619	OUT	GET /img/shared/kartra_logo_color.svg HTTP/1.1 Host: d2uolguxr56s4e.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.kartra.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:20 UTC	552	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1929 Connection: close Last-Modified: Fri, 17 Feb 2023 11:22:55 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: UTJ8wGeC.E1t2eeVA8WqlB8iFCiscWGx Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 06 Nov 2024 16:44:23 GMT ETag: "f23eb84201e1d3b2474ea3c971197180" X-Cache: Hit from cloudfront Via: 1.1 284574e4f15389d93bfcb84d196a92f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: z6JqoIG0OT1aG04hyg4jHhreAvk9TtMHS5e6NaM6D2fkYnkVj6NqhA== Age: 60298
2024-11-07 09:29:20 UTC	1929	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 34 20 32 34 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 35 39 35 66 36 35 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 134 24"> <defs> <style> .cls-1 { fill: #fff; } .cls-2 { fill: #595f65; } .cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49762	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	651	OUT	GET /js/node_modules/kartra-jquery-validation/dist/jquery.validate.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:20 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21777 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-5511" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3044 Expires: Thu, 07 Nov 2024 09:34:20 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c5dfd352e22-DFW
2024-11-07 09:29:20 UTC	930	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 31 2e 31 30 2e 30 20 4d 6f 64 69 66 69 65 64 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 61 73 73 69 73 74 61 6e 63 65 2e 64 65 2f 6a 71 75 65 72 79 2d 70 6c 75 67 69 6e 73 2f 6a 71 75 65 72 79 2d 70 6c 75 67 69 6e 2d 76 61 6c 69 64 61 74 69 6f 6e 2f 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 50 6c 75 67 69 6e 73 2f 56 61 6c 69 64 61 74 69 6f 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 4a f6 72 6e 20 5a 61 65 66 66 65 72 65 72 0a 20 2a 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 Data Ascii: /** * jQuery Validation Plugin 1.10.0 Modified * * http://bassistance.de/jquery-plugins/jquery-plugin-validation/ * http://docs.jquery.com/Plugins/Validation * * Copyright (c) 2012 Jrn Zaefferer * * Dual licensed under the MIT and GPL licenses:
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 6e 64 54 6f 28 69 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 29 2c 69 2e 73 65 74 74 69 6e 67 73 2e 73 75 62 6d 69 74 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 69 2c 69 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2c 65 29 2c 69 2e 73 75 62 6d 69 74 42 75 74 74 6f 6e 26 26 73 2e 72 65 6d 6f 76 65 28 29 2c 21 31 29 7d 72 65 74 75 72 6e 20 69 2e 73 65 74 74 69 6e 67 73 2e 64 65 62 75 67 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 69 2e 63 61 6e 63 65 6c 53 75 62 6d 69 74 3f 28 69 2e 63 61 6e 63 65 6c 53 75 62 6d 69 74 3d 21 31 2c 73 28 29 29 3a 69 2e 66 6f 72 6d 28 29 3f 69 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3f 28 69 2e 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 3d 21 30 2c 21 31 29 3a 73 28 29 3a 28 69 2e 66 6f 63 75 73 49 6e 76 61 6c 69 64 28 29 Data Ascii: ndTo(i.currentForm)),i.settings.submitHandler.call(i,i.currentForm,e),i.submitButton&&s.remove(),!1)}return i.settings.debug&&e.preventDefault(),i.cancelSubmit?(i.cancelSubmit=!1,s()):i.form()?i.pendingRequest?(i.formSubmitted=!0,!1):s():(i.focusInvalid()
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 2e 74 72 69 6d 28 22 22 2b 65 2e 76 61 6c 75 65 29 7d 2c 75 6e 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 63 68 65 63 6b 65 64 7d 7d 29 2c 74 2e 76 61 6c 69 64 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 74 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 2e 76 61 6c 69 64 61 74 6f 72 2e 64 65 66 61 75 6c 74 73 2c 65 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 3d 69 2c 74 68 69 73 2e 69 6e 69 74 28 29 7d 2c 74 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f Data Ascii: on(e){return!!t.trim(""+e.value)},unchecked:function(t){return!t.checked}}),t.validator=function(e,i){this.settings=t.extend(!0,{},t.validator.defaults,e),this.currentForm=i,this.init()},t.validator.format=function(e,i){return 1===arguments.length?functio
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 6f 64 65 29 7d 2c 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 2e 6e 61 6d 65 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 29 3a 74 28 65 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 73 73 28 73 29 3a 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 Data Ascii: ode)},highlight:function(e,i,s){"radio"===e.type?this.findByName(e.name).addClass(i).removeClass(s):t(e).addClass(i).removeClass(s)},unhighlight:function(e,i,s){"radio"===e.type?this.findByName(e.name).removeClass(i).addClass(s):t(e).removeClass(i).addCla
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 65 72 73 3d 74 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 3d 7b 7d 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 67 72 6f 75 70 73 3d 7b 7d 3b 74 2e 65 61 63 68 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 67 72 6f 75 70 73 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 74 2e 65 61 63 68 28 73 2e 73 70 6c 69 Data Ascii: ers=t(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var e=this.groups={};t.each(this.settings.groups,function(i,s){t.each(s.spli
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 75 6c 6c 21 3d 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 5b 69 5d 29 3b 65 6c 73 65 20 74 68 69 73 2e 63 68 65 63 6b 28 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 Data Ascii: ull!=this.findByName(e[t].name).length&&this.findByName(e[t].name).length>1)for(var i=0;i<this.findByName(e[t].name).length;i++)this.check(this.findByName(e[t].name)[i]);else this.check(e[t]);return this.valid()},element:function(e){e=this.validationTarge
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 74 68 7d 2c 66 6f 63 75 73 49 6e 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 66 6f 63 75 73 49 6e 76 61 6c 69 64 29 74 72 79 7b 74 28 74 68 69 73 2e 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 28 29 7c 7c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 5b 30 5d 2e 65 6c 65 6d 65 6e 74 7c 7c 5b 5d 29 2e 66 69 6c 74 65 72 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 66 6f 63 75 73 28 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 69 6e 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 61 73 74 41 63 74 69 76 65 3b 72 65 74 75 72 6e 20 65 Data Ascii: th},focusInvalid:function(){if(this.settings.focusInvalid)try{t(this.findLastActive()\|\|this.errorList.length&&this.errorList[0].element\|\|[]).filter(":visible").focus().trigger("focusin")}catch(t){}},findLastActive:function(){var e=this.lastActive;return e
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 74 68 69 73 2e 63 6c 65 61 6e 28 65 29 29 3b 76 61 72 20 69 2c 73 3d 74 28 65 29 2e 72 75 6c 65 73 28 29 2c 6e 3d 21 31 2c 72 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 56 61 6c 75 65 28 65 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 73 29 7b 76 61 72 20 75 3d 7b 6d 65 74 68 6f 64 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 73 5b 61 5d 7d 3b 74 72 79 7b 69 66 28 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 28 69 3d 74 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 61 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 2c 75 2e 70 61 72 61 6d 65 74 65 72 73 29 29 29 7b 6e 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 6e 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 69 29 72 Data Ascii: lidationTargetFor(this.clean(e));var i,s=t(e).rules(),n=!1,r=this.elementValue(e);for(var a in s){var u={method:a,parameters:s[a]};try{if("dependency-mismatch"===(i=t.validator.methods[a].call(this,r,e,u.parameters))){n=!0;continue}if(n=!1,"pending"===i)r
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 65 2c 69 2e 6d 65 74 68 6f 64 29 2c 6e 3d 2f 5c 24 3f 5c 7b 28 5c 64 2b 29 5c 7d 2f 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 73 3d 73 2e 63 61 6c 6c 28 74 68 69 73 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 2c 65 29 3a 6e 2e 74 65 73 74 28 73 29 26 26 28 73 3d 74 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 73 2e 72 65 70 6c 61 63 65 28 6e 2c 22 7b 24 31 7d 22 29 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 29 29 2c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 70 75 73 68 28 7b 6d 65 73 73 61 67 65 3a 73 2c 65 6c 65 6d 65 6e 74 3a 65 7d 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 5b 65 2e 6e 61 6d 65 5d 3d 73 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 5b 65 2e Data Ascii: s=this.defaultMessage(e,i.method),n=/\$?\{(\d+)\}/g;"function"==typeof s?s=s.call(this,i.parameters,e):n.test(s)&&(s=t.validator.format(s.replace(n,"{$1}"),i.parameters)),this.errorList.push({message:s,element:e}),this.errorMap[e.name]=s,this.submitted[e.
2024-11-07 09:29:20 UTC	1369	IN	Data Raw: 73 3d 74 28 22 3c 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2f 3e 22 29 2e 61 74 74 72 28 7b 66 6f 72 3a 74 68 69 73 2e 69 64 4f 72 4e 61 6d 65 28 65 29 2c 67 65 6e 65 72 61 74 65 64 3a 21 30 7d 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 68 74 6d 6c 28 69 7c 7c 22 22 29 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 72 61 70 70 65 72 26 26 28 73 3d 73 2e 68 69 64 65 28 29 2e 73 68 6f 77 28 29 2e 77 72 61 70 28 22 3c 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 72 61 70 70 65 72 2b 22 2f 3e 22 29 2e 70 61 72 65 6e 74 28 29 29 2c 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 73 29 2e 6c 65 6e 67 74 68 Data Ascii: s=t("<"+this.settings.errorElement+"/>").attr({for:this.idOrName(e),generated:!0}).addClass(this.settings.errorClass).html(i\|\|""),this.settings.wrapper&&(s=s.hide().show().wrap("<"+this.settings.wrapper+"/>").parent()),this.labelContainer.append(s).length

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.11	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fb68cf1d-a01e-001e-3b01-2d49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092920Z-16547b76f7fsjlq8hC1DFWehq000000007r0000000006d8m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.11	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e7073254-701e-000d-07b1-2f6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092920Z-15869dbbcc6j87jfhC1DFWky3s000000093g00000000697f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.11	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: de083b16-101e-0079-14f1-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092920Z-16547b76f7f7scqbhC1DFW0m5w00000007r000000000cbf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.11	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 2d611ff0-901e-002a-3d01-2d7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092920Z-16547b76f7f2g4rlhC1DFWnx8800000007yg0000000011tw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.11	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:20 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a288df0b-b01e-00ab-0601-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092920Z-16547b76f7f7scqbhC1DFW0m5w00000007s00000000097ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	49772	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	448	OUT	GET /js/node_modules/kartra-bootstrap/dist/js/bootstrap.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:21 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 28884 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-70d4" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 6950 Expires: Thu, 07 Nov 2024 09:34:21 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c62ac396bec-DFW
2024-11-07 09:29:21 UTC	930	IN	Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6d 6f 64 61 6c 2d 62 6f 64 79 22 29 2e 6c 6f 61 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 62 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 74 68 69 73 Data Ascii: s.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.prototype={constructor:b,toggle:function(){return this[this
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 75 70 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 77 68 69 63 68 3d 3d 32 37 26 26 61 2e 68 69 64 65 28 29 7d 29 3a 74 68 69 73 2e 69 73 53 68 6f 77 6e 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 22 6b 65 79 75 70 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 29 7d 2c 68 69 64 65 57 69 74 68 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 Data Ascii: hown&&this.options.keyboard?this.$element.on("keyup.dismiss.modal",function(b){b.which==27&&a.hide()}):this.isShown\|\|this.$element.off("keyup.dismiss.modal")},hideWithTransition:function(){var b=this,c=setTimeout(function(){b.$element.off(a.support.transi
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6e 2e 6d 6f 64 61 6c 2e 64 65 66 61 75 6c 74 73 2c 64 2e 64 61 74 61 28 29 2c 74 79 70 65 6f 66 20 63 3d 3d 22 6f 62 6a 65 63 74 22 26 26 63 29 3b 65 7c 7c 64 2e 64 61 74 61 28 22 6d 6f 64 61 6c 22 2c 65 3d 6e 65 77 20 62 28 74 68 69 73 2c 66 29 29 2c 74 79 70 65 6f 66 20 63 3d 3d 22 73 74 72 69 6e 67 22 3f 65 5b 63 5d 28 29 3a 66 2e 73 68 6f 77 26 26 65 2e 73 68 6f 77 28 29 7d 29 7d 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 64 65 66 61 75 6c 74 73 3d 7b 62 61 63 6b 64 72 6f 70 3a 21 30 2c 6b 65 79 62 6f 61 72 64 3a 21 30 2c 73 68 6f 77 3a 21 30 7d 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 62 2c 61 2e 66 6e 2e 6d 6f 64 61 6c 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 6d Data Ascii: n.modal.defaults,d.data(),typeof c=="object"&&c);e\|\|d.data("modal",e=new b(this,f)),typeof c=="string"?e[c]():f.show&&e.show()})},a.fn.modal.defaults={backdrop:!0,keyboard:!0,show:!0},a.fn.modal.Constructor=b,a.fn.modal.noConflict=function(){return a.fn.m
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 69 6f 6e 28 63 29 7b 76 61 72 20 64 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 69 66 28 21 2f 28 33 38 7c 34 30 7c 32 37 29 2f 2e 74 65 73 74 28 63 2e 6b 65 79 43 6f 64 65 29 29 72 65 74 75 72 6e 3b 64 3d 61 28 74 68 69 73 29 2c 63 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 69 66 28 64 2e 69 73 28 22 2e 64 69 73 61 62 6c 65 64 2c 20 3a 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 68 3d 65 28 64 29 2c 69 3d 68 2e 68 61 73 43 6c 61 73 73 28 22 6f 70 65 6e 22 29 3b 69 66 28 21 69 7c 7c 69 26 26 63 2e 6b 65 79 43 6f 64 65 3d 3d 32 37 29 72 65 74 75 72 6e 20 63 2e 77 68 69 63 68 3d 3d 32 37 26 26 68 2e 66 69 6e 64 28 62 29 2e 66 6f 63 75 73 28 29 2c 64 2e 63 6c 69 63 6b 28 29 3b 66 3d 61 28 Data Ascii: ion(c){var d,f,g,h,i,j;if(!/(38\|40\|27)/.test(c.keyCode))return;d=a(this),c.preventDefault(),c.stopPropagation();if(d.is(".disabled, :disabled"))return;h=e(d),i=h.hasClass("open");if(!i\|\|i&&c.keyCode==27)return c.which==27&&h.find(b).focus(),d.click();f=a(
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 3b 74 68 69 73 2e 6f 66 66 73 65 74 73 3d 61 28 5b 5d 29 2c 74 68 69 73 2e 74 61 72 67 65 74 73 3d 61 28 5b 5d 29 2c 63 3d 74 68 69 73 2e 24 62 6f 64 79 2e 66 69 6e 64 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2c 64 3d 63 2e 64 61 74 61 28 22 74 61 72 67 65 74 22 29 7c 7c 63 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 65 3d 2f 5e 23 5c 77 2f 2e 74 65 73 74 28 64 29 26 26 61 28 64 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 26 26 5b 5b 65 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 74 6f 70 2b 28 21 61 2e 69 73 57 69 6e 64 6f 77 28 62 2e 24 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 Data Ascii: h:function(){var b=this,c;this.offsets=a([]),this.targets=a([]),c=this.$body.find(this.selector).map(function(){var c=a(this),d=c.data("target")\|\|c.attr("href"),e=/^#\w/.test(d)&&a(d);return e&&e.length&&[[e.position().top+(!a.isWindow(b.$scrollElement.ge
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 73 63 72 6f 6c 6c 73 70 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 6e 2e 73 63 72 6f 6c 6c 73 70 79 3d 63 2c 74 68 69 73 7d 2c 61 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 27 5b 64 61 74 61 2d 73 70 79 3d 22 73 63 72 6f 6c 6c 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 3b 62 2e 73 63 72 6f 6c 6c 73 70 79 28 62 2e 64 61 74 61 28 29 29 7d 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 28 62 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f Data Ascii: scrollspy.noConflict=function(){return a.fn.scrollspy=c,this},a(window).on("load",function(){a('[data-spy="scroll"]').each(function(){var b=a(this);b.scrollspy(b.data())})})}(window.jQuery),!function(a){var b=function(b){this.element=a(b)};b.prototype={co
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6c 69 63 6b 2e 74 61 62 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 74 61 62 22 5d 2c 20 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 70 69 6c 6c 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 28 74 68 69 73 29 2e 74 61 62 28 22 73 68 6f 77 22 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 6e 69 74 28 22 74 6f 6f 6c 74 69 70 22 2c 61 2c 62 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 62 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 2c 66 2c 67 2c 68 2c 69 3b 74 68 Data Ascii: lick.tab.data-api",'[data-toggle="tab"], [data-toggle="pill"]',function(b){b.preventDefault(),a(this).tab("show")})}(window.jQuery),!function(a){var b=function(a,b){this.init("tooltip",a,b)};b.prototype={constructor:b,init:function(b,c,d){var e,f,g,h,i;th
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6f 6e 73 2e 64 65 6c 61 79 2e 73 68 6f 77 29 7d 2c 6c 65 61 76 65 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 61 28 62 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 5b 74 68 69 73 2e 74 79 70 65 5d 28 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 29 2e 64 61 74 61 28 74 68 69 73 2e 74 79 70 65 29 3b 74 68 69 73 2e 74 69 6d 65 6f 75 74 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 29 3b 69 66 28 21 63 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 7c 7c 21 63 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 2e 68 69 64 65 29 72 65 74 75 72 6e 20 63 2e 68 69 64 65 28 29 3b 63 2e 68 6f 76 65 72 53 74 61 74 65 3d 22 6f 75 74 22 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ons.delay.show)},leave:function(b){var c=a(b.currentTarget)[this.type](this._options).data(this.type);this.timeout&&clearTimeout(this.timeout);if(!c.options.delay\|\|!c.options.delay.hide)return c.hide();c.hoverState="out",this.timeout=setTimeout(function()
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 2c 62 3d 3d 22 62 6f 74 74 6f 6d 22 7c 7c 62 3d 3d 22 74 6f 70 22 3f 28 68 3d 30 2c 61 2e 6c 65 66 74 3c 30 26 26 28 68 3d 61 2e 6c 65 66 74 2a 2d 32 2c 61 2e 6c 65 66 74 3d 30 2c 63 2e 6f 66 66 73 65 74 28 61 29 2c 66 3d 63 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 67 3d 63 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 2c 74 68 69 73 2e 72 65 70 6c 61 63 65 41 72 72 6f 77 28 68 2d 64 2b 66 2c 66 2c 22 6c 65 66 74 22 29 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 41 72 72 6f 77 28 67 2d 65 2c 67 2c 22 74 6f 70 22 29 2c 69 26 26 63 2e 6f 66 66 73 65 74 28 61 29 7d 2c 72 65 70 6c 61 63 65 41 72 72 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 72 72 6f 77 28 29 2e 63 73 73 28 63 2c 61 3f 35 30 2a 28 31 2d 61 2f 62 29 2b Data Ascii: ,b=="bottom"\|\|b=="top"?(h=0,a.left<0&&(h=a.left-2,a.left=0,c.offset(a),f=c[0].offsetWidth,g=c[0].offsetHeight),this.replaceArrow(h-d+f,f,"left")):this.replaceArrow(g-e,g,"top"),i&&c.offset(a)},replaceArrow:function(a,b,c){this.arrow().css(c,a?50(1-a/b)+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	49770	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	408	OUT	GET /js/santitation.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:21 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 19117 Connection: close last-modified: Wed, 25 Sep 2024 17:01:24 GMT etag: "66f441e4-4aad" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 2953 Expires: Thu, 07 Nov 2024 09:34:21 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c62a9de2e1f-DFW
2024-11-07 09:29:21 UTC	930	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 56 61 72 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 56 61 72 73 2e 73 61 6e 69 74 61 74 69 6f 6e 5f 72 75 6c 65 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 6c 79 5f 73 61 6e 74 69 74 61 74 69 6f 6e 28 6a 73 56 61 72 73 2e 73 61 6e 69 74 61 74 69 6f 6e 5f 72 75 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 70 70 6c 79 5f 73 61 6e 74 69 74 61 74 69 6f 6e 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 29 20 Data Ascii: $(document).ready(function() { if (typeof jsVars !== 'undefined') { if (typeof jsVars.sanitation_rules !== 'undefined') { apply_santitation(jsVars.sanitation_rules); } }});function apply_santitation(sanitationRules)
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6e 52 75 6c 65 73 5b 27 64 65 63 69 6d 61 6c 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 20 7c 7c 20 28 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 2e 6d 61 74 63 68 28 2f 5c 2e 2f 67 29 20 7c 7c 20 5b 5d 29 2e 6c 65 6e 67 74 68 20 3e 20 31 20 26 26 20 6b 65 79 20 3d 3d 3d 20 27 2e 27 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 76 65 72 69 66 79 56 61 6c 75 65 4c 65 6e 67 74 68 28 65 6c 65 6d 65 6e 74 2e 76 61 6c 28 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 Data Ascii: nRules['decimal']), result = true; if (!regex.test(key) \|\| ((element.val().match(/\./g) \|\| []).length > 1 && key === '.') \|\| !verifyValueLength(element.val())) { result = false; }
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 73 5f 6e 75 6d 62 65 72 73 5f 73 70 65 63 69 61 6c 5f 63 68 61 72 5f 6e 6f 5f 73 70 61 63 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 Data Ascii: result = true; if (!regex.test(key)) { result = false; } return result; }, letters_numbers_special_char_no_space: function (element, key) { var regex = new RegExp(sanitati
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6e 6f 74 68 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6e 61 6d 65 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b Data Ascii: }, nothing: function (element, key) { return false; }, name: function (element, key) { var regex = new RegExp(sanitationRules['name']), result = true; if (!regex.test(key)) {
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 5f 64 6f 6d 61 69 6e 5f 64 6f 6d 61 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b Data Ascii: result = true; if (!regex.test(key)) { result = false; } return result; }, custom_domain_domain: function (element, key) { var regex = new RegExp(sanitationRules[
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 22 27 22 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 5f 66 69 65 6c 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 63 75 73 74 6f 6d 5f 66 69 65 6c 64 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "'")) { result = false; } return result; }, custom_field: function (element, key) { var regex = new RegExp(sanitationRules['custom_field']), result = true;
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6e 65 67 61 74 69 76 65 5f 6e 75 6d 65 72 69 63 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 65 67 65 78 2e 74 65 73 74 28 6b 65 79 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 70 65 72 63 65 6e 74 61 67 65 5f 73 69 6e 67 6c 65 5f 64 65 63 69 6d 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: regex = new RegExp(sanitationRules['negative_numeric']), result = true; if (!regex.test(key)) { result = false; } return result; }, percentage_single_decimal: function(
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6b 65 79 77 6f 72 64 5f 6e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 2c 20 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 67 65 78 20 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 73 61 6e 69 74 61 74 69 6f 6e 52 75 6c 65 73 5b 27 6b 65 79 77 6f 72 64 5f 6e 61 6d 65 27 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 Data Ascii: { result = false; } return result; }, keyword_name: function (element, key) { var regex = new RegExp(sanitationRules['keyword_name']), result = true; if (!
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 27 6e 6f 74 68 69 6e 67 27 20 3d 3d 3d 20 74 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 2e 76 61 6c 28 6c 61 73 74 56 61 6c 75 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 5b 30 5d 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 69 6d 75 6c 61 74 65 64 49 6e 70 75 74 45 76 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 64 64 65 64 20 20 20 3d 20 66 69 6e 64 43 68 61 72 61 63 74 65 72 73 28 63 75 72 72 65 6e 74 56 61 6c 75 65 2c 20 6c 61 73 74 56 61 6c 75 65 29 2c 0a 20 20 20 20 20 20 20 20 Data Ascii: if ('nothing' === type) { $self.val(lastValue); $self[0].dispatchEvent(simulatedInputEvent); } else { var added = findCharacters(currentValue, lastValue),
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 24 73 65 6c 66 5b 30 5d 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 73 69 6d 75 6c 61 74 65 64 49 6e 70 75 74 45 76 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 65 6c 66 2e 64 61 74 61 28 27 6c 61 73 74 2d 76 61 6c 75 65 27 2c 20 24 73 65 6c 66 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 66 6f 63 75 73 27 2c 20 27 2e 6a 73 5f 6b 61 72 74 72 61 5f 73 61 6e 74 69 74 61 74 69 6f 6e 27 2c Data Ascii: $self[0].dispatchEvent(simulatedInputEvent); } } } $self.data('last-value', $self.val()); } }); }); $(document).on('focus', '.js_kartra_santitation',

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49768	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	403	OUT	GET /js/modal3.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:21 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 281 Connection: close last-modified: Wed, 21 Dec 2022 10:18:19 GMT etag: "63a2dd6b-119" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 182 Expires: Thu, 07 Nov 2024 09:34:21 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c62ac4fe905-DFW
2024-11-07 09:29:21 UTC	281	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 73 68 6f 77 6e 27 2c 27 2e 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 64 61 6c 2d 6f 70 65 6e 27 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 27 68 69 64 64 65 6e 27 2c 27 2e 6d 6f 64 61 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 09 69 66 28 24 28 27 2e 6d 6f 64 61 6c 3a 76 69 73 69 62 6c 65 27 29 2e 6c 65 6e 67 74 68 3d 3d 30 29 0d 0a 20 20 20 20 09 09 24 28 27 62 6f 64 79 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6d Data Ascii: $(document).ready(function(){$(document).on('shown','.modal', function() { $('body').addClass('modal-open'); }); $(document).on('hidden','.modal', function() { if($('.modal:visible').length==0) $('body').removeClass('m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	49769	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	433	OUT	GET /js/node_modules/jquery-form/jquery.form.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:21 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 43811 Connection: close last-modified: Sun, 18 May 2014 13:38:43 GMT etag: "5378b7e3-ab23" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3045 Expires: Thu, 07 Nov 2024 09:34:21 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c62ac08e80f-DFW
2024-11-07 09:29:21 UTC	930	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 46 6f 72 6d 20 50 6c 75 67 69 6e 0a 20 2a 20 76 65 72 73 69 6f 6e 3a 20 33 2e 35 30 2e 30 2d 32 30 31 34 2e 30 32 2e 30 35 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 35 20 6f 72 20 6c 61 74 65 72 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 6e 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 66 6f 72 6d 2f 0a 20 2a 20 50 72 6f 6a 65 63 74 20 72 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6c 73 75 70 2f 66 6f 72 6d 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 Data Ascii: /! jQuery Form Plugin * version: 3.50.0-2014.02.05 * Requires jQuery v1.5 or later * Copyright (c) 2013 M. Alsup * Examples and documentation at: http://malsup.com/jquery/form/ * Project repository: https://github.com/malsup/form * Dual licensed
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6e 64 6c 65 72 20 74 6f 20 74 68 65 20 66 6f 72 6d 2e 20 20 46 6f 72 20 65 78 61 6d 70 6c 65 2c 0a 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 27 23 6d 79 46 6f 72 6d 27 29 2e 6f 6e 28 27 73 75 62 6d 69 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 20 2f 2f 20 3c 2d 2d 20 69 6d 70 6f 72 74 61 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 61 6a 61 78 53 75 62 6d 69 74 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3a 20 27 23 6f 75 74 70 75 74 27 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 Data Ascii: ndler to the form. For example, $(document).ready(function() { $('#myForm').on('submit', function(e) { e.preventDefault(); // <-- important $(this).ajaxSubmit({ target: '#output' });
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 69 73 2e 70 72 6f 70 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 20 20 20 20 69 66 20 28 20 28 20 76 61 6c 20 26 26 20 76 61 6c 2e 6a 71 75 65 72 79 20 29 20 7c 7c 20 74 79 70 65 6f 66 20 76 61 6c 20 3d 3d 3d 20 27 73 74 72 69 6e 67 27 20 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 61 74 74 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0a 7d 3b 0a 0a 2f 2a 2a 0a 20 2a 20 61 6a 61 78 53 75 62 6d 69 74 28 29 20 70 72 6f 76 69 64 65 73 20 61 20 6d 65 63 68 61 6e 69 73 6d 20 66 6f 72 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 73 75 62 6d 69 74 74 69 6e 67 0a 20 2a 20 61 6e 20 48 54 4d 4c 20 66 6f 72 6d 20 75 73 Data Ascii: is.prop.apply(this, arguments); if ( ( val && val.jquery ) \|\| typeof val === 'string' ) { return val; } return this.attr.apply(this, arguments);};/** * ajaxSubmit() provides a mechanism for immediately submitting * an HTML form us
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 73 20 65 78 74 72 61 63 74 65 64 3b 0a 20 20 20 20 2f 2f 20 63 6f 6e 76 65 6e 69 65 6e 74 20 66 6f 72 20 75 73 65 20 77 69 74 68 20 72 69 63 68 20 65 64 69 74 6f 72 73 20 6c 69 6b 65 20 74 69 6e 79 4d 43 45 20 6f 72 20 46 43 4b 45 64 69 74 6f 72 0a 20 20 20 20 76 61 72 20 76 65 74 6f 20 3d 20 7b 7d 3b 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 66 6f 72 6d 2d 70 72 65 2d 73 65 72 69 61 6c 69 7a 65 27 2c 20 5b 74 68 69 73 2c 20 6f 70 74 69 6f 6e 73 2c 20 76 65 74 6f 5d 29 3b 0a 20 20 20 20 69 66 20 28 76 65 74 6f 2e 76 65 74 6f 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 6f 67 28 27 61 6a 61 78 53 75 62 6d 69 74 3a 20 73 75 62 6d 69 74 20 76 65 74 6f 65 64 20 76 69 61 20 66 6f 72 6d 2d 70 72 65 2d 73 65 72 69 61 6c 69 7a 65 20 74 72 69 67 67 65 72 Data Ascii: s extracted; // convenient for use with rich editors like tinyMCE or FCKEditor var veto = {}; this.trigger('form-pre-serialize', [this, options, veto]); if (veto.veto) { log('ajaxSubmit: submit vetoed via form-pre-serialize trigger
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 20 20 76 61 72 20 71 20 3d 20 24 2e 70 61 72 61 6d 28 61 2c 20 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 0a 20 20 20 20 69 66 20 28 71 78 29 20 7b 0a 20 20 20 20 20 20 20 20 71 20 3d 20 28 20 71 20 3f 20 28 71 20 2b 20 27 26 27 20 2b 20 71 78 29 20 3a 20 71 78 20 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 74 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3d 3d 20 27 47 45 54 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 75 72 6c 20 2b 3d 20 28 6f 70 74 69 6f 6e 73 2e 75 72 6c 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 3e 3d 20 30 20 3f 20 27 26 27 20 3a 20 27 3f 27 29 20 2b 20 71 3b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 20 20 2f 2f 20 64 61 74 61 20 69 Data Ascii: var q = $.param(a, traditional); if (qx) { q = ( q ? (q + '&' + qx) : qx ); } if (options.type.toUpperCase() == 'GET') { options.url += (options.url.indexOf('?') >= 0 ? '&' : '?') + q; options.data = null; // data i
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 7d 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 6c 64 45 72 72 6f 72 20 3d 20 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 3b 0a 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 78 68 72 2c 20 73 74 61 74 75 73 2c 20 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 74 65 78 74 20 3d 20 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 78 74 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 6c 64 45 72 72 6f 72 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2c 20 5b 78 68 72 2c 20 73 74 61 74 75 73 2c 20 65 72 72 6f 72 2c 20 24 66 6f 72 6d 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b Data Ascii: } }; if (options.error) { var oldError = options.error; options.error = function(xhr, status, error) { var context = options.context \|\| this; oldError.apply(context, [xhr, status, error, $form]); };
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 2f 20 68 61 63 6b 20 74 6f 20 66 69 78 20 53 61 66 61 72 69 20 68 61 6e 67 20 28 74 68 61 6e 6b 73 20 74 6f 20 54 69 6d 20 4d 6f 6c 65 6e 64 69 6a 6b 20 66 6f 72 20 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 2f 2f 20 73 65 65 3a 20 20 68 74 74 70 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 67 72 6f 75 70 2f 6a 71 75 65 72 79 2d 64 65 76 2f 62 72 6f 77 73 65 5f 74 68 72 65 61 64 2f 74 68 72 65 61 64 2f 33 36 33 39 35 62 37 61 62 35 31 30 64 64 35 64 0a 20 20 20 20 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4b 65 65 70 41 6c 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 67 65 74 28 6f 70 74 69 6f 6e 73 2e 63 6c 6f 73 65 4b 65 65 70 41 6c 69 76 65 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 Data Ascii: / hack to fix Safari hang (thanks to Tim Molendijk for this) // see: http://groups.google.com/group/jquery-dev/browse_thread/thread/36395b7ab510dd5d if (options.closeKeepAlive) { $.get(options.closeKeepAlive, function() {
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 72 74 5b 30 5d 29 2c 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 61 72 74 5b 31 5d 29 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 20 2f 2f 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 4c 65 76 65 6c 20 32 20 66 69 6c 65 20 75 70 6c 6f 61 64 73 20 28 62 69 67 20 68 61 74 20 74 69 70 20 74 6f 20 66 72 61 6e 63 6f 69 73 32 6d 65 74 7a 29 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 66 69 6c 65 55 70 6c 6f 61 64 58 68 72 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 64 61 74 61 20 3d 20 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 61 2e 6c Data Ascii: rt[0]), decodeURIComponent(part[1])]); } return result; } // XMLHttpRequest Level 2 file uploads (big hat tip to francois2metz) function fileUploadXhr(a) { var formdata = new FormData(); for (var i=0; i < a.l
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 65 6e 74 2e 74 6f 74 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 6c 65 6e 67 74 68 43 6f 6d 70 75 74 61 62 6c 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 65 72 63 65 6e 74 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 70 6f 73 69 74 69 6f 6e 20 2f 20 74 6f 74 61 6c 20 2a 20 31 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 74 69 6f 6e 73 2e 75 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 28 65 76 65 6e 74 2c 20 70 6f 73 69 74 69 6f 6e 2c 20 74 6f 74 61 6c 2c 20 70 65 72 63 65 6e 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ent.total; if (event.lengthComputable) { percent = Math.ceil(position / total * 100); } options.uploadProgress(event, position, total, percent);
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 61 62 6c 65 64 27 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 64 69 73 61 62 6c 65 64 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 20 7b 7d 2c 20 24 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 20 20 20 20 20 20 20 20 73 2e 63 6f 6e 74 65 78 74 20 3d 20 73 2e 63 6f 6e 74 65 78 74 20 7c 7c 20 73 3b 0a 20 20 20 20 20 20 20 20 69 64 20 3d 20 27 6a Data Ascii: abled', false); } else { el.removeAttr('disabled'); } } } s = $.extend(true, {}, $.ajaxSettings, options); s.context = s.context \|\| s; id = 'j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	49771	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	451	OUT	GET /js/node_modules/kartra-jquery/jquery-1.8/jquery-1.8.3.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:21 UTC	441	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 151029 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-24df5" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3858 Expires: Thu, 07 Nov 2024 09:34:21 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c62ae34e5bd-DFW
2024-11-07 09:29:21 UTC	928	IN	Data Raw: 2f 2a 0a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 38 2e 33 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 0a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 0a 20 44 61 74 65 3a 20 54 75 65 20 4e 6f 76 20 31 33 20 32 30 31 32 20 30 38 3a 32 30 3a 33 33 20 47 4d 54 2d 30 Data Ascii: /* jQuery JavaScript Library v1.8.3 http://jquery.com/ Includes Sizzle.js http://sizzlejs.com/ Copyright 2012 jQuery Foundation and other contributors Released under the MIT license http://jquery.org/license Date: Tue Nov 13 2012 08:20:33 GMT-0
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 0a 20 20 20 20 63 6f 72 65 5f 72 6e 6f 74 77 68 69 74 65 3d 2f 5c 53 2f 2c 63 6f 72 65 5f 72 73 70 61 63 65 3d 2f 5c 73 2b 2f 2c 72 74 72 69 6d 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 72 71 75 69 63 6b 45 78 70 72 3d 2f 5e 28 3f 3a 5c 73 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 7c 23 28 5b 5c 77 2d 5d 2a 29 29 24 2f 2c 72 73 69 6e 67 6c 65 54 61 67 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 7c 29 24 2f 2c 72 76 61 6c 69 64 63 68 61 72 73 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d 2a 24 2f 2c 72 76 61 6c 69 64 62 72 61 63 65 73 3d 2f 28 3f 3a 5e 7c 3a 7c 2c 29 28 3f 3a 5c Data Ascii: :[eE][\-+]?\d+\|)/.source, core_rnotwhite=/\S/,core_rspace=/\s+/,rtrim=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,rquickExpr=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,rsingleTag=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,rvalidchars=/^[\],:{}\s]*$/,rvalidbraces=/(?:^\|:\|,)(?:\
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 73 65 6c 65 63 74 6f 72 3d 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 6d 61 74 63 68 5b 31 5d 2c 64 6f 63 2c 74 72 75 65 29 3b 69 66 28 72 73 69 6e 67 6c 65 54 61 67 2e 74 65 73 74 28 6d 61 74 63 68 5b 31 5d 29 26 26 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 63 6f 6e 74 65 78 74 29 29 74 68 69 73 2e 61 74 74 72 2e 63 61 6c 6c 28 73 65 6c 65 63 74 6f 72 2c 63 6f 6e 74 65 78 74 2c 74 72 75 65 29 3b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 74 68 69 73 2c 73 65 6c 65 63 74 6f 72 29 7d 65 6c 73 65 7b 65 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6d 61 74 63 68 5b 32 5d 29 3b 69 66 28 65 6c 65 6d 26 26 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 65 6c 65 6d Data Ascii: selector=jQuery.parseHTML(match[1],doc,true);if(rsingleTag.test(match[1])&&jQuery.isPlainObject(context))this.attr.call(selector,context,true);return jQuery.merge(this,selector)}else{elem=document.getElementById(match[2]);if(elem&&elem.parentNode){if(elem
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 20 65 71 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 3d 2b 69 3b 72 65 74 75 72 6e 20 69 3d 3d 3d 2d 31 3f 74 68 69 73 2e 73 6c 69 63 65 28 69 29 3a 74 68 69 73 2e 73 6c 69 63 65 28 69 2c 69 2b 31 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 6f 72 65 5f 73 6c 69 63 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 22 73 6c 69 63 65 22 2c 63 6f 72 65 5f 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 6a 6f 69 6e 28 22 2c 22 Data Ascii: eq:function(i){i=+i;return i===-1?this.slice(i):this.slice(i,i+1)},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},slice:function(){return this.pushStack(core_slice.apply(this,arguments),"slice",core_slice.call(arguments).join(","
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 77 2e 24 3d 5f 24 3b 69 66 28 64 65 65 70 26 26 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 3d 3d 6a 51 75 65 72 79 29 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3d 5f 6a 51 75 65 72 79 3b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 7d 2c 69 73 52 65 61 64 79 3a 66 61 6c 73 65 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 68 6f 6c 64 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 68 6f 6c 64 29 7b 69 66 28 68 6f 6c 64 29 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 2b 2b 3b 65 6c 73 65 20 6a 51 75 65 72 79 2e 72 65 61 64 79 28 74 72 75 65 29 7d 2c 0a 20 20 20 20 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 77 61 69 74 29 7b 69 66 28 77 61 69 74 3d 3d 3d 74 72 75 65 3f 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 3a 6a 51 75 65 72 79 2e 69 73 52 65 61 64 79 29 72 Data Ascii: w.$=_$;if(deep&&window.jQuery===jQuery)window.jQuery=_jQuery;return jQuery},isReady:false,readyWait:1,holdReady:function(hold){if(hold)jQuery.readyWait++;else jQuery.ready(true)}, ready:function(wait){if(wait===true?--jQuery.readyWait:jQuery.isReady)r
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 74 73 29 7b 76 61 72 20 70 61 72 73 65 64 3b 69 66 28 21 64 61 74 61 7c 7c 74 79 70 65 6f 66 20 64 61 74 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 63 6f 6e 74 65 78 74 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 73 63 72 69 70 74 73 3d 63 6f 6e 74 65 78 74 3b 63 6f 6e 74 65 78 74 3d 30 7d 63 6f 6e 74 65 78 74 3d 63 6f 6e 74 65 78 74 7c 7c 64 6f 63 75 6d 65 6e 74 3b 69 66 28 70 61 72 73 65 64 3d 72 73 69 6e 67 6c 65 54 61 67 2e 65 78 65 63 28 64 61 74 61 29 29 72 65 74 75 72 6e 5b 63 6f 6e 74 65 78 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 61 72 73 65 64 5b 31 5d 29 5d 3b 70 61 72 73 65 64 3d 6a 51 75 65 72 79 2e 62 75 69 6c 64 46 72 61 67 6d 65 6e 74 28 5b 64 61 74 61 5d 2c 63 6f 6e 74 Data Ascii: ts){var parsed;if(!data\|\|typeof data!=="string")return null;if(typeof context==="boolean"){scripts=context;context=0}context=context\|\|document;if(parsed=rsingleTag.exec(data))return[context.createElement(parsed[1])];parsed=jQuery.buildFragment([data],cont
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 2c 66 63 61 6d 65 6c 43 61 73 65 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 2c 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 0a 20 20 20 20 20 20 20 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 2c 63 61 6c 6c 62 61 63 6b 2c 61 72 67 73 29 7b 76 61 72 20 6e 61 6d 65 2c 69 3d 30 2c 6c 65 6e 67 74 68 3d 6f 62 6a 2e 6c 65 6e 67 74 68 2c 69 73 4f 62 6a 3d 6c 65 6e 67 74 68 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 6a 51 75 65 72 79 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 3b 69 66 28 61 72 67 73 29 69 66 28 69 73 4f 62 6a 29 66 Data Ascii: ,fcamelCase)},nodeName:function(elem,name){return elem.nodeName&&elem.nodeName.toLowerCase()=== name.toLowerCase()},each:function(obj,callback,args){var name,i=0,length=obj.length,isObj=length===undefined\|\|jQuery.isFunction(obj);if(args)if(isObj)f
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 3d 73 65 63 6f 6e 64 5b 6a 2b 2b 5d 3b 66 69 72 73 74 2e 6c 65 6e 67 74 68 3d 69 3b 72 65 74 75 72 6e 20 66 69 72 73 74 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 69 6e 76 29 7b 76 61 72 20 72 65 74 56 61 6c 2c 72 65 74 3d 5b 5d 2c 69 3d 30 2c 6c 65 6e 67 74 68 3d 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 3b 69 6e 76 3d 21 21 69 6e 76 3b 66 6f 72 28 3b 69 3c 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 72 65 74 56 61 6c 3d 21 21 63 61 6c 6c 62 61 63 6b 28 65 6c 65 6d 73 5b 69 5d 2c 69 29 3b 69 66 28 69 6e 76 21 3d 3d 72 65 74 56 61 6c 29 72 65 74 2e 70 75 73 68 28 65 6c 65 6d 73 5b 69 5d 29 7d 72 65 74 75 72 6e 20 72 65 74 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 61 72 67 Data Ascii: =second[j++];first.length=i;return first},grep:function(elems,callback,inv){var retVal,ret=[],i=0,length=elems.length;inv=!!inv;for(;i<length;i++){retVal=!!callback(elems[i],i);if(inv!==retVal)ret.push(elems[i])}return ret},map:function(elems,callback,arg
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 6d 2c 6b 65 79 2c 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 65 78 65 63 2e 63 61 6c 6c 28 6a 51 75 65 72 79 28 65 6c 65 6d 29 2c 76 61 6c 75 65 29 7d 7d 65 6c 73 65 7b 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 2c 76 61 6c 75 65 29 3b 66 6e 3d 6e 75 6c 6c 7d 69 66 28 66 6e 29 66 6f 72 28 3b 69 3c 6c 65 6e 67 74 68 3b 69 2b 2b 29 66 6e 28 65 6c 65 6d 73 5b 69 5d 2c 6b 65 79 2c 65 78 65 63 3f 76 61 6c 75 65 2e 63 61 6c 6c 28 65 6c 65 6d 73 5b 69 5d 2c 69 2c 66 6e 28 65 6c 65 6d 73 5b 69 5d 2c 6b 65 79 29 29 3a 76 61 6c 75 65 2c 70 61 73 73 29 3b 63 68 61 69 6e 61 62 6c 65 3d 31 7d 72 65 74 75 72 6e 20 63 68 61 69 6e 61 62 6c 65 3f 65 6c 65 6d 73 3a 62 75 6c 6b 3f 66 6e 2e 63 61 6c 6c 28 65 6c 65 6d 73 29 3a 6c 65 6e 67 74 68 3f 66 6e 28 65 6c 65 6d 73 5b 30 5d Data Ascii: m,key,value){return exec.call(jQuery(elem),value)}}else{fn.call(elems,value);fn=null}if(fn)for(;i<length;i++)fn(elems[i],key,exec?value.call(elems[i],i,fn(elems[i],key)):value,pass);chainable=1}return chainable?elems:bulk?fn.call(elems):length?fn(elems[0]
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 61 6c 6c 62 61 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 6f 70 74 69 6f 6e 73 3d 74 79 70 65 6f 66 20 6f 70 74 69 6f 6e 73 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 6f 70 74 69 6f 6e 73 43 61 63 68 65 5b 6f 70 74 69 6f 6e 73 5d 7c 7c 63 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 6f 70 74 69 6f 6e 73 29 3a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 70 74 69 6f 6e 73 29 3b 76 61 72 20 6d 65 6d 6f 72 79 2c 66 69 72 65 64 2c 66 69 72 69 6e 67 2c 66 69 72 69 6e 67 53 74 61 72 74 2c 66 69 72 69 6e 67 4c 65 6e 67 74 68 2c 66 69 72 69 6e 67 49 6e 64 65 78 2c 6c 69 73 74 3d 5b 5d 2c 73 74 61 63 6b 3d 21 6f 70 74 69 6f 6e 73 2e 6f 6e 63 65 26 26 0a 20 20 20 20 5b 5d 2c 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 6d 65 6d 6f Data Ascii: allbacks=function(options){options=typeof options==="string"?optionsCache[options]\|\|createOptions(options):jQuery.extend({},options);var memory,fired,firing,firingStart,firingLength,firingIndex,list=[],stack=!options.once&& [],fire=function(data){memo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49774	104.16.80.73	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	616	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://app.kartra.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://app.kartra.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:21 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8dec4c62d8bf8785-DFW
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 72 20 69 3d 6e 28 36 39 39 29 2c 6f 3d 6e 28 37 35 32 29 2c 61 3d 6e 28 31 30 34 29 2c 63 3d 6e 28 35 30 38 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 74 2b 3d 65 3b 65 6c 73 65 20 74 72 79 7b 76 61 Data Ascii: r i=n(699),o=n(752),a=n(104),c=n(508);!function(){function e(e){var t="";if(t=window.location.origin?window.location.origin:"".concat(window.location.protocol,"://").concat(window.location.host),e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{va
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 29 3d 3d 74 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 29 2c 5f 28 74 29 7d 21 62 26 26 77 26 26 28 62 3d 21 30 2c 42 28 29 29 7d 65 6c 73 65 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 29 3b 76 61 72 20 45 3d 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 30 2c 61 2e 6f 6e 4c 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 49 44 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 49 4e 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 54 54 46 42 29 28 78 29 2c Data Ascii: )==t&&(null==w?void 0:w.triggered)\|\|P(),_(t)}!b&&w&&(b=!0,B())}else"visible"===document.visibilityState&&(new Date).getTime()}));var E={};"function"==typeof PerformanceObserver&&((0,a.onLCP)(x),(0,a.onFID)(x),(0,a.onFCP)(x),(0,a.onINP)(x),(0,a.onTTFB)(x),
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 2c 70 26 26 28 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 43 29 2c 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 26 26 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 29 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 2c 6e 3d 22 22 3b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ,p&&((0,o.sendObjectBeacon)("",a,(function(){}),!1,C),void 0!==p.forward&&void 0!==p.forward.url&&(0,o.sendObjectBeacon)("",a,(function(){}),!1,p.forward.url)))},B=function(){var t=function(){var t=s.getEntriesByType("navigation")[0],n="";try{n="function"
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 28 6f 2c 61 2c 63 29 7b 6e 3d 65 28 63 29 3b 76 61 72 20 75 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 6e 3d 3d 75 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 75 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 75 29 2c 5f 28 75 29 29 2c 69 28 29 29 2c 72 2e 61 70 70 6c 79 28 74 2c 5b 6f 2c 61 2c 63 5d 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 Data Ascii: (o,a,c){n=e(c);var u=e(),s=!0;return n==u&&(s=!1),s&&(A()&&((null==w?void 0:w.url)==u&&(null==w?void 0:w.triggered)\|\|P(u),_(u)),i()),r.apply(t,[o,a,c])},window.addEventListener("popstate",(function(t){A()&&((null==w?void 0:w.url)==n&&(null==w?void 0:w.tri
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 45 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 45 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 73 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 69 66 28 70 26 26 70 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 2c 6e 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 73 6f 75 72 63 65 22 5d 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 3d 6e 5b 74 5d 2c 69 3d 30 2c 6f 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 72 29 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6f 5b 69 5d 2c 63 3d 61 Data Ascii: E.inp.element=c.eventTarget,E.inp.name=c.eventType))}}function F(){return s.timeOrigin}function I(){if(p&&p.serverTiming){for(var e=[],t=0,n=["navigation","resource"];t<n.length;t++)for(var r=n[t],i=0,o=s.getEntriesByType(r);i<o.length;i++){var a=o[i],c=a
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 29 7d 28 29 7d 2c 37 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 69 7c 7c 28 74 2e 73 69 74 65 54 6f 6b 65 6e 26 26 74 2e 76 65 72 73 69 6f 6e 73 2e 66 6c 3f 22 2f 63 64 6e 2d 63 67 69 2f 72 75 6d 3f 22 2e 63 6f 6e 63 61 74 28 65 29 3a 22 2f 63 64 6e 2d 63 67 69 2f 62 65 61 63 6f 6e 2f 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2e 63 6f 6e Data Ascii: )}()},752:function(e,t){"use strict";t.__esModule=!0,t.sendObjectBeacon=void 0,t.sendObjectBeacon=function(e,t,n,r,i){void 0===r&&(r=!1),void 0===i&&(i=null);var o=i\|\|(t.siteToken&&t.versions.fl?"/cdn-cgi/rum?".concat(e):"/cdn-cgi/beacon/performance?".con
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 76 61 72 20 74 3d 61 28 29 3b 69 66 28 74 29 7b 69 66 28 65 3c 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 29 72 65 74 75 72 6e 22 64 6f 6d 2d 69 6e 74 65 72 61 63 74 69 76 65 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 72 65 74 75 72 6e 22 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 22 7d 72 Data Ascii: ing"===document.readyState)return"loading";var t=a();if(t){if(e<t.domInteractive)return"loading";if(0===t.domContentLoadedEventStart\|\|e<t.domContentLoadedEventStart)return"dom-interactive";if(0===t.domComplete\|\|e<t.domComplete)return"dom-content-loaded"}r
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 74 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 69 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 Data Ascii: e){Promise.resolve().then((function(){t(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},n\|\|{})),r}}catch(e){}},g=function(e,t,n,r){var i,o;return function(a){t.value>=0&&(a\|\|r)&&((o=t.value-(i\|\|0))\|\|void 0===i)&&(i=t.value,t.delt
2024-11-07 09:29:21 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 43 28 29 2c 69 3d 70 28 22 46 43 50 22 29 2c 6f 3d 6d 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 76 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 6f 26 26 28 6e 3d 67 28 65 2c 69 2c 42 2c 74 2e Data Ascii: {},P((function(){var n,r=C(),i=p("FCP"),o=m("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-v(),0),i.entries.push(e),n(!0)))}))}));o&&(n=g(e,i,B,t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	49773	18.172.111.130	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	385	OUT	GET /img/shared/kartra_logo_color.svg HTTP/1.1 Host: d2uolguxr56s4e.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:21 UTC	552	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1929 Connection: close Last-Modified: Fri, 17 Feb 2023 11:22:55 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: UTJ8wGeC.E1t2eeVA8WqlB8iFCiscWGx Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 06 Nov 2024 16:44:23 GMT ETag: "f23eb84201e1d3b2474ea3c971197180" X-Cache: Hit from cloudfront Via: 1.1 7011da69940360ddebc87f61490ffecc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: q-TpCihCze8ROnHj2GzmiESsLTchd5TYFn1jdqmDuRN196BEBIK3DQ== Age: 60299
2024-11-07 09:29:21 UTC	1929	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 34 20 32 34 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 35 39 35 66 36 35 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 134 24"> <defs> <style> .cls-1 { fill: #fff; } .cls-2 { fill: #595f65; } .cl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-07 09:29:21 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=77716 Date: Thu, 07 Nov 2024 09:29:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.11	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 32d5e889-e01e-0099-1f00-2dda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092921Z-16547b76f7fr4g8xhC1DFW9cqc000000070g00000000e062 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.11	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 1511aab4-801e-0015-535c-2ef97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092921Z-15869dbbcc6bdtw9hC1DFWqyfw00000002z000000000d35c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.11	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3fd26caf-a01e-0032-3d02-2d1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092921Z-16547b76f7f7scqbhC1DFW0m5w00000007r000000000cbgb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.11	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:21 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 215f87f6-c01e-0046-2c15-2d2db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092921Z-16547b76f7f4k79zhC1DFWu9y000000007w000000000fepn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:21 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.11	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:21 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:21 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: ac6bbd40-501e-007b-3e0c-2d5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092921Z-16547b76f7fr4g8xhC1DFW9cqc000000075g000000004qka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	49781	18.172.111.130	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	609	OUT	GET /img/shared/favicon.ico HTTP/1.1 Host: d2uolguxr56s4e.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://app.kartra.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:22 UTC	608	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 2238 Connection: close Last-Modified: Tue, 10 Oct 2023 10:01:08 GMT x-amz-server-side-encryption: AES256 x-amz-meta-version-id: epE6h0SoNmE91XgoqF66UFcuWujxroOp x-amz-version-id: yzPUdlbfy6vbg3Wh80EKkC_HAZPrBwIm Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 06 Nov 2024 10:33:46 GMT ETag: "0fca864384e681e506fb3c2f2e3ab488" X-Cache: Hit from cloudfront Via: 1.1 8e59b301b68bf6ac4dcacf061926e712.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: X-9iPohttwOFx9YAcMDLVQJ2sXkrn1Vqpy3ezGUhK5OaNi5mRfJhjw== Age: 82537
2024-11-07 09:29:22 UTC	2238	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR@@iqtEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	49782	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-07 09:29:22 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77719 Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-07 09:29:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.11	49783	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	459	OUT	GET /js/node_modules/kartra-jquery-validation/dist/jquery.validate.min.js HTTP/1.1 Host: app.kartra.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:22 UTC	439	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 21777 Connection: close last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: "1dc09d84-5511" strict-transport-security: max-age=0 CF-Cache-Status: HIT Age: 3046 Expires: Thu, 07 Nov 2024 09:34:22 GMT Cache-Control: public, max-age=300 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8dec4c6c8aa1469e-DFW
2024-11-07 09:29:22 UTC	930	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 56 61 6c 69 64 61 74 69 6f 6e 20 50 6c 75 67 69 6e 20 31 2e 31 30 2e 30 20 4d 6f 64 69 66 69 65 64 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 61 73 73 69 73 74 61 6e 63 65 2e 64 65 2f 6a 71 75 65 72 79 2d 70 6c 75 67 69 6e 73 2f 6a 71 75 65 72 79 2d 70 6c 75 67 69 6e 2d 76 61 6c 69 64 61 74 69 6f 6e 2f 0a 20 2a 20 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 50 6c 75 67 69 6e 73 2f 56 61 6c 69 64 61 74 69 6f 6e 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 4a f6 72 6e 20 5a 61 65 66 66 65 72 65 72 0a 20 2a 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 Data Ascii: /** * jQuery Validation Plugin 1.10.0 Modified * * http://bassistance.de/jquery-plugins/jquery-plugin-validation/ * http://docs.jquery.com/Plugins/Validation * * Copyright (c) 2012 Jrn Zaefferer * * Dual licensed under the MIT and GPL licenses:
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 6e 64 54 6f 28 69 2e 63 75 72 72 65 6e 74 46 6f 72 6d 29 29 2c 69 2e 73 65 74 74 69 6e 67 73 2e 73 75 62 6d 69 74 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 69 2c 69 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2c 65 29 2c 69 2e 73 75 62 6d 69 74 42 75 74 74 6f 6e 26 26 73 2e 72 65 6d 6f 76 65 28 29 2c 21 31 29 7d 72 65 74 75 72 6e 20 69 2e 73 65 74 74 69 6e 67 73 2e 64 65 62 75 67 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 69 2e 63 61 6e 63 65 6c 53 75 62 6d 69 74 3f 28 69 2e 63 61 6e 63 65 6c 53 75 62 6d 69 74 3d 21 31 2c 73 28 29 29 3a 69 2e 66 6f 72 6d 28 29 3f 69 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3f 28 69 2e 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 3d 21 30 2c 21 31 29 3a 73 28 29 3a 28 69 2e 66 6f 63 75 73 49 6e 76 61 6c 69 64 28 29 Data Ascii: ndTo(i.currentForm)),i.settings.submitHandler.call(i,i.currentForm,e),i.submitButton&&s.remove(),!1)}return i.settings.debug&&e.preventDefault(),i.cancelSubmit?(i.cancelSubmit=!1,s()):i.form()?i.pendingRequest?(i.formSubmitted=!0,!1):s():(i.focusInvalid()
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 74 2e 74 72 69 6d 28 22 22 2b 65 2e 76 61 6c 75 65 29 7d 2c 75 6e 63 68 65 63 6b 65 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 74 2e 63 68 65 63 6b 65 64 7d 7d 29 2c 74 2e 76 61 6c 69 64 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 74 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 2e 76 61 6c 69 64 61 74 6f 72 2e 64 65 66 61 75 6c 74 73 2c 65 29 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 46 6f 72 6d 3d 69 2c 74 68 69 73 2e 69 6e 69 74 28 29 7d 2c 74 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f Data Ascii: on(e){return!!t.trim(""+e.value)},unchecked:function(t){return!t.checked}}),t.validator=function(e,i){this.settings=t.extend(!0,{},t.validator.defaults,e),this.currentForm=i,this.init()},t.validator.format=function(e,i){return 1===arguments.length?functio
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 6f 64 65 29 7d 2c 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 2e 6e 61 6d 65 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 29 3a 74 28 65 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 29 7d 2c 75 6e 68 69 67 68 6c 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 73 29 7b 22 72 61 64 69 6f 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 2e 6e 61 6d 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 73 73 28 73 29 3a 74 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 29 2e 61 64 64 43 6c 61 Data Ascii: ode)},highlight:function(e,i,s){"radio"===e.type?this.findByName(e.name).addClass(i).removeClass(s):t(e).addClass(i).removeClass(s)},unhighlight:function(e,i,s){"radio"===e.type?this.findByName(e.name).removeClass(i).addClass(s):t(e).removeClass(i).addCla
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 65 72 73 3d 74 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6f 6e 74 61 69 6e 65 72 29 2e 61 64 64 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 29 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 3d 7b 7d 2c 74 68 69 73 2e 76 61 6c 75 65 43 61 63 68 65 3d 7b 7d 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 30 2c 74 68 69 73 2e 70 65 6e 64 69 6e 67 3d 7b 7d 2c 74 68 69 73 2e 69 6e 76 61 6c 69 64 3d 7b 7d 2c 74 68 69 73 2e 72 65 73 65 74 28 29 3b 76 61 72 20 65 3d 74 68 69 73 2e 67 72 6f 75 70 73 3d 7b 7d 3b 74 2e 65 61 63 68 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 67 72 6f 75 70 73 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 73 29 7b 74 2e 65 61 63 68 28 73 2e 73 70 6c 69 Data Ascii: ers=t(this.settings.errorContainer).add(this.settings.errorLabelContainer),this.submitted={},this.valueCache={},this.pendingRequest=0,this.pending={},this.invalid={},this.reset();var e=this.groups={};t.each(this.settings.groups,function(i,s){t.each(s.spli
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 75 6c 6c 21 3d 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 68 69 73 2e 63 68 65 63 6b 28 74 68 69 73 2e 66 69 6e 64 42 79 4e 61 6d 65 28 65 5b 74 5d 2e 6e 61 6d 65 29 5b 69 5d 29 3b 65 6c 73 65 20 74 68 69 73 2e 63 68 65 63 6b 28 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 28 29 7d 2c 65 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 Data Ascii: ull!=this.findByName(e[t].name).length&&this.findByName(e[t].name).length>1)for(var i=0;i<this.findByName(e[t].name).length;i++)this.check(this.findByName(e[t].name)[i]);else this.check(e[t]);return this.valid()},element:function(e){e=this.validationTarge
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 74 68 7d 2c 66 6f 63 75 73 49 6e 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 66 6f 63 75 73 49 6e 76 61 6c 69 64 29 74 72 79 7b 74 28 74 68 69 73 2e 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 28 29 7c 7c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 5b 30 5d 2e 65 6c 65 6d 65 6e 74 7c 7c 5b 5d 29 2e 66 69 6c 74 65 72 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 66 6f 63 75 73 28 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 69 6e 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6c 61 73 74 41 63 74 69 76 65 3b 72 65 74 75 72 6e 20 65 Data Ascii: th},focusInvalid:function(){if(this.settings.focusInvalid)try{t(this.findLastActive()\|\|this.errorList.length&&this.errorList[0].element\|\|[]).filter(":visible").focus().trigger("focusin")}catch(t){}},findLastActive:function(){var e=this.lastActive;return e
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 6c 69 64 61 74 69 6f 6e 54 61 72 67 65 74 46 6f 72 28 74 68 69 73 2e 63 6c 65 61 6e 28 65 29 29 3b 76 61 72 20 69 2c 73 3d 74 28 65 29 2e 72 75 6c 65 73 28 29 2c 6e 3d 21 31 2c 72 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 56 61 6c 75 65 28 65 29 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 73 29 7b 76 61 72 20 75 3d 7b 6d 65 74 68 6f 64 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 73 5b 61 5d 7d 3b 74 72 79 7b 69 66 28 22 64 65 70 65 6e 64 65 6e 63 79 2d 6d 69 73 6d 61 74 63 68 22 3d 3d 3d 28 69 3d 74 2e 76 61 6c 69 64 61 74 6f 72 2e 6d 65 74 68 6f 64 73 5b 61 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 2c 75 2e 70 61 72 61 6d 65 74 65 72 73 29 29 29 7b 6e 3d 21 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 6e 3d 21 31 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 69 29 72 Data Ascii: lidationTargetFor(this.clean(e));var i,s=t(e).rules(),n=!1,r=this.elementValue(e);for(var a in s){var u={method:a,parameters:s[a]};try{if("dependency-mismatch"===(i=t.validator.methods[a].call(this,r,e,u.parameters))){n=!0;continue}if(n=!1,"pending"===i)r
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4d 65 73 73 61 67 65 28 65 2c 69 2e 6d 65 74 68 6f 64 29 2c 6e 3d 2f 5c 24 3f 5c 7b 28 5c 64 2b 29 5c 7d 2f 67 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 3f 73 3d 73 2e 63 61 6c 6c 28 74 68 69 73 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 2c 65 29 3a 6e 2e 74 65 73 74 28 73 29 26 26 28 73 3d 74 2e 76 61 6c 69 64 61 74 6f 72 2e 66 6f 72 6d 61 74 28 73 2e 72 65 70 6c 61 63 65 28 6e 2c 22 7b 24 31 7d 22 29 2c 69 2e 70 61 72 61 6d 65 74 65 72 73 29 29 2c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 70 75 73 68 28 7b 6d 65 73 73 61 67 65 3a 73 2c 65 6c 65 6d 65 6e 74 3a 65 7d 29 2c 74 68 69 73 2e 65 72 72 6f 72 4d 61 70 5b 65 2e 6e 61 6d 65 5d 3d 73 2c 74 68 69 73 2e 73 75 62 6d 69 74 74 65 64 5b 65 2e Data Ascii: s=this.defaultMessage(e,i.method),n=/\$?\{(\d+)\}/g;"function"==typeof s?s=s.call(this,i.parameters,e):n.test(s)&&(s=t.validator.format(s.replace(n,"{$1}"),i.parameters)),this.errorList.push({message:s,element:e}),this.errorMap[e.name]=s,this.submitted[e.
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 73 3d 74 28 22 3c 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 45 6c 65 6d 65 6e 74 2b 22 2f 3e 22 29 2e 61 74 74 72 28 7b 66 6f 72 3a 74 68 69 73 2e 69 64 4f 72 4e 61 6d 65 28 65 29 2c 67 65 6e 65 72 61 74 65 64 3a 21 30 7d 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 65 72 72 6f 72 43 6c 61 73 73 29 2e 68 74 6d 6c 28 69 7c 7c 22 22 29 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 72 61 70 70 65 72 26 26 28 73 3d 73 2e 68 69 64 65 28 29 2e 73 68 6f 77 28 29 2e 77 72 61 70 28 22 3c 22 2b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 77 72 61 70 70 65 72 2b 22 2f 3e 22 29 2e 70 61 72 65 6e 74 28 29 29 2c 74 68 69 73 2e 6c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 73 29 2e 6c 65 6e 67 74 68 Data Ascii: s=t("<"+this.settings.errorElement+"/>").attr({for:this.idOrName(e),generated:!0}).addClass(this.settings.errorClass).html(i\|\|""),this.settings.wrapper&&(s=s.hide().show().wrap("<"+this.settings.wrapper+"/>").parent()),this.labelContainer.append(s).length

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.11	49790	104.16.79.73	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:22 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8dec4c6cfc15315f-DFW
2024-11-07 09:29:22 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-11-07 09:29:22 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.11	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 1a545004-b01e-0084-4b01-2fd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092922Z-17df447cdb5rrj6shC1DFW6qg400000004300000000043ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.11	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9f698ac2-f01e-0099-1e83-309171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092922Z-17df447cdb56j5xmhC1DFWn91800000004700000000068ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.11	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: f3c8b028-b01e-003d-2400-2fd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092922Z-17df447cdb5c9wvxhC1DFWn08n00000004c0000000002wnu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.11	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9919728d-d01e-002b-4b0b-2d25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092922Z-16547b76f7fsjlq8hC1DFWehq000000007s00000000059kp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.11	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:22 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 80f61ed6-301e-000c-5407-2f323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092922Z-17df447cdb5rrj6shC1DFW6qg40000000440000000002qre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.11	49780	104.17.215.242	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:23 UTC	678	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: app.kartra.com Connection: keep-alive Content-Length: 1550 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://app.kartra.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://app.kartra.com/error/deactivated Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ci_session=ed0p7u40q4usntldsb5gl63o3o46inoq
2024-11-07 09:29:23 UTC	1550	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 37 34 38 36 32 32 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 33 39 39 39 37 30 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 35 37 32 31 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 35 37 32 31 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 30 39 37 31 37 35 34 30 34 33 2e 39 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 Data Ascii: {"memory":{"totalJSHeapSize":4748622,"usedJSHeapSize":3399970,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":5721.8000000000175,"firstContentfulPaint":5721.8000000000175,"startTime":1730971754043.9,"versions":{"fl":"
2024-11-07 09:29:23 UTC	371	IN	HTTP/1.1 204 No Content Date: Thu, 07 Nov 2024 09:29:23 GMT Connection: close access-control-allow-origin: https://app.kartra.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8dec4c70ee770beb-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.11	49793	18.172.111.130	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:23 UTC	375	OUT	GET /img/shared/favicon.ico HTTP/1.1 Host: d2uolguxr56s4e.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:23 UTC	608	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 2238 Connection: close Last-Modified: Tue, 10 Oct 2023 10:01:08 GMT x-amz-server-side-encryption: AES256 x-amz-meta-version-id: epE6h0SoNmE91XgoqF66UFcuWujxroOp x-amz-version-id: yzPUdlbfy6vbg3Wh80EKkC_HAZPrBwIm Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 06 Nov 2024 10:33:46 GMT ETag: "0fca864384e681e506fb3c2f2e3ab488" X-Cache: Hit from cloudfront Via: 1.1 7af089de61bb0f71465732ed7f6f3386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: x7iDGJFmm8hqoOwkYJsZfktnxVxE882gaEY41g0nzVHY75T2ruWusg== Age: 82538
2024-11-07 09:29:23 UTC	2238	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDR@@iqtEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.11	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: cd5b73c9-701e-0098-1e09-2d395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092923Z-16547b76f7f22sh5hC1DFWyb4w00000007xg000000003bkt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.11	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:23 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 6538f966-101e-00a2-58f1-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092923Z-16547b76f7fknvdnhC1DFWxnys000000082g0000000014zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.11	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5274f941-001e-00ad-2b5c-2e554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-17df447cdb5qkskwhC1DFWeeg400000004bg000000001h0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:24 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.11	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 29e284b5-001e-0065-5703-2d0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-15869dbbcc6rmhmhhC1DFWd7b800000008e0000000009ay4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:24 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.11	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:24 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 06fd63be-801e-008f-5e01-2d2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-16547b76f7fr28cchC1DFWnuws000000082g000000004z4a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.11	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-16547b76f7f775p5hC1DFWzdvn00000007z0000000003ut7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.11	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:24 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 84934087-701e-0021-808e-2d3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-15869dbbcc65c582hC1DFWgpv400000001ng000000002wde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:24 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.11	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f6cd28e5-501e-00a3-23d4-2fc0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-15869dbbcc6j87jfhC1DFWky3s0000000970000000001r8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.11	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4bc251d2-601e-00ab-3370-2e66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092924Z-15869dbbcc6rmhmhhC1DFWd7b800000008m0000000001xcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.11	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: d78e503f-301e-0051-317b-3038bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092925Z-17df447cdb528ltlhC1DFWnt1c00000003zg0000000077wx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.11	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 2fadba2e-601e-0070-7603-2fa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092925Z-17df447cdb5vq4m4hC1DFWrbp80000000420000000006cbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.11	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0386aeb1-901e-007b-0d55-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092925Z-15869dbbcc6ss7fxhC1DFWq6vs000000015g00000000a8b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.11	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: c1e1e5f3-901e-00ac-21c1-30b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092925Z-17df447cdb5t94hvhC1DFWw97800000004ag000000006x9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.11	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:25 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: fdad5187-a01e-001e-6d5f-2e49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092925Z-17df447cdb57srlrhC1DFWwgas00000004ag0000000047ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.11	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a822020c-901e-005b-1ae1-2e2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092926Z-17df447cdb5qkskwhC1DFWeeg4000000045g00000000c58z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.11	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 86fb44b9-501e-0078-06d2-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092926Z-16547b76f7fp6mhthC1DFWrggn00000007zg00000000byc4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.11	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:26 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 392771d5-701e-000d-1cd2-2c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092926Z-16547b76f7f7scqbhC1DFW0m5w00000007r000000000cbt6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.11	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:26 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 898dd9bc-901e-0048-53d2-2cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092926Z-16547b76f7fr28cchC1DFWnuws000000080g000000009qus x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.11	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:26 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:26 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 07c90e24-501e-007b-7e5c-2e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092926Z-17df447cdb5w28bthC1DFWgb64000000041g000000000zyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.11	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:27 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 43524bb3-601e-003e-69d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092927Z-16547b76f7f7scqbhC1DFW0m5w00000007vg000000002svk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.11	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:27 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 1ec43ba4-f01e-0003-65d2-2c4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092927Z-16547b76f7fr4g8xhC1DFW9cqc000000076g0000000033ps x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.11	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:27 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:27 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 9ec2e68b-201e-0096-6cd2-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092927Z-16547b76f7fxdzxghC1DFWmf7n00000007xg00000000hh87 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.11	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:27 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:27 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 423d25b5-301e-005d-1f4b-2ee448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092927Z-15869dbbcc6lxrkghC1DFWp3wc00000008wg000000000nxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:27 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.11	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:27 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 03c1180a-901e-007b-2b6d-2eac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092927Z-15869dbbcc6vr5dxhC1DFWqn6400000002k000000000afh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.11	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: ed27c552-101e-007a-705f-2e047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-15869dbbcc6m5ms4hC1DFWx02800000008vg000000009zyu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.11	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:28 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8b89db2d-001e-0028-2ea9-30c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-17df447cdb5bz95mhC1DFWnk7w0000000420000000001rr6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-07 09:29:28 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.11	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:28 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 12eeda2a-401e-00ac-598e-2d0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-15869dbbcc6vr5dxhC1DFWqn6400000002qg0000000030hk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:28 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.11	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:28 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 682504c0-001e-005a-75d2-2cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-16547b76f7f7scqbhC1DFW0m5w00000007ug000000004vtz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:28 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.11	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:28 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 6028abc9-b01e-0002-6508-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-16547b76f7fx6rhxhC1DFW76kg00000007w0000000009g84 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:28 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.11	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:28 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 7b700101-601e-0050-4e5f-2e2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092928Z-15869dbbcc6tjwwhhC1DFWn22800000001600000000094e6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.11	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:28 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0ef5c87e-a01e-0032-285c-2e1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-17df447cdb5bz95mhC1DFWnk7w00000003x000000000an2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.11	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:29 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: a089fa81-d01e-0066-1640-2eea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-15869dbbcc6b69h9hC1DFWaf7800000002y0000000000ysq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.11	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:29 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 081c3a8e-a01e-0053-58d2-2c8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-16547b76f7fq9mcrhC1DFWq15w000000080g000000000xnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.11	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:29 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 45f39ff0-c01e-00a2-2d5f-2e2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-15869dbbcc6xpvqthC1DFWq7d800000001c0000000007du3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.11	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:29 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:29 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 582aff08-701e-0098-0ae0-2e395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-17df447cdb56j5xmhC1DFWn918000000043000000000et6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.11	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:29 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 641effa3-501e-005b-0c5f-2ed7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092929Z-17df447cdb5vq4m4hC1DFWrbp800000003y000000000e6bk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.11	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:30 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:30 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:30 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 43524f19-601e-003e-07d2-2c3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092930Z-16547b76f7fp6mhthC1DFWrggn000000080000000000a2yg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:30 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.11	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:30 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:30 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 89e70e23-001e-0014-478e-2d5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092930Z-15869dbbcc6qwghvhC1DFWssds00000004f00000000046ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:30 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.11	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 0f87ae43-b01e-00ab-09a6-30dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092930Z-17df447cdb5l865xhC1DFW9n7g0000000120000000009zp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.11	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:30 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:30 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:30 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: bd36c54f-701e-0032-55b1-30a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092930Z-17df447cdb56mx55hC1DFWvbt4000000013000000000awse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:30 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.11	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:31 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:31 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 70b2909d-801e-00ac-33c1-2cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092931Z-16547b76f7fnlcwwhC1DFWz6gw0000000850000000000kqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:31 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.11	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:31 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:31 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 3018d77d-101e-008d-49d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092931Z-16547b76f7ftdm8dhC1DFWs13g00000007u000000000cmp2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:31 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.11	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:31 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:31 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: ddaecdfb-101e-0079-21d2-2c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092931Z-16547b76f7f8dwtrhC1DFWd1zn000000081g000000006mcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:31 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.11	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:31 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0aff24d-301e-000c-58d2-2c323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092931Z-16547b76f7fwvr5dhC1DFW2c9400000007sg00000000cbpq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.11	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:31 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 98909b4d-d01e-002b-39d2-2c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092931Z-16547b76f7fcrtpchC1DFW52e800000007wg00000000c87v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.11	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:31 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2ce7ce6f-901e-002a-1fd2-2c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-16547b76f7fmbrhqhC1DFWkds800000007yg0000000098ce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.11	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 86fb53ab-501e-0078-4ed2-2c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-16547b76f7f2g4rlhC1DFWnx8800000007ug000000008xhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.11	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: a6459842-d01e-0014-395c-2eed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-15869dbbcc6kg5mvhC1DFW74ts00000001g000000000583r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.11	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 9eee1406-f01e-0020-6e5f-2e956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-15869dbbcc6m5ms4hC1DFWx02800000008vg00000000a01m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.11	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 908d3df5-401e-0064-7501-2f54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-17df447cdb5bz95mhC1DFWnk7w00000003y0000000008sdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.11	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:32 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8fcaa1bb-301e-006e-11d2-2cf018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092932Z-16547b76f7fknvdnhC1DFWxnys00000007wg00000000cfuy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.11	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:32 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:33 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: a0cc50e9-d01e-0066-4e5c-2eea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-15869dbbcc6b69h9hC1DFWaf7800000002vg000000004q9f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:33 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.11	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:33 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 157887d5-b01e-0084-44d2-2cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-16547b76f7fx6rhxhC1DFW76kg00000007yg000000004xhk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.11	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:33 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 117ebb00-e01e-0020-3440-2ede90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-15869dbbcc6rmhmhhC1DFWd7b800000008eg000000008mrt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.11	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:33 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 3018dbe1-101e-008d-70d2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-16547b76f7fdf69shC1DFWcpd000000007s000000000drth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.11	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:33 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 6c65b011-001e-000b-6024-2c15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-16547b76f7f76p6chC1DFWctqw000000083g000000002zd4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.11	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:33 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:33 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: b30de5cd-801e-00ac-33e1-2ffd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092933Z-17df447cdb5c9wvxhC1DFWn08n000000047g00000000brx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.11	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62e0c468-a01e-0084-1b55-2e9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-15869dbbcc6x4rp4hC1DFW3t7w000000090g0000000016xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.11	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 3018dd1c-101e-008d-1bd2-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-16547b76f7fcrtpchC1DFW52e800000007wg00000000c899 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.11	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5b14ddc3-301e-0033-2bd2-2cfa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-16547b76f7f76p6chC1DFWctqw000000080g0000000087x0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.11	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: d7a2ab70-d01e-007a-5458-2ef38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-17df447cdb57g7m7hC1DFW791s000000040000000000ecz0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.11	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:34 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: ebd57e1f-d01e-005a-2f5c-2e7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-17df447cdb5vq4m4hC1DFWrbp8000000044g000000002c6t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.11	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:34 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: dada5429-501e-007b-0d3f-2e5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092934Z-15869dbbcc68l9dbhC1DFWr9fg00000001fg000000006ncb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.11	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:35 UTC	515	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a7d47cd0-801e-0067-0c8e-2dfe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092935Z-15869dbbcc6tfpj2hC1DFW384c00000001gg0000000057xg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.11	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:35 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: fadf1528-a01e-001e-72d2-2c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092935Z-16547b76f7f9bs6dhC1DFWt3rg00000007z0000000004p13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.11	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:35 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 14de8335-b01e-003e-77d2-2c8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092935Z-16547b76f7fwvr5dhC1DFW2c9400000007xg000000002fsk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.11	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:35 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:35 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 9a908836-001e-0028-5a40-2ec49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092935Z-15869dbbcc6j87jfhC1DFWky3s00000009300000000066c1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.11	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:35 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 697e3ed8-001e-0079-4fab-3012e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092935Z-15869dbbcc68l9dbhC1DFWr9fg00000001cg00000000cq8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.11	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:36 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 8f5c374f-101e-0046-61d2-2c91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092936Z-16547b76f7f775p5hC1DFWzdvn00000007ug00000000c9ue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.11	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9314d3eb-501e-00a3-0555-2ec0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092936Z-17df447cdb528ltlhC1DFWnt1c00000003wg00000000e89q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.11	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:36 UTC	494	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: f75e4c15-501e-0047-0155-2ece6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092936Z-17df447cdb5qkskwhC1DFWeeg4000000045000000000d8r9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.11	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:36 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:36 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 71af9553-101e-00a2-14d2-2c9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092936Z-16547b76f7f9rdn9hC1DFWfk7s00000007u000000000fk90 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.11	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:36 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-07 09:29:37 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 07 Nov 2024 09:29:36 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 09d23618-001e-000b-0deb-2b15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241107T092936Z-16547b76f7fp6mhthC1DFWrggn000000080g000000009tnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-07 09:29:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.11	49877	141.193.213.10	443	7100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-07 09:29:37 UTC	696	OUT	GET / HTTP/1.1 Host: www.kartra.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://app.kartra.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-07 09:29:37 UTC	453	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 07 Nov 2024 09:29:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: WP Engine X-Redirect-By: WordPress Location: https://kartra.com/ X-Cacheable: non200 Cache-Control: max-age=600, must-revalidate X-Cache: HIT: 11 X-Cache-Group: normal CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8dec4cc7eb5a6b94-DFW alt-svc: h3=":443"; ma=86400
2024-11-07 09:29:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	04:29:07
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:29:11
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:29:13
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://krtra.com/t/onJtp2YcgmoQ"
Imagebase:	0x7ff68dea0000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	04:29:54
Start date:	07/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4128 --field-trial-handle=1988,i,7385985933271535429,13541993755184279214,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6a3150000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/975786519?random=1730971806551&cv=11&fst=1730971806551&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v9175625129z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/820603035?random=1730971806598&cv=11&fst=1730971806598&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-2S00JF6MTB&gacid=1741908784.1730971807&gtm=45je4au0v867964665z878180990za200zb78180990&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=259294468
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-W78XJT7
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/975786519?random=1730971806551&cv=11&fst=1730971806551&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0v9175625129z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/820603035?random=1730971806598&cv=11&fst=1730971806598&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4au0z878180990za201zb78180990&gcd=13r3r3r3r5l1&dma=0&tag_exp=101823848~101925629&u_w=1280&u_h=1024&url=https%3A%2F%2Fkartra.com%2F%3Fnab%3D1&ref=https%3A%2F%2Fapp.kartra.com%2F&hn=www.googleadservices.com&frm=0&tiba=Kartra%20-%20The%20All%20In%20One%20Marketing%20Platform&did=dY2Q2ZW&gdid=dY2Q2ZW&npa=0&pscdl=noapi&auid=1770602244.1730971805&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=ads_data_redaction%3Dfalse
Source: https://kartra.com/?nab=1	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-2S00JF6MTB&gacid=1741908784.1730971807&gtm=45je4au0v867964665z878180990za200zb78180990&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101823848~101925629&z=259294468

Source: https://kartra.com/?nab=1	HTTP Parser: No favicon
Source: https://kartra.com/?nab=1	HTTP Parser: No favicon

Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="author".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="author".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="author".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="author".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="author".. found

Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="copyright".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="copyright".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="copyright".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="copyright".. found
Source: https://kartra.com/?nab=1	HTTP Parser: No <meta name="copyright".. found

Source: chromecache_484.3.dr	String found in binary or memory: <a href="https://www.linkedin.com/showcase/kartra/" class="linkedin flex-center" aria-label="linkedin" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg" alt="linkedin" /></a><a href="https://twitter.com/KartraOfficial/" class="twitter flex-center" aria-label="twitter" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg" alt="twitter" /></a><a href="https://www.instagram.com/kartraofficial/" class="instagram flex-center" aria-label="instagram" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/instagram.svg" alt="instagram" /></a><a href="https://www.facebook.com/groups/kartra" class="facebook flex-center" aria-label="facebook" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/facebook.svg" alt="facebook" /></a></div> equals www.facebook.com (Facebook)
Source: chromecache_484.3.dr	String found in binary or memory: <a href="https://www.linkedin.com/showcase/kartra/" class="linkedin flex-center" aria-label="linkedin" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg" alt="linkedin" /></a><a href="https://twitter.com/KartraOfficial/" class="twitter flex-center" aria-label="twitter" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg" alt="twitter" /></a><a href="https://www.instagram.com/kartraofficial/" class="instagram flex-center" aria-label="instagram" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/instagram.svg" alt="instagram" /></a><a href="https://www.facebook.com/groups/kartra" class="facebook flex-center" aria-label="facebook" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/facebook.svg" alt="facebook" /></a></div> equals www.linkedin.com (Linkedin)
Source: chromecache_484.3.dr	String found in binary or memory: <a href="https://www.linkedin.com/showcase/kartra/" class="linkedin flex-center" aria-label="linkedin" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/linkedin.svg" alt="linkedin" /></a><a href="https://twitter.com/KartraOfficial/" class="twitter flex-center" aria-label="twitter" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/twitter.svg" alt="twitter" /></a><a href="https://www.instagram.com/kartraofficial/" class="instagram flex-center" aria-label="instagram" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/instagram.svg" alt="instagram" /></a><a href="https://www.facebook.com/groups/kartra" class="facebook flex-center" aria-label="facebook" target="_blank"><img src="https://kartra.com/wp-content/themes/kartra/assets/build/images/social-icons/facebook.svg" alt="facebook" /></a></div> equals www.twitter.com (Twitter)
Source: chromecache_484.3.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/KartraOfficial" /> equals www.facebook.com (Facebook)
Source: chromecache_484.3.dr	String found in binary or memory: <script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://kartra.com/","url":"https://kartra.com/","name":"Kartra - The All In One Marketing Platform","isPartOf":{"@id":"https://kartra.com/#website"},"about":{"@id":"https://kartra.com/#organization"},"primaryImageOfPage":{"@id":"https://kartra.com/#primaryimage"},"image":{"@id":"https://kartra.com/#primaryimage"},"thumbnailUrl":"https://kartra.com/wp-content/uploads/2024/10/images.png","datePublished":"2024-10-30T03:01:06+00:00","dateModified":"2024-11-06T16:55:19+00:00","description":"Streamline your marketing with an all-in-one marketing platform that includes automated email, sales funnels, landing pages, forms, and more!","breadcrumb":{"@id":"https://kartra.com/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://kartra.com/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://kartra.com/#primaryimage","url":"https://kartra.com/wp-content/uploads/2024/10/images.png","contentUrl":"https://kartra.com/wp-content/uploads/2024/10/images.png","width":260,"height":259},{"@type":"BreadcrumbList","@id":"https://kartra.com/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://kartra.com/#website","url":"https://kartra.com/","name":"Kartra","description":"The All In One Marketing Platform","publisher":{"@id":"https://kartra.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://kartra.com/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://kartra.com/#organization","name":"Kartra","url":"https://kartra.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://kartra.com/#/schema/logo/image/","url":"https://kartra.com/wp-content/uploads/2024/04/77836811581Logo_2x_1__1_.png","contentUrl":"https://kartra.com/wp-content/uploads/2024/04/77836811581Logo_2x_1__1_.png","width":512,"height":540,"caption":"Kartra"},"image":{"@id":"https://kartra.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/KartraOfficial","https://x.com/KartraOfficial"]}]}</script> equals www.facebook.com (Facebook)
Source: chromecache_406.3.dr, chromecache_241.3.dr	String found in binary or memory: src: '//www.youtube.com/embed/%id%?autoplay=1' equals www.youtube.com (Youtube)
Source: chromecache_393.3.dr	String found in binary or memory: "use strict";let YTAPI=!1,ytPlyaerInterval;function GS_Videos_Init(e=document){let t=e.getElementsByClassName("gs-video-element");for(let a of t){var o,s=a.dataset.provider,i=a.dataset.overlay,r=(a.dataset.lightbox,a.nextSibling);if("false"===i)switch(s){case"video":let d=document.body;a.getAttribute("src")?getGSHostedVideo(a):(d.addEventListener("mouseover",getGSHostedVideo(a),{once:!0}),d.addEventListener("touchmove",getGSHostedVideo(a),{once:!0}),d.addEventListener("scroll",getGSHostedVideo(a),{once:!0}),d.addEventListener("keydown",getGSHostedVideo(a),{once:!0}));break;case"youtube":getGSYoutubeVideo(a);break;case"vimeo":getGSVimeoVideo(a)}else r.onclick=function(){let e=this.previousSibling,t=this.dataset.type,a=this.dataset.lightbox,s=this;if("true"!==a){switch(t){case"video":getGSHostedVideo(e);break;case"youtube":getGSYoutubeVideo(e);break;case"vimeo":getGSVimeoVideo(e)}this.remove()}else{let i=e.closest(".gs-video"),r=i.getAttribute("id"),d=SimpleLightbox.open({content:e,elementClass:"gs-video-popup "+r,beforeClose:function(a){lightboxCloseHanlder(t,e,d,o),s.parentNode.insertBefore(e,s)}});switch(t){case"video":getGSHostedVideo(e,i,d);break;case"youtube":getGSYoutubeVideo(e,d);break;case"vimeo":getGSVimeoVideo(e,d)}}}}}function getGSHostedVideo(e,t="",a){let o=t\|\|e.closest(".gs-video");if(o){let s="vidload"+o.getAttribute("id");if(!document.getElementById(s)){var i=document.createElement("video");i.setAttribute("class","gs-video-element"),i.setAttribute("src",e.dataset.src),i.setAttribute("id",s),i.setAttribute("poster",e.dataset.poster),i.autoplay="true"===e.dataset.autoplay,i.playsInline="true"===e.dataset.playsinline,i.controls="true"===e.dataset.controls,i.loop="true"===e.dataset.loop,i.muted="true"===e.dataset.mute,e.replaceWith(i),"true"===e.dataset.autoplay&&playHtml5Video(i,e,a)}}}function getGSVideoIDFromURL(e,t){var a=e.match(t);return a&&a[1]}function getGSYoutubeRegex(){return/^(?:https?:\/\/)?(?:www\.)?(?:m\.)?(?:youtu\.be\/\|youtube\.com\/(?:(?:watch)?\?(?:.*&)?vi?=\|(?:embed\|v\|vi\|user)\/\|shorts\/\|live\/))([^?&"'>]+)/}function getGSYoutubeVideo(e,t){var a=getGSVideoIDFromURL(e.dataset.src,getGSYoutubeRegex()),o="https://www.youtube.com/embed/"+a+"?autoplay="+("true"===e.dataset.autoplay?"1":"0")+"&loop="+("true"===e.dataset.loop?"1":"0")+"&playsinline="+("true"===e.dataset.playsinline?"1":"0")+"&controls="+("true"===e.dataset.controls?"1":"0")+"&modestbranding="+("true"===e.dataset.modestbranding?"1":"0")+"&rel="+("true"===e.dataset.rel?"1":"0")+"&mute="+("true"===e.dataset.mute?"1":"0")+(e.dataset.start&&"false"===e.dataset.loop?"&start="+e.dataset.start:"")+(e.dataset.end&&"false"===e.dataset.loop?"&end="+e.dataset.end:"")+"&enablejsapi=1"+("true"===e.dataset.loop?"&playlist="+a:"");e.setAttribute("allow","autoplay"),e.setAttribute("src",o),"true"==e.dataset.lightbox&&initYTapi(e,t,player)}function getGSVimeoRegex(){return/^(?:https?:\/\/)?(?:www\|player\.)?(?:vimeo\.com\/)?(?:video\/\|external\/)?(\d+)([^.?&#"'>]?)/}function
Source: chromecache_376.3.dr, chromecache_285.3.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_450.3.dr, chromecache_398.3.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=UA(a,c,e);S(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return S(122),!0;if(d&&f){for(var m=Ab(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},XA=function(){var a=[],b=function(c){return db(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_376.3.dr, chromecache_285.3.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_250.3.dr, chromecache_450.3.dr, chromecache_273.3.dr, chromecache_398.3.dr, chromecache_387.3.dr, chromecache_421.3.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_422.3.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_422.3.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_422.3.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_450.3.dr, chromecache_398.3.dr	String found in binary or memory: var AC=function(a,b,c,d,e){var f=rA("fsl",c?"nv.mwt":"mwt",0),g;g=c?rA("fsl","nv.ids",[]):rA("fsl","ids",[]);if(!g.length)return!0;var k=wA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);S(121);if(m==="https://www.facebook.com/tr/")return S(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!dz(k,fz(b, equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.42
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.3
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: krtra.com
Source: global traffic	DNS traffic detected: DNS query: app.kartra.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d2uolguxr56s4e.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.kartra.com
Source: global traffic	DNS traffic detected: DNS query: kartra.com
Source: global traffic	DNS traffic detected: DNS query: cdn-cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: log.cookieyes.com
Source: global traffic	DNS traffic detected: DNS query: script.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: kartrastg.wpenginepowered.com
Source: global traffic	DNS traffic detected: DNS query: api.nelioabtesting.com
Source: global traffic	DNS traffic detected: DNS query: fw-cdn.com
Source: global traffic	DNS traffic detected: DNS query: tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: pagestates-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: assets-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: pbaptfmqic.kartra.com
Source: global traffic	DNS traffic detected: DNS query: genesisdigital-652936156196908273-90fb1f9a69369d117019971.freshchat.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: js.go2sdk.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: kartra.kartra.com
Source: global traffic	DNS traffic detected: DNS query: b.clarity.ms

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://krtra.com/t/onJtp2YcgmoQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Windows Analysis Report
https://krtra.com/t/onJtp2YcgmoQ