Edit tour

Windows Analysis Report
https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ

Overview

General Information

Sample URL:	https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ
Analysis ID:	1554133
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Javascript uses Websockets

HTML page contains hidden javascript code

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6036 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,15245652055953037118,15303302441320958094,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Javascript uses Websockets

Source: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ

HTTP Parser: (()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdo={},e=[],r.o=(n,t,i,f)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,i,f]=e[o],c=!0,d=0;d<t.length;d++)(!1&f||a>=f)&&object.keys(r.o).every(b=>r.o[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f||0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n=e=>{var n=e&&e.__esmodule?()=>e.default:()=>e;return r.d(n,{a:n}),n},(()=>{var n,e=object.getprototypeof?t=>object.getprototypeof(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i||"object"==typeof t&&t&&(4&i&&t.__esmodule||16&i&&"function"==typeof t.then))return t;var f=object.create(null);r.r(f);var o={};n=n||[null,e({}),e([]),e(e)];for(var a=2&i&&t;"object"==typeof a&&!~n.indexof(a);a=e(a))object.getownpropertynames(a).foreach(c=>o[c]=()=>t[c]);return o.default=()=>...

Source: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ

HTTP Parser: Base64 decoded: https://messenger.gleap.io:443

Source: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	HTTP Parser: (()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdo={},e=[],r.o=(n,t,i,f)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,i,f]=e[o],c=!0,d=0;d<t.length;d++)(!1&f\|\|a>=f)&&object.keys(r.o).every(b=>r.o[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f\|\|0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n=e=>{var n=e&&e.__esmodule?()=>e.default:()=>e;return r.d(n,{a:n}),n},(()=>{var n,e=object.getprototypeof?t=>object.getprototypeof(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i\|\|"object"==typeof t&&t&&(4&i&&t.__esmodule\|\|16&i&&"function"==typeof t.then))return t;var f=object.create(null);r.r(f);var o={};n=n\|\|[null,e({}),e([]),e(e)];for(var a=2&i&&t;"object"==typeof a&&!~n.indexof(a);a=e(a))object.getownpropertynames(a).foreach(c=>o[c]=()=>t[c]);return o.default=()=>...
Source: https://secure_sharing0documentpreview.wesendit.com/static/js/main.fa247412.js	HTTP Parser: /! for license information please see main.fa247412.js.license.txt /(function(){var __webpack_modules__={88142:function(e,t,n){"use strict";n.d(t,{r:function(){return l}});var r,i,a=n(47313),o=["title","titleid"];function s(){return s=object.assign?object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)object.prototype.hasownproperty.call(n,r)&&(e[r]=n[r])}return e},s.apply(this,arguments)}function c(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexof(n)>=0\|\|(i[n]=e[n]);return i}(e,t);if(object.getownpropertysymbols){var a=object.getownpropertysymbols(e);for(r=0;r<a.length;r++)n=a[r],t.indexof(n)>=0\|\|object.prototype.propertyisenumerable.call(e,n)&&(i[n]=e[n])}return i}function u(e,t){var n=e.title,u=e.titleid,l=c(e,o);return a.createelement("svg",s({width:32,height:32,viewbox:"0 0 32 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":u},l),n?a.creat...

Source: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	HTTP Parser: No favicon
Source: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50071 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 48MB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deprecated/styles.css HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure_sharing0documentpreview.wesendit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.55b776a0.css HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.fa247412.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modal/v1/modal.min.js HTTP/1.1Host: media.payrexx.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /loadAssets.js HTTP/1.1Host: widget.crowdswap.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upp/payment/js/secure-fields-2.0.0.min.js HTTP/1.1Host: pay.datatrans.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upp/payment/js/paypal-button-1.0.0.js HTTP/1.1Host: pay.datatrans.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /loadAssets.js HTTP/1.1Host: widget.crowdswap.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modal/v1/modal.min.js HTTP/1.1Host: media.payrexx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/js/api.min.js HTTP/1.1Host: a.trstplse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version.txt HTTP/1.1Host: widget.crowdswap.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-3708882.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /static/js/3020.18ed824f.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166
Source: global traffic	HTTP traffic detected: GET /static/js/406.ce8fba17.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166
Source: global traffic	HTTP traffic detected: GET /static/js/5883.38419619.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166
Source: global traffic	HTTP traffic detected: GET /web2/api/admins/actuator/togglz-status HTTP/1.1Host: api-prod.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?timestamp=1731385167183 HTTP/1.1Host: www.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crowdswap-widget.js?1730283708 HTTP/1.1Host: widget.crowdswap.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/OpenSans-Regular.9a6cfa5890d7f3eef585.ttf HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure_sharing0documentpreview.wesendit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-EHZSQKTF1P&gacid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=326597971 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upp/payment/js/secure-fields-2.0.0.min.js HTTP/1.1Host: pay.datatrans.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /upp/payment/js/paypal-button-1.0.0.js HTTP/1.1Host: pay.datatrans.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/957027334?random=1731385168509&cv=11&fst=1731385168509&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/js/api.min.js HTTP/1.1Host: a.trstplse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-3708882.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.fa247412.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /static/js/5883.38419619.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /static/js/3020.18ed824f.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /static/css/8839.7758b54f.chunk.css HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /?timestamp=1731385167183 HTTP/1.1Host: www.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /web2/api/admins/actuator/togglz-status HTTP/1.1Host: api-prod.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /static/js/406.ce8fba17.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
Source: global traffic	HTTP traffic detected: GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtwQndOWWlSUnpWN0tUWU1QTGFHUGhTNTU3elV4cFFkaGc3b2FhbnFYVmpwQiIsInN1YiI6IjM1NzI0NWMxOWJlY2RlMjdmMzE1NTQ2ZGU4ODBmZTYyMmM2MTcwYWU0ZTc3MDk1NGYwZDc2ZmU2YmRlMmM1NDMiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTczMTM4NTE2OCwiZXhwIjoxNzMxNDcxNTY4fQ.EKvPjWC2kiNxBWBTM8cMR6UO52bKKK-KQKfCZqAJriMu9tgtcp-gDrUy1WqqcsYrxLlzCDFXIJz5sngcc3-DBw&projectId=b7e27dea69b618cdbf49fbef3df26aae&ua=wc-2%2Fjs-2.6.2%2Fwindows10-chrome-117.0.0%2Fbrowser%3Asecure_sharing0documentpreview.wesendit.com&useOnCloseEvent=true HTTP/1.1Host: relay.walletconnect.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://secure_sharing0documentpreview.wesendit.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: D/WqnX6gG2HrK/81TogOOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /version.txt HTTP/1.1Host: widget.crowdswap.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crowdswap-widget.css?1730283708 HTTP/1.1Host: widget.crowdswap.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO HTTP/1.1Host: api.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBOsec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6316.088c246e.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /static/js/4366.ea2f9748.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.6f60e575cf8ad7cb10f7.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/3046.6e077f08.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /static/js/6458.c8caa6c4.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/957027334/?random=1731385168509&cv=11&fst=1731385168509&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /static/js/8839.6d5fc415.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /static/media/background.89952b18428ee1e72fb5.webp HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
Source: global traffic	HTTP traffic detected: GET /crowdswap-widget.js?1730283708 HTTP/1.1Host: widget.crowdswap.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getAnalyticsConfig HTTP/1.1Host: api.web3modal.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-sdk-version: html-wagmi-undefinedx-sdk-type: w3msec-ch-ua-mobile: ?0x-project-id: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getWallets?page=1&entries=4 HTTP/1.1Host: api.web3modal.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-sdk-version: html-wagmi-undefinedx-sdk-type: w3msec-ch-ua-mobile: ?0x-project-id: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/advertisement-backgrounds HTTP/1.1Host: api-prod.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/OpenSans-Bold.45847e90261782dc01a6.ttf HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://secure_sharing0documentpreview.wesendit.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/plans/WEB2 HTTP/1.1Host: api-prod.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?timestamp=1731385175910 HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /baggage: sentry-environment=prod,sentry-release=v3.1.5,sentry-public_key=bda22e349cac4fc29c45af1a4199df4a,sentry-trace_id=ac01bd357cab425394d920b30d37742c,sentry-sample_rate=1,sentry-sampled=truesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sentry-trace: ac01bd357cab425394d920b30d37742c-99269f127a825b58-1sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /crowdswap-widget.css?1730283708 HTTP/1.1Host: widget.crowdswap.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview HTTP/1.1Host: api-prod.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://secure_sharing0documentpreview.wesendit.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/957027334/?random=1731385168509&cv=11&fst=1731384000000&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7diOQy8b3N4ZyGid-61ToGZRqCvUmaOy6iBNbxy6kRAA61f99p&random=735624657&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/6316.088c246e.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.6f60e575cf8ad7cb10f7.js HTTP/1.1Host: script.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/4366.ea2f9748.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /static/js/6458.c8caa6c4.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /static/js/3046.6e077f08.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /static/js/8839.6d5fc415.chunk.js HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/957027334/?random=1731385168509&cv=11&fst=1731385168509&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkc6-mNUJnx93ZQCoEeXiKs4yWnle5XNR5K8Pn0n6JHc-jZ1WdtV-wmTFIL
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/advertisement-backgrounds HTTP/1.1Host: api-prod.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/plans/WEB2 HTTP/1.1Host: api-prod.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /static/media/background.89952b18428ee1e72fb5.webp HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview HTTP/1.1Host: api-prod.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /?timestamp=1731385175910 HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/957027334/?random=1731385168509&cv=11&fst=1731384000000&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7diOQy8b3N4ZyGid-61ToGZRqCvUmaOy6iBNbxy6kRAA61f99p&random=735624657&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: secure_sharing0documentpreview.wesendit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
Source: global traffic	HTTP traffic detected: GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1Host: o4503915977375744.ingest.sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: messenger.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /static/css/main.780ccf56.css HTTP/1.1Host: messenger.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://messenger.gleap.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: messenger.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: messenger.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.49337f82.js HTTP/1.1Host: messenger.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png HTTP/1.1Host: staticfiles.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gfeedback_widget_icons/0FgVRMxnnH17m45onKF22tEmzyZxAidF7DaRfxmmanjA5b2LX0u5xcvRaNezX0oqTXi0KRcGNxP.png HTTP/1.1Host: staticfiles.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO/team HTTP/1.1Host: api.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://messenger.gleap.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/29b0a09928856b262405?protocol=7&client=js&version=7.4.0&flash=false HTTP/1.1Host: ws-eu.pusher.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://messenger.gleap.ioSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: wjgvce/aJi8I8DHW7/hflg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /res/iconidea.svg HTTP/1.1Host: gleapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/iconcontact.svg HTTP/1.1Host: gleapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /projects/conversations?limit=25&skip=0 HTTP/1.1Host: api.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBOsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://messenger.gleap.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /avatar/eae09aa5450665dde0cba545e6e962f5?d=retro HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127 HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/362e9ad86d3154293ff817716d985247 HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /outbound/news/shared?lang=en&offset=0 HTTP/1.1Host: api.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBOsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://messenger.gleap.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /projects/conversations?limit=25&skip=0 HTTP/1.1Host: api.gleap.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBOsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://messenger.gleap.ioSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"2-l9Fw4VUO7kr8CvBlt4zaMCqXZ0w"
Source: global traffic	HTTP traffic detected: GET /api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127?ssl=1 HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gfeedback_widget_icons/0FgVRMxnnH17m45onKF22tEmzyZxAidF7DaRfxmmanjA5b2LX0u5xcvRaNezX0oqTXi0KRcGNxP.png HTTP/1.1Host: staticfiles.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.49337f82.js HTTP/1.1Host: messenger.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/eae09aa5450665dde0cba545e6e962f5?d=retro HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png HTTP/1.1Host: staticfiles.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api.gleap.io/identicon/362e9ad86d3154293ff817716d985247?ssl=1 HTTP/1.1Host: i2.wp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO/team HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /projects/conversations?limit=25&skip=0 HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /outbound/news/shared?lang=en&offset=0 HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/iconidea.svg HTTP/1.1Host: gleapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127?ssl=1 HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res/iconcontact.svg HTTP/1.1Host: gleapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api.gleap.io/identicon/362e9ad86d3154293ff817716d985247?ssl=1 HTTP/1.1Host: i2.wp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /projects/conversations?limit=25&skip=0 HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT&co=aHR0cHM6Ly9tZXNzZW5nZXIuZ2xlYXAuaW86NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=55lhg1byohr7 HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://messenger.gleap.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sessions/ping HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /users/me/session-auth HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /users/me/session-channel-auth HTTP/1.1Host: api.gleap.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/bg/FEpOlf-4Nl_yVgaEBoKRImLTwzdRNpeZJxe25VPdz_M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT&co=aHR0cHM6Ly9tZXNzZW5nZXIuZ2xlYXAuaW86NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=55lhg1byohr7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/bg/FEpOlf-4Nl_yVgaEBoKRImLTwzdRNpeZJxe25VPdz_M.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},yk:function(){e=qb()},zd:function(){d()}}};var Zb=ma(["data-gtm-yt-inspected-"]),zD=["www.youtube.com","www.youtube-nocookie.com"],AD,BD=!1; equals www.youtube.com (Youtube)
Source: chromecache_151.2.dr, chromecache_143.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=fB(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=Bb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},iB=function(){var a=[],b=function(c){return fb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=B.YT;if(q)return q.ready&&q.ready(d),b;var r=B.onYouTubeIframeAPIReady;B.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(KD(w,"iframe_api")\|\|KD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!BD&&ID(x[A],p.Qe))return pc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_177.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr	String found in binary or memory: return b}xD.F="internal.enableAutoEventOnTimer";var Zb=ma(["data-gtm-yt-inspected-"]),zD=["www.youtube.com","www.youtube-nocookie.com"],AD,BD=!1; equals www.youtube.com (Youtube)
Source: chromecache_221.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_221.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_221.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_151.2.dr, chromecache_143.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: var MC=function(a,b,c,d,e){var f=DA("fsl",c?"nv.mwt":"mwt",0),g;g=c?DA("fsl","nv.ids",[]):DA("fsl","ids",[]);if(!g.length)return!0;var k=IA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!pz(k,rz(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: secure_sharing0documentpreview.wesendit.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: media.payrexx.com
Source: global traffic	DNS traffic detected: DNS query: widget.crowdswap.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: pay.datatrans.com
Source: global traffic	DNS traffic detected: DNS query: a.trstplse.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: api.gleap.io
Source: global traffic	DNS traffic detected: DNS query: o4503915977375744.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: api.trstplse.com
Source: global traffic	DNS traffic detected: DNS query: api-prod.wesendit.com
Source: global traffic	DNS traffic detected: DNS query: www.wesendit.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: relay.walletconnect.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.web3modal.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: messenger.gleap.io
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: staticfiles.gleap.io
Source: global traffic	DNS traffic detected: DNS query: gleapcdn.com
Source: global traffic	DNS traffic detected: DNS query: ws-eu.pusher.com
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: sockjs-eu.pusher.com
Source: global traffic	DNS traffic detected: DNS query: i2.wp.com

Source: unknown

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&scrsrc=www.googletagmanager.com&frm=0&rnd=398649259.1731385166&auid=2000241421.1731385166&npa=0&gtm=45He4bb0v71480359za200&gcd=13l3l3l3l1l1&dma=0&tft=1731385165933&tfd=4497&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://secure_sharing0documentpreview.wesendit.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://secure_sharing0documentpreview.wesendit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:19:36 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 12 Nov 2024 04:19:37 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 9Connection: closeAccess-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.comCache-Control: public, max-age=300, s-maxage=300Vary: OriginServer: cloudflareCF-RAY: 8e13b98dfcc7144c-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 12 Nov 2024 04:19:37 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 9Connection: closeAccess-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.comCache-Control: public, max-age=300, s-maxage=300Vary: OriginServer: cloudflareCF-RAY: 8e13b98e1e672cc7-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:19:45 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:19:53 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:04 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:14 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:23 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 152vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:34 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 160vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:34 GMTconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-powered-by: Expressaccess-control-allow-origin: *content-security-policy: default-src 'none'x-content-type-options: nosniffcontent-type: text/html; charset=utf-8content-length: 168vary: Accept-Encodingdate: Tue, 12 Nov 2024 04:20:34 GMTconnection: close

Source: chromecache_188.2.dr, chromecache_169.2.dr	String found in binary or memory: http://scripts.sil.org/OFLThis
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://a.trstplse.com/app/js/api.min.js
Source: chromecache_118.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_201.2.dr, chromecache_195.2.dr	String found in binary or memory: https://avatar.vercel.sh/andrew.svg?size=50&text=$
Source: chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_177.2.dr, chromecache_160.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_225.2.dr, chromecache_221.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_201.2.dr, chromecache_195.2.dr	String found in binary or memory: https://ethereum.org/en/developers/docs/networks/
Source: chromecache_201.2.dr, chromecache_195.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_171.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://gleapcdn.com/res/iconcontact.svg
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://gleapcdn.com/res/iconidea.svg
Source: chromecache_118.2.dr	String found in binary or memory: https://google.com
Source: chromecache_118.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://media.payrexx.com/modal/v1/modal.min.js
Source: chromecache_118.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_214.2.dr, chromecache_121.2.dr	String found in binary or memory: https://pay.datatrans.com
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://pay.datatrans.com/upp/payment/js/paypal-button-1.0.0.js
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.min.js
Source: chromecache_167.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_123.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_177.2.dr, chromecache_160.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://staticfiles.gleap.io/gfeedback_widget_icons/0FgVRMxnnH17m45onKF22tEmzyZxAidF7DaRfxmmanjA5b2L
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://staticfiles.gleap.io/gfeedback_widgets/AeRSIKJg6T2IbnoSCy17kpZFbZRQLZrOS7CqU3e7YC86aHhdeQoMF
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://staticfiles.gleap.io/gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP
Source: chromecache_218.2.dr, chromecache_131.2.dr	String found in binary or memory: https://staticfiles.gleap.io/gfeedback_widgets/aHNVMhW648GjxmVjdr9rFMi7vxByShcI35VhsToNLiOXu0iZB9kIo
Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_167.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_201.2.dr, chromecache_195.2.dr	String found in binary or memory: https://walletconnect.com/explorer
Source: chromecache_201.2.dr, chromecache_195.2.dr	String found in binary or memory: https://walletconnect.com/explorer?type=wallet
Source: chromecache_162.2.dr, chromecache_184.2.dr	String found in binary or memory: https://widget.crowdswap.org/
Source: chromecache_162.2.dr, chromecache_184.2.dr	String found in binary or memory: https://widget.crowdswap.org/assets/media/icons/three-dots.svg
Source: chromecache_162.2.dr, chromecache_184.2.dr	String found in binary or memory: https://widget.crowdswap.org/assets/media/logo/splash-logo.svg
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://widget.crowdswap.org/loadAssets.js
Source: chromecache_118.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_156.2.dr, chromecache_216.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/957027334/?random
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_118.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_118.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-W9V2MV
Source: chromecache_140.2.dr, chromecache_172.2.dr, chromecache_180.2.dr, chromecache_220.2.dr, chromecache_189.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-W9V2MV
Source: chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_161.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.gravatar.com/avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/36
Source: chromecache_161.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.gravatar.com/avatar/eae09aa5450665dde0cba545e6e962f5?d=retro
Source: chromecache_161.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.gravatar.com/avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee
Source: chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_222.2.dr, chromecache_148.2.dr, chromecache_198.2.dr, chromecache_168.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_198.2.dr, chromecache_168.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/api2/
Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50071 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@20/179@128/49

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,15245652055953037118,15303302441320958094,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,15245652055953037118,15303302441320958094,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected suspicious URL

Source: Email	JoeBoxAI: AI detected Brand spoofing attempt in URL: URL: https://secure_sharing0documentpreview.wesendit.com
Source: Email	JoeBoxAI: AI detected Typosquatting in URL: URL: https://secure_sharing0documentpreview.wesendit.com

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Extra Window Memory Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://widget.crowdswap.org/	0%	Avira URL Cloud	safe
https://widget.crowdswap.org/crowdswap-widget.css?1730283708	0%	Avira URL Cloud	safe
https://o4503915977375744.ingest.sentry.io/api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/3046.6e077f08.chunk.js	0%	Avira URL Cloud	safe
https://gleapcdn.com/res/iconcontact.svg	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/5883.38419619.chunk.js	0%	Avira URL Cloud	safe
https://api-prod.wesendit.com/web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview	0%	Avira URL Cloud	safe
https://messenger.gleap.io/	0%	Avira URL Cloud	safe
https://messenger.gleap.io/cdn-cgi/rum?	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.css	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/logo192.png	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/media/background.89952b18428ee1e72fb5.webp	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Regular.9a6cfa5890d7f3eef585.ttf	0%	Avira URL Cloud	safe
https://widget.crowdswap.org/assets/media/icons/three-dots.svg	0%	Avira URL Cloud	safe
https://api-prod.wesendit.com/web2/api/admins/actuator/togglz-status	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Bold.45847e90261782dc01a6.ttf	0%	Avira URL Cloud	safe
https://messenger.gleap.io/static/js/main.49337f82.js	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/manifest.json	0%	Avira URL Cloud	safe
https://widget.crowdswap.org/loadAssets.js	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/deprecated/styles.css	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/3020.18ed824f.chunk.js	0%	Avira URL Cloud	safe
https://messenger.gleap.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/6458.c8caa6c4.chunk.js	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/6316.088c246e.chunk.js	0%	Avira URL Cloud	safe
https://widget.crowdswap.org/crowdswap-widget.js?1730283708	0%	Avira URL Cloud	safe
https://widget.crowdswap.org/version.txt	0%	Avira URL Cloud	safe
https://gleapcdn.com/res/iconidea.svg	0%	Avira URL Cloud	safe
https://api-prod.wesendit.com/web2/api/users/public/plans/WEB2	0%	Avira URL Cloud	safe
https://secure_sharing0documentpreview.wesendit.com/static/js/406.ce8fba17.chunk.js	0%	Avira URL Cloud	safe
https://www.wesendit.com/?timestamp=1731385167183	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
secure_sharing0documentpreview.wesendit.com	13.225.78.46	true	true	unknown
static.cloudflareinsights.com	104.16.80.73	true	false	high
socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com	18.202.37.109	true	false	high
www.recaptcha.net	142.250.186.99	true	false	high
widget.crowdswap.org	172.67.173.54	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
stats.g.doubleclick.net	74.125.133.155	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com	54.216.83.132	true	false	high
script.hotjar.com	13.32.27.107	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
www.google.com	216.58.206.36	true	false	high
www.wesendit.com	13.225.78.95	true	false	unknown
api-prod.wesendit.com	3.126.198.9	true	false	unknown
api.web3modal.com	104.18.29.72	true	false	high
api.gleap.io	67.207.79.245	true	false	high
static-cdn.hotjar.com	18.66.102.53	true	false	high
star-mini.c10r.facebook.com	157.240.252.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
platform-lb2-new.payrexx.com	52.29.111.249	true	false	high
gleapcdn.com	104.21.70.203	true	false	unknown
www.gravatar.com	192.0.73.2	true	false	high
relay.walletconnect.com	3.66.52.205	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
i2.wp.com	192.0.77.2	true	false	high
staticfiles.gleap.io	104.26.12.7	true	false	high
api.trstplse.com	172.66.40.81	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
analytics-alv.google.com	216.239.32.181	true	false	high
googleads.g.doubleclick.net	142.250.185.162	true	false	high
pay.datatrans.com	193.16.220.35	true	false	high
o4503915977375744.ingest.sentry.io	34.120.195.249	true	false	unknown
td.doubleclick.net	142.250.185.226	true	false	high
messenger.gleap.io	104.26.13.7	true	false	unknown
trustpulse.b-cdn.net	169.150.247.37	true	false	high
ws-eu.pusher.com	unknown	unknown	false	high
media.payrexx.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	high
a.trstplse.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
sockjs-eu.pusher.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://connect.facebook.net/signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://o4503915977375744.ingest.sentry.io/api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/FEpOlf-4Nl_yVgaEBoKRImLTwzdRNpeZJxe25VPdz_M.js	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://sockjs-eu.pusher.com/pusher/app/29b0a09928856b262405/480/on7hitb8/xhr_send?t=1731385235452&n=4	false		high
https://analytics.google.com/g/collect?v=2&tid=G-EHZSQKTF1P&gtm=45je4bb0v9116426356za200zb71480359&_p=1731385163337&gcd=13l3l3l3l1l1&npa=0&dma=0&cid=752911800.1731385168&ecid=477598349&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1731385168&sct=1&seg=0&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&dt=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&en=scroll&epn.percent_scrolled=90&_et=52&tfd=13069	false		high
https://api.web3modal.com/getWallets?page=1&entries=4	false		high
https://api.web3modal.com/getAnalyticsConfig	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET	false		high
https://secure_sharing0documentpreview.wesendit.com/static/js/3046.6e077f08.chunk.js	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
https://pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.min.js	false		high
https://widget.crowdswap.org/crowdswap-widget.css?1730283708	false	Avira URL Cloud: safe	unknown
https://gleapcdn.com/res/iconcontact.svg	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=ZsxWQxcxK10zB9btxRyeaZ%2Fwgfx5rw%2BwAbjsZcS%2BecJ%2FiyeK3Em3PpHCz%2B8aAOuSKAxLGpml0V%2BQjMNY5IGzZGgaSlnU3bimGSQeIQNOGHktp04VroxhEuVOFsjYD6eHUu8%3D	false		high
https://secure_sharing0documentpreview.wesendit.com/static/js/5883.38419619.chunk.js	false	Avira URL Cloud: safe	unknown
https://www.recaptcha.net/recaptcha/api.js?render=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT	false		high
https://pay.datatrans.com/upp/payment/js/paypal-button-1.0.0.js	false		high
https://api.gleap.io/sessions	false		high
https://api-prod.wesendit.com/web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview	false	Avira URL Cloud: safe	unknown
https://ws-eu.pusher.com/app/29b0a09928856b262405?protocol=7&client=js&version=7.4.0&flash=false	false		high
https://messenger.gleap.io/	false	Avira URL Cloud: safe	unknown
https://messenger.gleap.io/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://api.gleap.io/projects/conversations?limit=25&skip=0	false		high
https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.css	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-EHZSQKTF1P&cid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0	false		high
https://sockjs-eu.pusher.com/pusher/app/29b0a09928856b262405/480/on7hitb8/xhr_send?t=1731385233261&n=3	false		high
https://sockjs-eu.pusher.com/pusher/app/29b0a09928856b262405/480/on7hitb8/xhr_streaming?protocol=7&client=js&version=7.4.0&t=1731385227770&n=1	false		high
https://api.gleap.io/config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO/team	false		high
https://secure_sharing0documentpreview.wesendit.com/static/media/background.89952b18428ee1e72fb5.webp	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=GET	false		high
https://analytics.google.com/g/collect?v=2&tid=G-EHZSQKTF1P&gtm=45je4bb0v9116426356z871480359za200zb71480359&_p=1731385163337&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&cid=752911800.1731385168&ecid=477598349&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1731385168&sct=1&seg=0&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&dt=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6993	false		high
https://secure_sharing0documentpreview.wesendit.com/logo192.png	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Regular.9a6cfa5890d7f3eef585.ttf	false	Avira URL Cloud: safe	unknown
https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ	true		unknown
https://api-prod.wesendit.com/web2/api/admins/actuator/togglz-status	false	Avira URL Cloud: safe	unknown
https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Bold.45847e90261782dc01a6.ttf	false	Avira URL Cloud: safe	unknown
https://static.hotjar.com/c/hotjar-3708882.js?sv=7	false		high
https://messenger.gleap.io/static/js/main.49337f82.js	false	Avira URL Cloud: safe	unknown
https://secure_sharing0documentpreview.wesendit.com/manifest.json	false	Avira URL Cloud: safe	unknown
https://widget.crowdswap.org/loadAssets.js	false	Avira URL Cloud: safe	unknown
https://a.trstplse.com/app/js/api.min.js	false		high
https://secure_sharing0documentpreview.wesendit.com/deprecated/styles.css	false	Avira URL Cloud: safe	unknown
https://script.hotjar.com/modules.6f60e575cf8ad7cb10f7.js	false		high
https://td.doubleclick.net/td/ga/rul?tid=G-EHZSQKTF1P&gacid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=326597971	false		high
https://secure_sharing0documentpreview.wesendit.com/static/js/3020.18ed824f.chunk.js	false	Avira URL Cloud: safe	unknown
https://messenger.gleap.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	false	Avira URL Cloud: safe	unknown
https://www.gravatar.com/avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	false		high
https://api.trstplse.com/v1/account/10400/session	false		high
https://secure_sharing0documentpreview.wesendit.com/static/js/6458.c8caa6c4.chunk.js	false	Avira URL Cloud: safe	unknown
https://staticfiles.gleap.io/gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png	false		high
https://api.gleap.io/config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO	false		high
https://api.gleap.io/users/me/session-channel-auth	false		high
https://secure_sharing0documentpreview.wesendit.com/static/js/6316.088c246e.chunk.js	false	Avira URL Cloud: safe	unknown
https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT&co=aHR0cHM6Ly9tZXNzZW5nZXIuZ2xlYXAuaW86NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=55lhg1byohr7	false		high
https://relay.walletconnect.com/?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtwQndOWWlSUnpWN0tUWU1QTGFHUGhTNTU3elV4cFFkaGc3b2FhbnFYVmpwQiIsInN1YiI6IjM1NzI0NWMxOWJlY2RlMjdmMzE1NTQ2ZGU4ODBmZTYyMmM2MTcwYWU0ZTc3MDk1NGYwZDc2ZmU2YmRlMmM1NDMiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTczMTM4NTE2OCwiZXhwIjoxNzMxNDcxNTY4fQ.EKvPjWC2kiNxBWBTM8cMR6UO52bKKK-KQKfCZqAJriMu9tgtcp-gDrUy1WqqcsYrxLlzCDFXIJz5sngcc3-DBw&projectId=b7e27dea69b618cdbf49fbef3df26aae&ua=wc-2%2Fjs-2.6.2%2Fwindows10-chrome-117.0.0%2Fbrowser%3Asecure_sharing0documentpreview.wesendit.com&useOnCloseEvent=true	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET	false		high
https://i2.wp.com/api.gleap.io/identicon/362e9ad86d3154293ff817716d985247?ssl=1	false		high
https://www.facebook.com/tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET	false		high
https://api.gleap.io/users/me/session-auth	false		high
https://widget.crowdswap.org/crowdswap-widget.js?1730283708	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=FGET	false		high
https://www.gravatar.com/avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/362e9ad86d3154293ff817716d985247	false		high
https://widget.crowdswap.org/version.txt	false	Avira URL Cloud: safe	unknown
https://gleapcdn.com/res/iconidea.svg	false	Avira URL Cloud: safe	unknown
https://api-prod.wesendit.com/web2/api/users/public/plans/WEB2	false	Avira URL Cloud: safe	unknown
https://secure_sharing0documentpreview.wesendit.com/static/js/406.ce8fba17.chunk.js	false	Avira URL Cloud: safe	unknown
https://www.wesendit.com/?timestamp=1731385167183	false	Avira URL Cloud: safe	unknown
https://www.gravatar.com/avatar/eae09aa5450665dde0cba545e6e962f5?d=retro	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://avatar.vercel.sh/andrew.svg?size=50&text=$	chromecache_201.2.dr, chromecache_195.2.dr	false		high
https://staticfiles.gleap.io/gfeedback_widgets/AeRSIKJg6T2IbnoSCy17kpZFbZRQLZrOS7CqU3e7YC86aHhdeQoMF	chromecache_218.2.dr, chromecache_131.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_151.2.dr, chromecache_118.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://www.google.com	chromecache_118.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_151.2.dr, chromecache_118.2.dr	false		high
https://www.recaptcha.net/recaptcha/api2/	chromecache_198.2.dr, chromecache_168.2.dr	false		high
https://widget.crowdswap.org/	chromecache_162.2.dr, chromecache_184.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gravatar.com/avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/36	chromecache_161.2.dr, chromecache_173.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://staticfiles.gleap.io/gfeedback_widgets/aHNVMhW648GjxmVjdr9rFMi7vxByShcI35VhsToNLiOXu0iZB9kIo	chromecache_218.2.dr, chromecache_131.2.dr	false		high
https://support.google.com/recaptcha	chromecache_167.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_177.2.dr, chromecache_151.2.dr, chromecache_143.2.dr, chromecache_160.2.dr, chromecache_192.2.dr, chromecache_118.2.dr	false		high
https://widget.crowdswap.org/assets/media/icons/three-dots.svg	chromecache_162.2.dr, chromecache_184.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://connect.facebook.net/	chromecache_225.2.dr, chromecache_221.2.dr	false		high
https://pay.datatrans.com	chromecache_214.2.dr, chromecache_121.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_167.2.dr	false		high
https://ethereum.org/en/developers/docs/networks/	chromecache_201.2.dr, chromecache_195.2.dr	false		high
https://www.google.com/pagead/1p-user-list/957027334/?random	chromecache_156.2.dr, chromecache_216.2.dr	false		high
https://www.gravatar.com/avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee	chromecache_161.2.dr, chromecache_173.2.dr	false		high
https://cloud.google.com/contact	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_146.2.dr, chromecache_145.2.dr, chromecache_167.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_118.2.dr	false		high
https://static.hotjar.com/c/hotjar-	chromecache_177.2.dr, chromecache_160.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
13.225.78.63	unknown	United States	16509	AMAZON-02US	false
3.69.70.211	unknown	United States	16509	AMAZON-02US	false
172.67.173.54	widget.crowdswap.org	United States	13335	CLOUDFLARENETUS	false
142.250.185.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
13.32.27.19	unknown	United States	7018	ATT-INTERNET4US	false
169.150.247.37	trustpulse.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
3.66.52.205	relay.walletconnect.com	United States	16509	AMAZON-02US	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
54.216.83.132	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
172.66.40.81	api.trstplse.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
13.225.78.95	www.wesendit.com	United States	16509	AMAZON-02US	false
18.202.37.109	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
192.0.77.2	i2.wp.com	United States	2635	AUTOMATTICUS	false
67.207.79.245	api.gleap.io	United States	14061	DIGITALOCEAN-ASNUS	false
172.67.139.72	unknown	United States	13335	CLOUDFLARENETUS	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.66.102.51	unknown	United States	3	MIT-GATEWAYSUS	false
104.26.12.7	staticfiles.gleap.io	United States	13335	CLOUDFLARENETUS	false
74.125.133.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.29.111.249	platform-lb2-new.payrexx.com	United States	16509	AMAZON-02US	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
13.225.78.46	secure_sharing0documentpreview.wesendit.com	United States	16509	AMAZON-02US	true
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
35.156.206.228	unknown	United States	16509	AMAZON-02US	false
3.126.198.9	api-prod.wesendit.com	United States	16509	AMAZON-02US	false
142.250.185.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.29.72	api.web3modal.com	United States	13335	CLOUDFLARENETUS	false
13.32.27.107	script.hotjar.com	United States	7018	ATT-INTERNET4US	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
193.16.220.35	pay.datatrans.com	Switzerland	30935	DATATRANS-CH-ASCH	false
13.225.78.37	unknown	United States	16509	AMAZON-02US	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.185.131	unknown	United States	15169	GOOGLEUS	false
104.26.13.7	messenger.gleap.io	United States	13335	CLOUDFLARENETUS	false
104.21.30.157	unknown	United States	13335	CLOUDFLARENETUS	false
34.120.195.249	o4503915977375744.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1554133
Start date and time:	2024-11-12 05:18:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@20/179@128/49

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.186.46, 173.194.76.84, 34.104.35.123, 172.217.16.200, 172.217.18.8, 216.58.206.74, 20.109.210.53, 142.250.186.99, 199.232.210.172, 192.229.221.95, 20.242.39.171, 52.165.164.15, 142.250.185.67, 142.250.186.35, 142.250.184.195, 142.250.184.202, 142.250.74.202, 142.250.185.74, 216.58.212.170, 172.217.18.106, 142.250.186.74, 142.250.181.234, 142.250.186.42, 142.250.185.170, 142.250.185.138, 142.250.186.170, 142.250.185.234, 142.250.185.106, 216.58.206.42, 142.250.185.202
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://secure_sharing0documentpreview.wesendit.com
URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Safety First: WeSendit's Secure Terms & Data Shield", "prominent_button_name": "Accept", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "We use cookies to enhance your user experience. You can manage cookies according to your personal preferences. For more information please visit Privacy policy.", "prominent_button_name": "Allow all", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "brands": [ "WeSendit" ] }
	```json { "brands": [ "WeSendit" ] }
URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Found a bug? Let us know", "prominent_button_name": "unknown", "text_input_field_labels": [ "Found a bug? Let us know", "Request a feature", "Send us a message" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "brands": [ "WeSendit" ] }
	```json { "brands": [ "WeSendit" ] }
URL: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Model: claude-3-haiku-20240307	```json { "brands": [ "WeSendit" ] }
	```json { "brands": [ "WeSendit" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11826)
Category:	dropped
Size (bytes):	425391
Entropy (8bit):	5.637696458443606
Encrypted:	false
SSDEEP:	6144:u4cilFjYCAsiqoOc8Jumc1OTrp40KOZLFq5kQo/cJicDYo/MXIcL:3cQFjY7M7BJBcoTrOELHcDrk
MD5:	AC6CAC040543056CD3D7C4E9237C01A7
SHA1:	861B14868D2B73FB6B9421B6358306139CF025DA
SHA-256:	30A5787B07F26602616F9923A30E1C2BCD7FC654231FD7EC75AE6B220ACEED46
SHA-512:	D0383764EE0875C7526646DDB477003062C55AB7356C86D9CAC95472B2A8587815115FC766041D9AC4320F2B570D2117AC2749F786AA272A6F2B34A6E4827E76
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":22,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ga_first","priority":21,"vtp_instanceDestinationId":"G-EHZSQKTF1P","tag_id":27},{"function":"__set_product_settings","priority":20,"vtp_instanceDestinationId":"G-EHZSQKTF1P","vtp_foreignTldMacroResult":["macro",1],"vtp_isCh

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	324694
Entropy (8bit):	5.4038431957349635
Encrypted:	false
SSDEEP:	3072:WQjTVORHCrtppRuDqC1RRuDbGbBcLOhnIi2bHeM7SjQ5uiJ:WQjTVOMrttaRSz82bHeM2jQ5uiJ
MD5:	174F6B78E03D25C43AE6DA89889358F3
SHA1:	9B436EE7965C7F8B5239A3234F2FAC0606A326F3
SHA-256:	1793034713C26523338FC70C601924BED2E171596E506114202A3175867C39DC
SHA-512:	9A225900B9DE9793A9C7EF48ED62EF8AFF3C96DA3623EFA435A699F535B5FCAA11CC18ED95B64A31C0E66F37D05897A3EEC2CFFAC7C39C70E919BCEF5C2ADF17
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 406.ce8fba17.chunk.js.LICENSE.txt /.(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[406],{79734:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(44654);function i(e,t,r){return void 0===t&&(t=new Uint8Array(2)),void 0===r&&(r=0),t[r+0]=e>>>8,t[r+1]=e>>>0,t}function o(e,t,r){return void 0===t&&(t=new Uint8Array(2)),void 0===r&&(r=0),t[r+0]=e>>>0,t[r+1]=e>>>8,t}function a(e,t){return void 0===t&&(t=0),e[t]<<24\|e[t+1]<<16\|e[t+2]<<8\|e[t+3]}function s(e,t){return void 0===t&&(t=0),(e[t]<<24\|e[t+1]<<16\|e[t+2]<<8\|e[t+3])>>>0}function c(e,t){return void 0===t&&(t=0),e[t+3]<<24\|e[t+2]<<16\|e[t+1]<<8\|e[t]}function u(e,t){return void 0===t&&(t=0),(e[t+3]<<24\|e[t+2]<<16\|e[t+1]<<8\|e[t])>>>0}function f(e,t,r){return void 0===t&&(t=new Uint8Array(4)),void 0===r&&(r=0),t[r+0]=e>>>24,t[r+1]=e>>>16,t[r+2]=e>>>8,t[r+3]=e>>>0,t}function l(e,t,r){return void 0===t&&(t=new Uint8Array(4)),void 0===r&&(r

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
URL:	https://messenger.gleap.io/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7486), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	7577
Entropy (8bit):	5.399227001332063
Encrypted:	false
SSDEEP:	96:f+aqyTfA8qjnhZg5Pq0wAmtBwDezHHkwWoO1GroXY71SUcuhjG2Ac6nMEtOI4T27:GaffAZhZg5PqTAoBwD6t/Vcux8c6CZqB
MD5:	C6F29826BD4723BCB436DAF56E160B6C
SHA1:	FF747AD1A42F9E9F5220E6FA1AA10583031C569B
SHA-256:	CF3E999E02C9C5A8DBF5D2241FF96D27C49BF2E0A1F01214B6D94A1D12791E04
SHA-512:	7BB4A9A5AA64A385A1AE8B982F79E0BB7E3F2866F0CC9F67831EA3A65C7949D4D4B6CBB316A996BDA2CAFA18DA5F7E865F1874F06CE2F430EC00BAFBDACA0475
Malicious:	false
Reputation:	low
Preview:	(function(a,b){if(typeof define==="function"&&define.amd){define([],b)}else{if(typeof module==="object"&&module.exports){module.exports=b()}else{a.SecureFields=b()}}}(typeof self!=="undefined"?self:this,function(){return function(E){var C={};var B=h();var H={};var y={TOKENIZE:"TOKENIZE",PAY:"PAY",REGISTER:"REGISTER"};var d="/upp/payment/SecureFields",e,s,g,f,p,c,A,G,q,z,w;function D(){e={};s={};g=[];p=false;G="";w=null;f=null;H={};z=false}D();function l(){if(window.console&&e.debug){var I=Array.prototype.slice.call(arguments).map(function(J){return(typeof J==="object")?JSON.stringify(J,null,"\t"):J});I.splice(1,0,"color: blue");I[0]="%c"+I[0];console.log.apply(console,I)}}function h(){return Math.random().toString(36).substr(2,9)}function m(I){return"securefields-"+B+"--"+I}C.initTokenize=function(K,J,I){q=y.TOKENIZE;n(K,null,J,I)};C.initPay=function(K,J,I){q=y.PAY;n(K,null,J,I)};C.initRegister=function(K,J,I){q=y.REGISTER;n(K,null,J,I)};C.init=function(K,J,I){n(null,K,J,I)};function n

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	downloaded
Size (bytes):	18908
Entropy (8bit):	5.6273780069979
Encrypted:	false
SSDEEP:	384:C8PzU6xGUPuExoR095pUb75JxvQV3ZqcnaeKFxydF2oHyT7:9jxGU2EmGc/QR0eaeK+byf
MD5:	3CC454427F1F22054AA588E2F9119297
SHA1:	DB688196733AB690BB095BDED56B6E105352EF80
SHA-256:	144A4E95FFB8365FF25606840682912262D3C337513697992717B6E553DDCFF3
SHA-512:	33F2761AD4765EA70300C104F7912EEA14140C44717A69973E4B73DE15BDA29C8E45197BD8C6FEDC281447DED49CA2265C254738795D5B5F1171CF9CCC0E5B1A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/FEpOlf-4Nl_yVgaEBoKRImLTwzdRNpeZJxe25VPdz_M.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(D,K){if((D=(K=null,h).trustedTypes,!D)\|\|!D.createPolicy)return K;try{K=D.createPolicy("bg",{createHTML:c,createScript:c,createScriptURL:c})}catch(t){h.console&&h.console.error(t.message)}return K},c=function(D){return D},h=this\|\|self;(0,eval)(function(D,K){return(K=H())&&D.eval(K.createScript("1"))===1?function(t){return K.createScript(t)}:function(t){return""+t}}(h)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var DT=function(D,K){return O[D](O.prototype,{splice:K,stack:K,prototype:K,console:K,propertyIsEnumerable:K,parent:K,floor:K,call:K,document:K,pop:K,length:K,replace:K})},p=function(D,K,h,c,H,X){if(h.X==h)for(X=r(h,K),K==182\|\|K==405\|\|K==138?(K=function(f,I,g,t,l){if(g=(l=X.length,l\|0)-4>>3,X.FM!=g){I=[0,0,H[1],(X.FM=g,t=(g<<3)-4,H[2])];try{X.MY=Kw(sL((t\|0)+4,X),sL(t,X),I)}catc

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1286)
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	5.368185766365328
Encrypted:	false
SSDEEP:	24:0E0sr6FcWjujVaGaMp69Q3qGC75ju//rQvTXLSB3T1UhkdpxLHcsaBA14D:0EPUux1p6a6GC7RunsjL6T1Uhq/A9D
MD5:	9DFCF97B96CE7A6CF13C4D7903A8D244
SHA1:	3C972651CD079C60E1298E1DC5FD9E7DA0D2DF7D
SHA-256:	9E842D7A431B1D2CECD0EEEB95F56398FA7F52B7F7D385A1E602B67353363405
SHA-512:	D8A217574C562514858F4EE3444960D95E4AA2C6F3AC8D0676A7FCA63F144AC522B7B6116815B63E2BA6778B103CA8B38F59185449C782F8D14297FDBBA69A05
Malicious:	false
Reputation:	low
URL:	https://messenger.gleap.io/
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><title>Gleap Frame</title><script defer="defer" src="/static/js/main.49337f82.js" type="d0df811882204ada14e4b67d-text/javascript"></script><link href="/static/css/main.780ccf56.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script src="/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js" data-cf-settings="d0df811882204ada14e4b67d-\|49" defer></script><script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvW

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.476409765557392
Encrypted:	false
SSDEEP:	3:H0hCkuWthHeTn:UUkuqxeT
MD5:	A3144EE887752BC84252FAACD4DFFD83
SHA1:	172430F70BAEDA54BB9F533293E0E80A2DA5835D
SHA-256:	8B87CFF79D0F8142D02D4A5991C83A5D59A7733BCB0EBEDD0DE57E559C6EAEFB
SHA-512:	E366210709098991B8B21140DF48E50CD650E115A30A8A5EEC016B98B077C6DA3FEE972BA219409AD72E85BF575A033E1E9AAC7931B727E4BA15644AAC5349D3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDJaqii-pWxhIFDVNaR8USEAm5aweSKiQvOhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgAKCQoHDVNaR8UaAA==

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3755
Entropy (8bit):	3.8903696164136328
Encrypted:	false
SSDEEP:	96:8lVxYQO3f+UdKslfo4XC+aNiAq8fiGoaa0YsEK:GHQ3fs+ftX7aNikisl3
MD5:	C7395C1D9FB05BE119C36CFE70520A7D
SHA1:	AC353D544BFFF4FE9F2F7EA58FCD03CD4E73391C
SHA-256:	C3406FE1298E15EC2B1D75D9FC7A1CB4E73CF639D60F8A56F8A902A21582BDE3
SHA-512:	1E75C9E9D3F8F2C838E31D7534D39BC4213ADB9F37ECA16496AC7B15208DC6B3C56460697486272463FF3A20D2614254E79BC85D4B491395C06805A0A7557F2C
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.8021 7.12682C19.1661 11.8836 16.4157 16.8454 11.6589 18.2094L12.3646 20.6703C12.3646 20.6703 3.04605 20.6791 0.576335 12.0662C-0.787649 7.30946 1.96275 2.34761 6.71953 0.983623C11.4763 -0.380361 16.4382 2.37004 17.8021 7.12682ZM7.09081 14.2078C7.73738 14.4337 8.47483 14.5467 9.30317 14.5467C9.6719 14.5467 10.0302 14.5207 10.3782 14.4688C10.7288 14.4194 11.0429 14.3532 11.3208 14.2701C11.6012 14.1896 11.8232 14.1026 11.9868 14.0092L11.6012 12.8796C11.461 12.9367 11.2754 12.9952 11.0442 13.0549C10.8131 13.1172 10.5548 13.1691 10.2691 13.2107C9.9835 13.2548 9.69138 13.2769 9.39276 13.2769C8.75917 13.2769 8.19829 13.1938 7.71011 13.0276C7.22194 12.8614 6.81166 12.6173 6.47929 12.2953C6.14691 11.9734 5.89504 11.5761 5.72365 11.1035C5.55487 10.6283 5.46918 10.083 5.46658 9.46756C5.46918 8.90928 5.54968 8.39384 5.70807 7.92124C5.86907 7.44605 6.1

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	168
Entropy (8bit):	4.769124880456318
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KQHGMNNIGPN06K6c4Nu:hxuJzhqIzyYk+qRU4zEdxXZiqLHGIIgy
MD5:	230661C6D4723F1F6425DA1A4DF47427
SHA1:	399B88448A8A9CEF16EBCF058D2260FAEFB0F9A2
SHA-256:	3CCAD026DC708FEB87944459CF480846F43901CD380D3B48980A93888CE78FD0
SHA-512:	B495F7AC5B3C43A46F23D6FD8215A4D00D28D06A84C38D862CED7252FD376EFF656AC0B0EE0565B52236344D87200A3FB52A5959FD1C88763BAC2D5765A2A385
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /users/me/session-channel-auth</pre>.</body>.</html>.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	4280073
Entropy (8bit):	5.494457143828683
Encrypted:	false
SSDEEP:	49152:UoC2IR2TxhEh6c4pz6RPwilJic58DS7wek/s/jYj5G1eBjzad0dginopr:SR2TY71fic58ykQYad0dE
MD5:	C4EFB6B0E90FB24A12C73F569D253019
SHA1:	E386376784E3A73FF6D9257DBF41596AEA4A02BE
SHA-256:	812F9C6CD2BFB50D2A9105D60985F2BDC0B3768AAF458A18B3D765FC6A85671E
SHA-512:	E44D0F0C57DD68A43950A2CD557A72EEFDF7B3336AACE039EEC8A8AA5F9D5B10123D87FDAEAB5A295F330B13DF09435352B5CA31D076CD323F8009294AC0BE93
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/main.fa247412.js
Preview:	/! For license information please see main.fa247412.js.LICENSE.txt /.(function(){var __webpack_modules__={88142:function(e,t,n){"use strict";n.d(t,{r:function(){return l}});var r,i,a=n(47313),o=["title","titleId"];function s(){return s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},s.apply(this,arguments)}function c(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}function u(e,t){var n=e.title,u=e.titleId,l=c(e,o);return a.createElement("svg",s({width:32,height:32,viewBox:"0 0 32 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-lab

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	575
Entropy (8bit):	4.475327467967114
Encrypted:	false
SSDEEP:	12:fIcd+cdULQqTE8FKvriShE8FKvA8FKUKV/cDTO:fIX9TEJOTJoJUKWDTO
MD5:	D2D665EFDBC66692E54556E74A3C6C8D
SHA1:	B310DC4ACE9EB46A140C863C273D3BC4E09FF4A2
SHA-256:	76FD5C735EED1E01E5C9A6D9B62D3BD55103E57C5DE70DB5171CCAEA3B2A2451
SHA-512:	6A7E173387EF073A9195E79334A6E2CB2DC07960582E8E6F40505C9336FD4E1DB53191EF82DFCD91FDD62D3F28BFAF74D5799D289B885431E1735798FE3FC2BE
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/manifest.json
Preview:	{. "short_name": "WeSendit",. "name": "WeSendit",. "icons": [. {. "src": "favicon.ico",. "sizes": "64x64 32x32 24x24 16x16",. "type": "image/x-icon",. "purpose": "any maskable". },. {. "src": "logo192.png",. "type": "image/png",. "sizes": "192x192",. "purpose": "any maskable". },. {. "src": "logo512.png",. "type": "image/png",. "sizes": "512x512",. "purpose": "any maskable". }. ],. "start_url": ".",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://api.gleap.io/outbound/news/shared?lang=en&offset=0
Preview:	[]

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24696), with no line terminators
Category:	dropped
Size (bytes):	24696
Entropy (8bit):	5.525314169400636
Encrypted:	false
SSDEEP:	384:UpuAQ3hYU6fUp2fS9Hwa9nyIaaKUpb2yLCfFe5Lde2OjM6EUT6NOzRRvMfhkT4iU:auAQ3GaAyLCfmLd/OjuK6sAkTVpYjpP
MD5:	E5C87BA1E0BB5D6E4D405B1821ABB42F
SHA1:	935E5802FEE6DD56F43BB2B86BFE0881E9D5CB70
SHA-256:	F00D0732EF45FC873388B98A33835C7693DCF1103DF9BF14953503C45EAF7F97
SHA-512:	AC385C09F48F181F4BF6566D5C8049FEB9B1E1BDEF090520FA52831C01581EA09634B0F628CCD7AE7816DBADA253008EE597CE19E13B9173D801E00D98F9D2BE
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6316],{51664:function(t){"use strict";var e={single_source_shortest_paths:function(t,r,n){var o={},i={};i[r]=0;var a,u,s,f,c,h,d,g=e.PriorityQueue.make();for(g.push(r,0);!g.empty();)for(s in u=(a=g.pop()).value,f=a.cost,c=t[u]\|\|{})c.hasOwnProperty(s)&&(h=f+c[s],d=i[s],("undefined"===typeof i[s]\|\|d>h)&&(i[s]=h,g.push(s,h),o[s]=u));if("undefined"!==typeof n&&"undefined"===typeof i[n]){var l=["Could not find a path from ",r," to ",n,"."].join("");throw new Error(l)}return o},extract_shortest_path_from_predecessor_list:function(t,e){for(var r=[],n=e;n;)r.push(n),t[n],n=t[n];return r.reverse(),r},find_path:function(t,r,n){var o=e.single_source_shortest_paths(t,r,n);return e.extract_shortest_path_from_predecessor_list(o,n)},PriorityQueue:{make:function(t){var r,n=e.PriorityQueue,o={};for(r in t=t\|\|{},n)n.hasOwnProperty(r)&&(o[r]=n[r]);return o.queue=[],o.sorter=t.sorter\|\|n.default_sorter,o},default_sorter:function

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50183
Entropy (8bit):	4.908458195945145
Encrypted:	false
SSDEEP:	768:ZEmIoWKp+AnvggQAZ+cviybN37vyvUbvClWLvLCvjuJGv1ey7856Xv:ZEmImZ+TyMlnuiWW
MD5:	A38F20E2DF1909B918FDACB3312B72E0
SHA1:	B4E0ED85C3C3B4E89A42F708F6C81B6CF58035B0
SHA-256:	C4FD80B003FE4B4D99A45B88E5A12F5A2D83ADA6DFD38C5115EFEF65822DABE3
SHA-512:	DBF85E7B147F7EE542DEAA8AEC8AF9028F0953C6765F0ACEAB0C9A118650D341A39D7671F7C4FFAC613D1F449D1614744A9CA0D90A4D1BC213935F263869A8D6
Malicious:	false
Reputation:	low
Preview:	{"flowConfig":{"newsMenuLabel":"News","checklistMenuLabel":"VIP User","featureRequestsMenuLabel":"Roadmap","allConversationsMenuLabel":"Messages","knowledgeBaseMenuLabel":"Help","welcomeText":"How can we help?","replyTime":"within a few minutes","color":"#012747","backgroundColor":"#f3faff","headerColor":"#2142E7","buttonColor":"#e32900","borderRadius":19,"buttonX":20,"buttonY":20,"operatorAvatarImage":"https://staticfiles.gleap.io/gfeedback_widgets/aHNVMhW648GjxmVjdr9rFMi7vxByShcI35VhsToNLiOXu0iZB9kIoWwhZ8tj9MiFVdR5NiQ7Vtv.png","operatorName":"Kai","logo":"https://staticfiles.gleap.io/gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png","buttonLogo":"","customCSS":"","hideFeatureRequests":true,"hideNews":true,"hideAllConversations":false,"hideKnowledgeBase":true,"enableOpeningTimesBot":true,"openingTimes":[{"day":"Weekdays","openingTime":"09:00","closingTime":"17:00"}],"timezone":"Europe/Zurich","showOnlineStatus":true,"spamProtection":tru

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	2267593
Entropy (8bit):	5.509510284195331
Encrypted:	false
SSDEEP:	24576:PFAhVuhQMG1m3TSZWkcSO2dpux4vDe9WUkWpDKToJFaGo4cXUAhVuh5cCPQfLg3X:Pg2x4vDe7y4cXTuRXhQLDpry
MD5:	F42981D72E527589CC4CE7D68188F1B7
SHA1:	F495150999B4ED907A75C40547BBFDF5255C9645
SHA-256:	A73F651099FB5BF24AA89CF2E937264DD15304DF3ECC247A1859C5EF9D6B010C
SHA-512:	72CBDE93E56AC57788BAB377CF6D2074C37507D51291F4BABE0CFDB85985FAF1EEC5A8744F53FCBEF76571F20B7D5CA18012528B46651A47F90B7C3FF44FE781
Malicious:	false
Reputation:	low
URL:	https://messenger.gleap.io/static/js/main.49337f82.js
Preview:	/! For license information please see main.49337f82.js.LICENSE.txt /.!function(){var e={9998:function(e,t){"use strict";t.Z=function(e,t){if(e&&t){var n=Array.isArray(t)?t:t.split(","),o=e.name\|\|"",r=(e.type\|\|"").toLowerCase(),a=r.replace(/\/.$/,"");return n.some((function(e){var t=e.trim().toLowerCase();return"."===t.charAt(0)?o.toLowerCase().endsWith(t):t.endsWith("/")?a===t.replace(/\/.*$/,""):r===t}))}return!0}},6724:function(e,t,n){var o=n(9218),r=n(1772),a=TypeError;e.exports=function(e){if(o(e))return e;throw a(r(e)+" is not a function")}},6299:function(e,t,n){var o=n(9218),r=String,a=TypeError;e.exports=function(e){if("object"==typeof e\|\|o(e))return e;throw a("Can't set "+r(e)+" as a prototype")}},5715:function(e,t,n){var o=n(5028),r=n(4385),a=n(1592).f,i=o("unscopables"),p=Array.prototype;void 0==p[i]&&a(p,i,{configurable:!0,value:r(null)}),e.exports=function(e){p[i][e]=!0}},5884:function(e,t,n){var o=n(3931),r=String,a=TypeError;e.exports=function(e){if(o(e))return e;thro

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 420, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	177946
Entropy (8bit):	1.0064738041727075
Encrypted:	false
SSDEEP:	192:mbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbhbbbe:h
MD5:	88A4A26DD5178CE79E905B6F7E90B665
SHA1:	B1C732A92EB51A1AA112054CD96DDBE519CDC162
SHA-256:	B6A87123B37E103997D7346FDAABE23A5E89E112363047A1B6DC809F8C2CB93B
SHA-512:	4CF4B3E4BC385728661D7E2363A824E834C8D6F23432251B4E8459E2A8AE2867CD45643E02A9B64F13D9CE4D37CA6A9AD08CC49E1BCFA9F33AE6121D98672F81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............I.......PLTE.....y..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS...................................................................................................................................................................................

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	2267593
Entropy (8bit):	5.509510284195331
Encrypted:	false
SSDEEP:	24576:PFAhVuhQMG1m3TSZWkcSO2dpux4vDe9WUkWpDKToJFaGo4cXUAhVuh5cCPQfLg3X:Pg2x4vDe7y4cXTuRXhQLDpry
MD5:	F42981D72E527589CC4CE7D68188F1B7
SHA1:	F495150999B4ED907A75C40547BBFDF5255C9645
SHA-256:	A73F651099FB5BF24AA89CF2E937264DD15304DF3ECC247A1859C5EF9D6B010C
SHA-512:	72CBDE93E56AC57788BAB377CF6D2074C37507D51291F4BABE0CFDB85985FAF1EEC5A8744F53FCBEF76571F20B7D5CA18012528B46651A47F90B7C3FF44FE781
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.49337f82.js.LICENSE.txt /.!function(){var e={9998:function(e,t){"use strict";t.Z=function(e,t){if(e&&t){var n=Array.isArray(t)?t:t.split(","),o=e.name\|\|"",r=(e.type\|\|"").toLowerCase(),a=r.replace(/\/.$/,"");return n.some((function(e){var t=e.trim().toLowerCase();return"."===t.charAt(0)?o.toLowerCase().endsWith(t):t.endsWith("/")?a===t.replace(/\/.*$/,""):r===t}))}return!0}},6724:function(e,t,n){var o=n(9218),r=n(1772),a=TypeError;e.exports=function(e){if(o(e))return e;throw a(r(e)+" is not a function")}},6299:function(e,t,n){var o=n(9218),r=String,a=TypeError;e.exports=function(e){if("object"==typeof e\|\|o(e))return e;throw a("Can't set "+r(e)+" as a prototype")}},5715:function(e,t,n){var o=n(5028),r=n(4385),a=n(1592).f,i=o("unscopables"),p=Array.prototype;void 0==p[i]&&a(p,i,{configurable:!0,value:r(null)}),e.exports=function(e){p[i][e]=!0}},5884:function(e,t,n){var o=n(3931),r=String,a=TypeError;e.exports=function(e){if(o(e))return e;thro

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	281796
Entropy (8bit):	7.999160468432722
Encrypted:	true
SSDEEP:	6144:B+CQVouVwlJ2hwVeTOU4ZQV0U16s/FB7C0gFEQlqLKKqZlTszmv5c8:aouVwiqVoOoV0U1/7oFEQldKZiv5c8
MD5:	A013AA5320533F411C7ED3702817427F
SHA1:	38BC33D1DB53A1EF09B0BB56D668D2E842485D94
SHA-256:	36AEAFBD9DA40052DB7CB4A4FC60A8ECF3337C2E98A19C2457E84E92883149AE
SHA-512:	7D732F4E4450B5F720A0C00958F6775C46C86195094EA955F0CA4A22B25A51C0B529F4F8F80A52CEC91982DF8A5784E010C2C3C45093F07F1D7198A291CE7DD4
Malicious:	false
Reputation:	low
Preview:	RIFF.L..WEBPVP8 .L..p......8....%....^.....~.....g.................D+....}.._&..<5...S...t..u.....s.....K.S.....y'.w.vtxW.?.;..............G.......O.......e.....w..d....y.........z.....................?~?.}......'....p>......O........_._....'..........._....{.~K.?.w._a...........+...OvO........_._.?...........~Q.........w._.?......7.s.o.......?............./...'.....w.: ......eq..Z...WR..y.....i;......N0q.w.....d..-..`ADC...(.b]...3..p....EA..~IY.h.b5t.v..-..\ ..8.&.?..X.qNWB..R...G.u5....V...~.#1~G..;..@Y...X..?../.4. ..:....yo.v\|...6(.7...go:.0...g!.....XK.....#....LX..........2..>..../........L0..<..)..........E.~.\._......0.......0..bN.M.....N.k..k..H..@G...~......\|..Z..A..e.-.-..0...=..f....... .............f.uf.Q..9r.-.w..Z...oy..Eg:.t1O.....i....R......8.o.}..vfEWR....esA.l!&...U^zO.....8`..0.>7[...GiW,0 .@33*o.0...YR..v%h$.5G.......B.\|.:.....Co....wN......MT..Pb.X..F...}{...M.X....f......?..k..$9.q......_...>.e.L>.nk8~'. G..>p...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16032), with no line terminators
Category:	downloaded
Size (bytes):	16032
Entropy (8bit):	5.712372633407957
Encrypted:	false
SSDEEP:	384:6YgaVMISVYPP7v+UBxATBBJbw7E2aCdaEC:6sVMBUzv+U/sBbw7EH
MD5:	E80EE1A69FD6AEEFE618FA9175A9FCE6
SHA1:	0A990A55515198713BA89D70D92B07534561133F
SHA-256:	CA79D058A7E466F25AE3B71AC8B913FA8E8B24453ABF27EDB683C1DF00E20965
SHA-512:	244585F4CB84DC12AB69BC4BBBF49B34F4B194D933A0872C0528C41998D3A9FCC1C0856771FA2D253489CF6C17C6654BEC2EF6B870824DEDDA76944E2AC8650F
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/3046.6e077f08.chunk.js
Preview:	"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3046],{74853:function(e,t,n){n.d(t,{s:function(){return m}});var i,a=n(85554),r=n(47313),o=["title","titleId"];function l(){return l=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e},l.apply(this,arguments)}function s(e,t){if(null==e)return{};var n,i,a=function(e,t){if(null==e)return{};var n,i,a={},r=Object.keys(e);for(i=0;i<r.length;i++)n=r[i],t.indexOf(n)>=0\|\|(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(i=0;i<r.length;i++)n=r[i],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}function c(e,t){var n=e.title,a=e.titleId,c=s(e,o);return r.createElement("svg",l({width:22,height:24,viewBox:"0 0 22 24",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":a},c

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14157), with no line terminators
Category:	downloaded
Size (bytes):	14157
Entropy (8bit):	5.269452263465761
Encrypted:	false
SSDEEP:	192:NzwRphPI9xarbRQ1GDggL+WQYpOQvdCNIh8abRKjKwaKwPKwlKEKwvKwJKwjKwJE:kc+rbdgZB83E5
MD5:	5F1F26E8F3B86902F37C4105320EE9D7
SHA1:	FFA83519CCFBEBB4CD141620A525C651BAF245CB
SHA-256:	40F00DAAD1A724BCCA52D8869196AF55F37814B8EE63CBFEB513B94CB8C3C893
SHA-512:	4A2465CDABE4ABFC76EF21C636218BE02EDB693216BE1189FA58DF82A68F60C6E0B3A5566B978AC24C18E47E1D08F37DDCB5E4EDA3DC7E3DAE7DE6F3C3A63482
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/css/8839.7758b54f.chunk.css
Preview:	.DownloadStarted_downloadStartedWrapper__edqlj{align-items:center;background-color:#f5f5f5;border-radius:15px;box-sizing:border-box;display:flex;flex-direction:column;height:408px;justify-content:space-between;margin-top:168px;padding:20px;pointer-events:auto;width:312px}.DownloadStarted_downloadStartedWrapper__edqlj .DownloadStarted_title__PIUK7{color:#023662}.DownloadStarted_positioningWrapper__4lWVE{bottom:0;display:flex;justify-content:center;left:0;pointer-events:none;position:absolute;right:0;top:0;width:100%}.DownloadStarted_fullWidthButtonWrapper__VY5-D{width:100%}.DownloadStarted_downloadAnimation__KG2\+Z{height:auto;width:216px}.DownloadStarted_buttonWrapper__jeazM{display:flex;flex-direction:column;gap:8px;width:100%}.DownloadStarted_button__KFvjd{height:52px}@media (min-width:768px){.DownloadStarted_downloadStartedWrapper__edqlj{margin-top:240px;min-height:533px;padding:32px;width:382px}.DownloadStarted_button__KFvjd{flex:1 1;height:64px}.DownloadStarted_buttonWrapper__jeaz

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18288)
Category:	dropped
Size (bytes):	18908
Entropy (8bit):	5.6273780069979
Encrypted:	false
SSDEEP:	384:C8PzU6xGUPuExoR095pUb75JxvQV3ZqcnaeKFxydF2oHyT7:9jxGU2EmGc/QR0eaeK+byf
MD5:	3CC454427F1F22054AA588E2F9119297
SHA1:	DB688196733AB690BB095BDED56B6E105352EF80
SHA-256:	144A4E95FFB8365FF25606840682912262D3C337513697992717B6E553DDCFF3
SHA-512:	33F2761AD4765EA70300C104F7912EEA14140C44717A69973E4B73DE15BDA29C8E45197BD8C6FEDC281447DED49CA2265C254738795D5B5F1171CF9CCC0E5B1A
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(D,K){if((D=(K=null,h).trustedTypes,!D)\|\|!D.createPolicy)return K;try{K=D.createPolicy("bg",{createHTML:c,createScript:c,createScriptURL:c})}catch(t){h.console&&h.console.error(t.message)}return K},c=function(D){return D},h=this\|\|self;(0,eval)(function(D,K){return(K=H())&&D.eval(K.createScript("1"))===1?function(t){return K.createScript(t)}:function(t){return""+t}}(h)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var DT=function(D,K){return O[D](O.prototype,{splice:K,stack:K,prototype:K,console:K,propertyIsEnumerable:K,parent:K,floor:K,call:K,document:K,pop:K,length:K,replace:K})},p=function(D,K,h,c,H,X){if(h.X==h)for(X=r(h,K),K==182\|\|K==405\|\|K==138?(K=function(f,I,g,t,l){if(g=(l=X.length,l\|0)-4>>3,X.FM!=g){I=[0,0,H[1],(X.FM=g,t=(g<<3)-4,H[2])];try{X.MY=Kw(sL((t\|0)+4,X),sL(t,X),I)}catc

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2938), with no line terminators
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	5.191726055149565
Encrypted:	false
SSDEEP:	48:0EPHjpv3EywovFHqrYMxcwM21yzACjC75xRGSTBUCwu3zJzKrVazr0:zPHjrMJX0jC75xRGSTBUlYpKVO0
MD5:	6BC66FAF4EF04BAA93A407A9EAE17CDE
SHA1:	92A8872633D6B49E0ABD7C99BDA0D299B39022C4
SHA-256:	619525C2F61FE49D5B4B324DB94E5392019087CF61038AF3110642E475D6EA88
SHA-512:	6A08247A6EEAA65EBF52251D9F093D2E97031E8DFF1942E8A0E5D8D85109A2F6A83A9A9D5535D5436886374D024617AB586C0DCE8C56F4B647B7733DD61FDD2D
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/?timestamp=1731385175910
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta property="og:title" content="Secure Swiss File Transfer & Decentralized Storage \| WeSendit"/><meta property="og:description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta name="theme-color" content="#000000"/><meta property="og:image" content="/share.jpg"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_EN"/><meta http-equiv="X-UA-Compatible" content="IE=9"/><script>!func

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/logo192.png
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	129955
Entropy (8bit):	5.333149350641556
Encrypted:	false
SSDEEP:	1536:nIfFt6OoqFm6LjSigxiWgfxamS4rAbvlUHF:a6Ooqs6UmSHG
MD5:	2269C1FC668D53AC61150989AA5650BC
SHA1:	1FA5DDEEEEECCC4EC5CE1A5362077821C466F273
SHA-256:	45B6E4CE6E47AC1F9820636770E5D84D4763E878F952AB98C72B122302A7D48D
SHA-512:	E4A7C32D69F3372DEDD6F15C54723D3DF5D100219BC38AFDE1CBEB40004EBDCB6A3DF77B1CE27DBA33990AD09777D0B73B4A9D6ACCFC37C24D19FC1D96E99CD0
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.css
Preview:	.Typography_h1-bold-desktop__4\+GA8{font-size:54px;font-weight:700;letter-spacing:-.04em;line-height:80px}.Typography_h2-bold-desktop__1IfwP{font-size:32px;font-weight:700;line-height:40px}.Typography_h2-big-bold-desktop__uuQbQ{font-size:40px;font-weight:700;letter-spacing:-.04em;line-height:56px}.Typography_h2-light-desktop__9mja5{font-size:32px;font-weight:300;letter-spacing:-.04em;line-height:40px}.Typography_h3-bold-desktop__qPPB-{font-size:24px;font-weight:700;letter-spacing:-.02em;line-height:36px}.Typography_h3-regular-desktop__nCfwW{font-size:24px;font-weight:400;letter-spacing:-.02em;line-height:32px}.Typography_subtitle-bold-desktop__TQREV{font-size:18px;font-weight:700;letter-spacing:-.04em;line-height:28px}.Typography_subtitle-regular-desktop__ZOiy\+{font-size:18px;font-weight:400;letter-spacing:-.04em;line-height:28px}.Typography_base-text-bold-desktop__8I1B2{font-size:16px;font-weight:700;letter-spacing:-.02em;line-height:24px}.Typography_base-text-semibold-desktop__ZjMK9

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	dropped
Size (bytes):	287936
Entropy (8bit):	5.561969370612156
Encrypted:	false
SSDEEP:	3072:fvCGkxQXsiq8nV8nfbfU0r3cRNZ5DcVp1OTrp40NoJsL2UYAw9wLFq5kQo/M1oae:nCAsiqoV8nfkc1OTrp40eaZLFq5kQo/F
MD5:	C8300B2934DD143C69A3BB5DFC6BBA33
SHA1:	00DA5690C5DBE69AB643D3332360563A619D65F1
SHA-256:	899E61D0EB54567F34EB24CD15CB322B6DBD86113338376EE40AA576D69BC9B4
SHA-512:	1593033D0AE5506C30CB2416400F83F879493C27394B4265440354CCC2272849F88E3B08B84C0296743053029750FDDC0A26D78E862BB5BE40EB8748291F305E
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-957027334","tag_id":15},{"function":"__ogt_cps","priority":5,"vtp_cpsAds":true,"vtp_cpsPlaystore":true,"vtp_cpsYoutube":true,"vtp_cpsSearch":true,"vtp_cpsMode":"SOME","vtp_cpsShopping":true,"vtp_cpsMaps":true,"tag_id":8},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_au

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9363), with no line terminators
Category:	dropped
Size (bytes):	9363
Entropy (8bit):	5.563783843565914
Encrypted:	false
SSDEEP:	96:fvYyMrCW5CqTdNx6vWEfJ4korYeVsDtGQZhM7IIwaSZrpiGTMxBdSMQQGQWQ0pXY:4yEC8/2rBlgYeVsDtaglUNSMQQQQIa4q
MD5:	D3CE1FF04D9C9AF9D15079F151301353
SHA1:	F0A8B026A6CE22D9C312F3FB5BE65CD1D70E5780
SHA-256:	31AE48B7F6825F3EB64AD0746DD2368C12479BA21CC53A769340906760E328ED
SHA-512:	1A34114E606CBEB2831A9D58E47F4FF834174E2B1C3A06B7438930FDC2B5E67CFF26686A1998DA84E25C7F9603E1707A0D5A6784307548B74A4160CEE488F8C3
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[8839],{83343:function(e,n,t){"use strict";t.d(n,{l:function(){return f}});var a=t(64749),o=t(53046),i=t(58335),r="PageHeaderWithNavigation_header__hVadz",l="PageHeaderWithNavigation_desktopTitleBar__2bqcy",s="PageHeaderWithNavigation_desktopTitleGroup__aBrFQ",d="PageHeaderWithNavigation_title__NHVsH",c="PageHeaderWithNavigation_activeLabelIcon__aIaQ6",u="PageHeaderWithNavigation_navSection__bDuEz",p=t(46417),f=function(e){var n=e.navigationOnly,t=void 0!==n&&n,f=e.title,v=e.Icon;return(0,p.jsx)(p.Fragment,{children:t?(0,p.jsx)("div",{className:u,children:(0,p.jsx)(o.w,{})}):(0,p.jsx)(i.pU,{greaterThanOrEqual:"xl",children:(0,p.jsx)("div",{className:r,children:(0,p.jsxs)("div",{className:l,children:[(0,p.jsxs)("div",{className:s,children:[v&&(0,p.jsx)(v,{className:c}),(0,p.jsx)(a.Z,{variant:"h2-bold-desktop",className:d,children:f})]}),(0,p.jsx)(o.w,{})]})})})})}},46997:function(e,n,t){"use strict";t.r(n),t.d

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	69199
Entropy (8bit):	5.3217142445191925
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPI:RIT7Vs9ZVKBYj8wKcHPI
MD5:	4C8B3D67032F56AA63507DE0F8A16B30
SHA1:	D4BE8B5632482DD1014637241F2855EE23F17BC5
SHA-256:	733B1E2F09E49B28949D732A36C88C0C40F334AFD9B1BEA8F9CAED176258B997
SHA-512:	70BB183B3AED77A45E84EB20217D4BED922B95B463DAAB2C7001C058578527B01D0309337F3C27C0353A4F5E937FD3515A7917A8E9EEAFBF56B8B779B0C15348
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	6545242
Entropy (8bit):	4.542514424421968
Encrypted:	false
SSDEEP:	6144:hs5RmGluC123egnW2buirmxeoboIvg0/4BQp2b7iDfyrwzuQzTUbvkDeLLboIfQt:hs8mN
MD5:	18FEB6A4920723B24E4BE5E8784C7115
SHA1:	280D8466C5BA14F2FFA9103B4B70791AB323A331
SHA-256:	1BDDF788974F5BF10CE23E41155A696466F3A0F0DF85AE7CCD99DC74776EE3D3
SHA-512:	F7032776FFB1074AA081AA75231ED166DD9642B872D1281160F3C0BF5913C2AC6746D35D2AD8F9B2AEAC0F37BA18C5F33FA4867FF3220E9B2BD7FC837A8F6D8E
Malicious:	false
Reputation:	low
Preview:	.font-28{font-size:28px!important}.font-24{font-size:24px!important}.font-32{font-size:32px!important}.font-22{font-size:22px!important}.font-20{font-size:20px!important}.font-18{font-size:18px!important}.font-16{font-size:16px!important}.font-14{font-size:14px!important}.font-13{font-size:13px!important}.font-12{font-size:12px!important}.font-11{font-size:11px!important}.font-10{font-size:10px!important}.font-9{font-size:9px!important}.font-8{font-size:8px!important}.line-height-18{line-height:18px!important}.line-height-10px{line-height:10px!important}.line-height-initial{line-height:initial!important}.line-height-full{line-height:100%!important}.font-w-900{font-weight:900!important}.font-w-800{font-weight:800!important}.font-w-700{font-weight:700!important}.font-w-500{font-weight:500!important}.text-left{text-align:left!important}.text-right{text-align:right!important}.text-center{text-align:center!important}.letter-spacing-normal{letter-spacing:normal!important}@media (max-width: 7

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21308), with no line terminators
Category:	downloaded
Size (bytes):	21308
Entropy (8bit):	5.125166609416375
Encrypted:	false
SSDEEP:	192:Et10FTvwEF078svRIVJDgVZfZyDy313RbbPuxtu4Hx+GeIJzun3zIZqwbBmn64So:Q1ioIVbUbKtto2lBZldnBR/aUAD
MD5:	CFCB140A815E2191977AED0DBC6F39BA
SHA1:	AFE60A90EB29E2F10532B4D003B90FB7FD9B845A
SHA-256:	AA4F46CC067E2EAE5AB15561714E9942C47BA80681F988E6494ED3F678CE5847
SHA-512:	50D53A02687BF06F2E6E21830FFF1225EE9052915318ACC4F76EC9C3DB7A11EA7CA0632FED55D70E0B19BE3E03B2C6AA6419E282988E68C2B45D0160CD142474
Malicious:	false
Reputation:	low
URL:	https://media.payrexx.com/modal/v1/modal.min.js
Preview:	(function(e){var c=false;var d="";var a="Do you really want to cancel the payment?";var b=function(g){if(typeof g.data==="string"){var f={};try{f=JSON.parse(g.data)}catch(g){}if(f.payrexx){jQuery.each(f.payrexx,function(h,i){switch(h){case"transaction":if(typeof i==="object"){e.fn.payrexxModal.transaction=i}break;case"closeModal":c=true;if(i){d=i}e.fn.payrexxModal.modalInstance.modalPx("hide");break;case"closeConfirmation":if(i){a=i}break}})}}};window.addEventListener("message",b,false);e.fn.payrexxModal=function(f){var g=e.extend({},e.fn.payrexxModal.defaults,f);e("head").append(e('<style type="text/css">html.payrexx-modal-open, html.payrexx-modal-open > body {\n overflow: hidden;\n}\n\n@media (max-width: 1024px) {\n html.payrexx-modal-open > body > *:not(#payrexx-modal):not(.px-modal-backdrop) {\n display: none;\n }\n}\n\n#payrexx-modal #payrexx-modal-iframe {\n display: block;\n visibility: hidden;\n width: 100%;\n border: 0;\n}\n\n#payrexx-modal #payrexx

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11826)
Category:	downloaded
Size (bytes):	425388
Entropy (8bit):	5.63765446622921
Encrypted:	false
SSDEEP:	6144:u4cilFjYCAsiqoOc8numc1OTrp40KOZLFq5kQo/cJicDYo/MXIco:3cQFjY7M7BnBcoTrOELHcDrH
MD5:	1EF77FC39F3039DA3BFEC81FC2CD2DD9
SHA1:	B69AFFD50848BB4F24985738BAD7293C6F8C32D8
SHA-256:	C4DE7ED6768112CAA3D3D97267D1F31BA3EDFBAB0D5FFE4D1CD38DC5E3F09D7E
SHA-512:	1423A92D5B3BED304AFB8D547A32F9C6DFD26BAAC4FFA70864F2C06F40897C60559C7A0529F41330B4EB553A0AAB2BF91ECC0F36F0A8E3A1A40345CCF2EAE7BA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-EHZSQKTF1P&l=dataLayer&cx=c&gtm=45He4bb0v71480359za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":22,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ga_first","priority":21,"vtp_instanceDestinationId":"G-EHZSQKTF1P","tag_id":27},{"function":"__set_product_settings","priority":20,"vtp_instanceDestinationId":"G-EHZSQKTF1P","vtp_foreignTldMacroResult":["macro",1],"vtp_isCh

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7032), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	51949
Entropy (8bit):	5.34712980979754
Encrypted:	false
SSDEEP:	768:9y6Zn7bQa78Amqtzn9BzVIAa7mviZVL9TVm5o6SJNQ6z:zZn7Txtj/zVIAbqfBVm5o6Snz
MD5:	F93F883037EE40B66D8C875912EA0528
SHA1:	B08942862D1B1A1F300415360EC4DC294DF51803
SHA-256:	641450EBC3705A56F771D5EEC9C7188707B4E48945C6879D3CF3607FD5671D9D
SHA-512:	35808E51C568EE6DBC50433D9215BA50E5317A450E437ECB46A659F7B3DD8F4DD2CBFA23BD7AE04AD4400A4D77DA26672B0BE725B5951869036902E773F2CF36
Malicious:	false
Reputation:	low
Preview:	parcelRequire=function(e,r,t,n){var i,o="function"==typeof parcelRequire&&parcelRequire,u="function"==typeof require&&require;function f(t,n){if(!r[t]){if(!e[t]){var i="function"==typeof parcelRequire&&parcelRequire;if(!n&&i)return i(t,!0);if(o)return o(t,!0);if(u&&"string"==typeof t)return u(t);var c=new Error("Cannot find module '"+t+"'");throw c.code="MODULE_NOT_FOUND",c}p.resolve=function(r){return e[t][1][r]\|\|r},p.cache={};var l=r[t]=new f.Module(t);e[t][0].call(l.exports,p,l,l.exports,this)}return r[t].exports;function p(e){return f(p.resolve(e))}}f.isParcelRequire=!0,f.Module=function(e){this.id=e,this.bundle=f,this.exports={}},f.modules=e,f.cache=r,f.parent=o,f.register=function(r,t){e[r]=[function(e,r){r.exports=t},{}]};for(var c=0;c<t.length;c++)try{f(t[c])}catch(e){i\|\|(i=e)}if(t.length){var l=f(t[t.length-1]);"object"==typeof exports&&"undefined"!=typeof module?module.exports=l:"function"==typeof define&&define.amd?define(function(){return l}):n&&(this[n]=l)}if(parcelRequire

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2917 x 2918, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	115807
Entropy (8bit):	7.21390869368252
Encrypted:	false
SSDEEP:	3072:+i7RZ09yP2BnXd026RWya0b7XDf41G8L9RW+:+WwcP21XqRWyHknLt
MD5:	2A1839BE22CAD55D4347633177859901
SHA1:	EA85BFE53545F9CAA63DE58D7951E03E289180FE
SHA-256:	88A3E9BFC9FB31DBABFCEBD04BEB2184CA8DCC833CE91C1694DC0FFFAC426323
SHA-512:	7731DE8CDAD9E0271FFDB29B0B8A8055097342488B715ED40A4BEEEAF75E4B7B67D8234B54CDF9261F1754BB43CAFE471122EAE7B345B3F512D2F0B6AC13E075
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e...f............pHYs...#...#.x.?v.. .IDATx....Q$Y..}.......v.A.D....PhP......H..)A.?5H.......5.>..E.....k...]=e..O....?..........^J..F..;.s......}D,...Yvms.........#&..........."....?.S....<F.....?..o.......?.....`.D......k...z.....vd.....e..W-^..D.......%......x..Q.../......../C.]..u.......(.........aD..?..k.....~O/.s...q..k..W......&A..........?.........o..k.........e.....;.r9......W/\.?.l.f.9.^.\.^..}..r.C.....vC.......].e5.~.h.2..Z.....h.....k.........$.......$...Y.^.~.v..{{&.......x{....................../....G&....7.....m.....O.l........j`.._.N\|....q...j......X....`.D.....0.+.....{...o\...g.6........'........].L.]..........#.......I....M.s?"...#{....K...}.6K.......=Q6....lQ.e5.>^.t..z...x.o].^tm.0L......Q6....l@.x..\....Y..e.5..l..............R..+.....M.l/.C.._wm..I....x.Q6.....@.e.../...s.`..^...^............D.........'f...._.^.P..h.k.[#....`.D...........G>...!.5._.y...X......Q6.....T.......<.m....@[..............5...`.Vc.?..mn......

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:mn:mn
MD5:	722969577A96CA3953E84E3D949DEE81
SHA1:	3DAB5F6012E3E149B5A939B9CEBBA4A0B84DC8F5
SHA-256:	78342A0905A72CE44DA083DCB5D23B8EA0C16992BA2A82EECE97E033D76BA3D3
SHA-512:	54B2B4596CD1769E46A12A0CA6EDE70468985CF8771C2B11E75B3F52567A64418BC24C067D96D52037E0E135E7A7FF828AD0241D55B827506E1C67DE1CAEE8BC
Malicious:	false
Reputation:	low
URL:	https://api.web3modal.com/getWallets?page=1&entries=4
Preview:	Forbidden

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	4280073
Entropy (8bit):	5.494457143828683
Encrypted:	false
SSDEEP:	49152:UoC2IR2TxhEh6c4pz6RPwilJic58DS7wek/s/jYj5G1eBjzad0dginopr:SR2TY71fic58ykQYad0dE
MD5:	C4EFB6B0E90FB24A12C73F569D253019
SHA1:	E386376784E3A73FF6D9257DBF41596AEA4A02BE
SHA-256:	812F9C6CD2BFB50D2A9105D60985F2BDC0B3768AAF458A18B3D765FC6A85671E
SHA-512:	E44D0F0C57DD68A43950A2CD557A72EEFDF7B3336AACE039EEC8A8AA5F9D5B10123D87FDAEAB5A295F330B13DF09435352B5CA31D076CD323F8009294AC0BE93
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.fa247412.js.LICENSE.txt /.(function(){var __webpack_modules__={88142:function(e,t,n){"use strict";n.d(t,{r:function(){return l}});var r,i,a=n(47313),o=["title","titleId"];function s(){return s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},s.apply(this,arguments)}function c(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},a=Object.keys(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}function u(e,t){var n=e.title,u=e.titleId,l=c(e,o);return a.createElement("svg",s({width:32,height:32,viewBox:"0 0 32 32",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-lab

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4824), with no line terminators
Category:	downloaded
Size (bytes):	4824
Entropy (8bit):	5.8279142974200955
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU78jTfeMOG:1DY0hf1bT47OIqWb1+8jTfeMOG
MD5:	E4F9AE36468AA6C4D11A00C22AB49CE4
SHA1:	CF56B52C377974EAF90B04FDCD0E7936811999B9
SHA-256:	1EB37503FBD310B652AAE457B96EBD7AFCC299094AA99E56B09777C67ACF0ADA
SHA-512:	53BA8FF6FCCAD4E9C608E87FF8738C2A39C4B0E4F4D13CAFAB8B7BEBA993C10A9EA469B8C07CCA00F62C935CE03934A11356A714D6C553FA873FD5BE938A0050
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/957027334/?random=1731385168509&cv=11&fst=1731385168509&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2917 x 2918, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	115807
Entropy (8bit):	7.21390869368252
Encrypted:	false
SSDEEP:	3072:+i7RZ09yP2BnXd026RWya0b7XDf41G8L9RW+:+WwcP21XqRWyHknLt
MD5:	2A1839BE22CAD55D4347633177859901
SHA1:	EA85BFE53545F9CAA63DE58D7951E03E289180FE
SHA-256:	88A3E9BFC9FB31DBABFCEBD04BEB2184CA8DCC833CE91C1694DC0FFFAC426323
SHA-512:	7731DE8CDAD9E0271FFDB29B0B8A8055097342488B715ED40A4BEEEAF75E4B7B67D8234B54CDF9261F1754BB43CAFE471122EAE7B345B3F512D2F0B6AC13E075
Malicious:	false
Reputation:	low
URL:	https://staticfiles.gleap.io/gfeedback_widget_icons/0FgVRMxnnH17m45onKF22tEmzyZxAidF7DaRfxmmanjA5b2LX0u5xcvRaNezX0oqTXi0KRcGNxP.png
Preview:	.PNG........IHDR...e...f............pHYs...#...#.x.?v.. .IDATx....Q$Y..}.......v.A.D....PhP......H..)A.?5H.......5.>..E.....k...]=e..O....?..........^J..F..;.s......}D,...Yvms.........#&..........."....?.S....<F.....?..o.......?.....`.D......k...z.....vd.....e..W-^..D.......%......x..Q.../......../C.]..u.......(.........aD..?..k.....~O/.s...q..k..W......&A..........?.........o..k.........e.....;.r9......W/\.?.l.f.9.^.\.^..}..r.C.....vC.......].e5.~.h.2..Z.....h.....k.........$.......$...Y.^.~.v..{{&.......x{....................../....G&....7.....m.....O.l........j`.._.N\|....q...j......X....`.D.....0.+.....{...o\...g.6........'........].L.]..........#.......I....M.s?"...#{....K...}.6K.......=Q6....lQ.e5.>^.t..z...x.o].^tm.0L......Q6....l@.x..\....Y..e.5..l..............R..+.....M.l/.C.._wm..I....x.Q6.....@.e.../...s.`..^...^............D.........'f...._.^.P..h.k.[#....`.D...........G>...!.5._.y...X......Q6.....T.......<.m....@[..............5...`.Vc.?..mn......

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	213993
Entropy (8bit):	5.601337896041867
Encrypted:	false
SSDEEP:	3072:rru4waIFmhXNhzjbgygePFpH7PSSGfPhLtH/7JXN:ri4whF273LdGBLtFN
MD5:	E5FD2C86C1B8F0A06C77AA265987EB94
SHA1:	2358A8FA4C4AC594034C7D7A7C339495EE34112C
SHA-256:	4F73D4371A82A1A29A5CD0B101A27FA67A4329C7AAF69DE54DA4E707DD567ADC
SHA-512:	32BB7B30EF4255E537CDBBE30FF3515A079D377C2F2D02EC92167A88F8D667288BA1026C97173C23D50C609B6C6B8E5CEFF7025DDF615229CE26E00B5C641C37
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/4366.ea2f9748.chunk.js
Preview:	/! For license information please see 4366.ea2f9748.chunk.js.LICENSE.txt /."use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[4366],{84366:function(t,e,n){n.r(e),n.d(e,{W3mAccountButton:function(){return fc},W3mConnectButton:function(){return Bc},W3mCoreButton:function(){return ts},W3mModal:function(){return ws},W3mNetworkSwitch:function(){return ks},W3mQrCode:function(){return wl}});var r=n(97326),i=n(4942),a=n(74165),o=n(15861),l=n(93433),c=n(15671),s=n(43144),u=n(60136),d=n(29388);function h(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}var m,v,f=n(29439),p=n(37762),w=n(98737),g=window,b=g.ShadowRoot&&(void 0===g.ShadyCSS\|\|g.ShadyCSS.nativeShadow)&&"adoptedStyleSheets"in Document.prototype&&"replace"in CSSStyleSheet.prototype,y=Symbol(),x=new WeakMap,k=function(){function t(e,n,r){if((0,c.Z)(this,t),this._$cssResult$=!0,r!==y)throw Error("CSSResult is not constructable. Use `unsafeCSS

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12108)
Category:	downloaded
Size (bytes):	323406
Entropy (8bit):	5.569176821111865
Encrypted:	false
SSDEEP:	3072:AUCGkxQXsiq8n98JobfU003cRNZ5DcVp1OTrp40NsJsL2UYAwMwCqq5kQo/IWHtK:rCAsiqo98JoBc1OTrp40Ka+Cqq5kQo/Y
MD5:	400AB54E08DDCD63797884FBD29F5F2B
SHA1:	BACFB4950547EE2759B54AE8D14E00DACF79E3AB
SHA-256:	A553890C3E6C2CF72CCEAA939CD401D1A89CE960B0972B3801AE98FCEED07A7A
SHA-512:	8B597FDAF8C99DCC752AEAE1766F5B7FFE3019639D01FDEF826B6BE633A9265EF3FA94BC9916BF840C1A4F095DEC2A49BA7D5898692E88F4E4B547FCDC067F97
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-W9V2MV
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"43",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"957027334"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"427391422902188"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"G-EHZSQKTF1P"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__cvt_1480359_155","vtp_useCustomEventCounter":false},{"function":"__jsm","vtp_javas

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	5.135670087266027
Encrypted:	false
SSDEEP:	12:880mziIo96IpPk1N40mzg5ck99a5o8FYBL0mzbpE:880OiN96iM40Og5H99a5/w0OFE
MD5:	CB187E630D490CD539123D5FF5B531AA
SHA1:	98B8A84C7281DA851CF5AFCC578164D7A712560D
SHA-256:	C91D4A267CF9B7B601FF9925E0E80D661EAF9FD2F08CBF8C134C3E0FB0BAD327
SHA-512:	3ADC369BF1E83EC685CE0FF37950501349311757534F114C7C295AECCC57639BC2D96D26EF6043B199F8FB7F96A77CD81B2B57B519ACE517A31A86EFD1062135
Malicious:	false
Reputation:	low
URL:	https://api.gleap.io/config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO/team
Preview:	[{"firstName":"Jens","profileImageUrl":"https://www.gravatar.com/avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/362e9ad86d3154293ff817716d985247","id":"641dc37d8745de52617f7a83"},{"firstName":"Alexei","profileImageUrl":"https://www.gravatar.com/avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127","id":"641dcffdc4f18365045f0528"},{"firstName":"AntonHryshukevich","profileImageUrl":"https://www.gravatar.com/avatar/eae09aa5450665dde0cba545e6e962f5?d=retro","id":"665d644750a580c878538ad0"}]

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1732), with no line terminators
Category:	downloaded
Size (bytes):	1732
Entropy (8bit):	5.208351716391666
Encrypted:	false
SSDEEP:	48:XOLGy09RyVbdg8M8GFVxPHGisTlVpdDkv/:XOGyN0tlv9miMl3dAX
MD5:	00BBE629D93A6E14C220D25495D41C85
SHA1:	084EFDB030D2BDD009A085062B120661586B5C00
SHA-256:	662EB604D7A8143BA32B293EC8B5170AF181DBCCD6238EDEE4454744D0870027
SHA-512:	0B61C77C73485681EB65AA4707180F8B747903FD55325E9CBDA7B0078840F0168001CE3FB950C8570BD05B6B7F072B6B93F4806FCA13B7135C3CF173F2317B2E
Malicious:	false
Reputation:	low
URL:	https://widget.crowdswap.org/loadAssets.js
Preview:	!async function(){var e=document.getElementById("crowdswapWidget"),t=(e&&(e.style.display="none",(t=document.createElement("style")).textContent='.app-splash-screen{background:linear-gradient(180deg,rgba(6,130,97,1) 0%,rgba(55,200,162,1) 50%,rgba(6,130,97,1) 100%);position:absolute;width:100%;max-width:506px;height:100%;max-height:506px;display:flex;justify-content:center;align-items:center;z-index:150;transition:left 0.5s;left:50%;transform:translateX(-50%);border-radius:6px;}.splash-inner{display:flex;flex-direction:column;justify-content:center;align-items:center;}.splash-logo{background:url("https://widget.crowdswap.org/assets/media/logo/splash-logo.svg");background-repeat:no-repeat;max-width:100%;background-position:center;background-size:contain;width:400px;height:100px;}.splash-loader{background:url("https://widget.crowdswap.org/assets/media/icons/three-dots.svg");background-repeat:no-repeat;max-width:100%;background-position:center;background-size:contain;width:80px;height:80px

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38858)
Category:	dropped
Size (bytes):	38935
Entropy (8bit):	5.237265076598061
Encrypted:	false
SSDEEP:	768:GAAOCT5RRAlrN24iLzN24bPeN24l1KZikiX4zh59Yl:GTtfRAlrN24iLzN24CN24rKZfy
MD5:	DF0589890BFFFF6422577E53D586F690
SHA1:	20A2CF04794F7DCE12556A08E6C0DCE4767BFA67
SHA-256:	B31D579B1F399DD6B3C1D74AE83E9E5B95A77CC6FFAC9A32BE6F2F4F5DB9F534
SHA-512:	4134774F892B0B718EC7FAEE05D6EE9EDF6476E790823601F517B8C1CAC7E820347D31D7B2DC57C8BCF8FC6FF57665409DB13324813FA18618B2CFAB87C58C5C
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 3020.18ed824f.chunk.js.LICENSE.txt /.(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3020],{32760:function(t,e,n){"use strict";function r(){return(null===n.g\|\|void 0===n.g?void 0:n.g.crypto)\|\|(null===n.g\|\|void 0===n.g?void 0:n.g.msCrypto)\|\|{}}function o(){var t=r();return t.subtle\|\|t.webkitSubtle}Object.defineProperty(e,"__esModule",{value:!0}),e.isBrowserCryptoAvailable=e.getSubtleCrypto=e.getBrowerCrypto=void 0,e.getBrowerCrypto=r,e.getSubtleCrypto=o,e.isBrowserCryptoAvailable=function(){return!!r()&&!!o()}},34300:function(t,e,n){"use strict";var r=n(7490);function o(){return"undefined"===typeof document&&"undefined"!==typeof navigator&&"ReactNative"===navigator.product}function i(){return"undefined"!==typeof r&&"undefined"!==typeof r.versions&&"undefined"!==typeof r.versions.node}Object.defineProperty(e,"__esModule",{value:!0}),e.isBrowser=e.isNode=e.isReactNative=void 0,e.isReactNative=o,e.isNode=i,e.isBrowser=f

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.601086931258533
Encrypted:	false
SSDEEP:	6:6v/lhPOihmjZOl4N2c2Ff6NhZh6Dnnv5r2arO8OfCinneW2//bp:6v/72VZO6kc2FCNynpV+fCiniX1
MD5:	B11F09F500DEE717E7D270A7FD35FC29
SHA1:	86A3DDDFD676F0606A2BC42A3CDC334721E50F7A
SHA-256:	85EBE6B1DC0AE403C8672B1EF516383386BF7016EDBBB05CA6F937CA612E0244
SHA-512:	D31ADC0A726990A3307BA94975607A7511197CC72A9A73B17AB5B559EBB5C8A82A542F3987E4299BD1A68F6140FEC94BD10549C700964879E9B97ABB29146569
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P......se.....pHYs..........+......IDATx...1.BA..QW.>.G..B.F..)....y..?.X...^.J.........K~....2..`:..v.w.......t...L.....=<}...D.m.`:....K{.#...q.6..`:..v. ....3..`....c....a....3.........Lg0..t...Lg0..t....f...3..`:....3..`./).(..w.Z....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	69199
Entropy (8bit):	5.3217142445191925
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicPI:RIT7Vs9ZVKBYj8wKcHPI
MD5:	4C8B3D67032F56AA63507DE0F8A16B30
SHA1:	D4BE8B5632482DD1014637241F2855EE23F17BC5
SHA-256:	733B1E2F09E49B28949D732A36C88C0C40F334AFD9B1BEA8F9CAED176258B997
SHA-512:	70BB183B3AED77A45E84EB20217D4BED922B95B463DAAB2C7001C058578527B01D0309337F3C27C0353A4F5E937FD3515A7917A8E9EEAFBF56B8B779B0C15348
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1782), with no line terminators
Category:	downloaded
Size (bytes):	1782
Entropy (8bit):	5.8973807465632175
Encrypted:	false
SSDEEP:	48:VKEAhfKfKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:fAtHMI5czgk/msuG
MD5:	D7A6D8480F2162E1A16E093655637415
SHA1:	EEB20818021A0EEA4E3FD924B2DE33299D4D30E9
SHA-256:	6A82C9CD03E469060205187F85D1F541243153040860FEAF30B57B832B46A2DB
SHA-512:	78865BD82E824070C43533508439A5FF5823BFD07D267A4BC23900C848FF44604DEA1EE5ADEBB28A6599EFD9CBE6DE28B2E0FD835911EFF3232D8D334071A720
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api.js?render=6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 44 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	130864
Entropy (8bit):	6.654724570479026
Encrypted:	false
SSDEEP:	3072:aHMEHMowB4IuqrCS8SqGBaNGdNj602rVZdPnmnDCRsTJlLhV:KMEH4B9uquS8SkGdNjJsV3PtKdf
MD5:	5112859EE40A5DFA527B3B4068CCD74D
SHA1:	1F22568081C57EB8980CCBEC86DECD452F35D6B0
SHA-256:	A1993FBAF0528AFE76AA775D6B496D9DF9F03330ECE0B8BCB756D6885685A2A8
SHA-512:	B6ADDAB7479B5F3642CBABDA40DE45EBEB200C442F50920137680E4F84284812F2244BDC36446C1E912F9061C331FA35DBA5B15C5CBF72967BBF7F3DF20AEF04
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Bold.45847e90261782dc01a6.ttf
Preview:	........... GDEF...U...p....GPOS..:>..vT..7.GSUB.c.e...\|....OS/2.l.........`STAT^.A........Zcmap.8..........cvt =I,....t....fpgm...Z..-.....gasp...#...,....glyfkh.......Q2head..4........6hhea.).....\...$hmtx......=.....loca..l;........maxp.......<... namecHo.........post&.....N...'jprep..{....4.........................t....._......./...............................................s.......B. .n_.<..................w&Q.....................................,..wdth....wght....ital.....".........................................d...............3.......3.......2..................@. ....(....GOOG.........................H..... ...............R...............................................q...........m.....k.....z.....:.............x.H...z...........q.......................m.z.......k.............z.............:.q...........}...............x.~.....H.y...............z.....8.........t...................>.............#.....S.T...t.t...v.v.........................5......................... .".%...7

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	108
Entropy (8bit):	4.867816035402674
Encrypted:	false
SSDEEP:	3:XzOYNRf6jixHJD3OYNRf6jiwdKVRNmdUngMPYf2:Xzjj6jixHN3jj6jifrm+nvI2
MD5:	CE59D1DDEFA88C64E2391B1669F984A4
SHA1:	FA680BA7A9F0A363EC80042D4947F34939290B71
SHA-256:	72B599E111F14A80061C1849E93D0C7812201A046B88A227BD243DE75CE61BD3
SHA-512:	5D05552744F172FDB120360193A9B2152A00F162652B3556EAE06CEAC95A409B45A1A7E82287FC062BDA4F8D3312F072306ED9EBD0EB9A6CE9F8865F36A91B42
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[5883],{35883:function(){}}]);

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9884
Entropy (8bit):	5.477880511690397
Encrypted:	false
SSDEEP:	192:9AN/C734nkD8AO4x73/Ak8lArRY73i5klGAEif73RKkG5:yERPfWhRm
MD5:	75579F5FB6FF8DA14E2EE079425910E4
SHA1:	A0D02E07DCCE8AABDD5918924A55ABF0BDB570A2
SHA-256:	DAE65E43CE0FFCB9722F0AC5DC5A774548F0134883A1E046B981AED48B69DFA4
SHA-512:	AC8C8E5C22E7444232EA7E157BCEF96918419358EB1AB58282DF98D73F02095EEB7F25743906882B10C130506D26BC1AA0D9A65C5E9AFC2141CA31F4DBA19150
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swa

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2938), with no line terminators
Category:	dropped
Size (bytes):	2938
Entropy (8bit):	5.191726055149565
Encrypted:	false
SSDEEP:	48:0EPHjpv3EywovFHqrYMxcwM21yzACjC75xRGSTBUCwu3zJzKrVazr0:zPHjrMJX0jC75xRGSTBUlYpKVO0
MD5:	6BC66FAF4EF04BAA93A407A9EAE17CDE
SHA1:	92A8872633D6B49E0ABD7C99BDA0D299B39022C4
SHA-256:	619525C2F61FE49D5B4B324DB94E5392019087CF61038AF3110642E475D6EA88
SHA-512:	6A08247A6EEAA65EBF52251D9F093D2E97031E8DFF1942E8A0E5D8D85109A2F6A83A9A9D5535D5436886374D024617AB586C0DCE8C56F4B647B7733DD61FDD2D
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta property="og:title" content="Secure Swiss File Transfer & Decentralized Storage \| WeSendit"/><meta property="og:description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta name="theme-color" content="#000000"/><meta property="og:image" content="/share.jpg"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_EN"/><meta http-equiv="X-UA-Compatible" content="IE=9"/><script>!func

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	570
Entropy (8bit):	5.135670087266027
Encrypted:	false
SSDEEP:	12:880mziIo96IpPk1N40mzg5ck99a5o8FYBL0mzbpE:880OiN96iM40Og5H99a5/w0OFE
MD5:	CB187E630D490CD539123D5FF5B531AA
SHA1:	98B8A84C7281DA851CF5AFCC578164D7A712560D
SHA-256:	C91D4A267CF9B7B601FF9925E0E80D661EAF9FD2F08CBF8C134C3E0FB0BAD327
SHA-512:	3ADC369BF1E83EC685CE0FF37950501349311757534F114C7C295AECCC57639BC2D96D26EF6043B199F8FB7F96A77CD81B2B57B519ACE517A31A86EFD1062135
Malicious:	false
Reputation:	low
Preview:	[{"firstName":"Jens","profileImageUrl":"https://www.gravatar.com/avatar/362e9ad86d3154293ff817716d985247?d=https://api.gleap.io/identicon/362e9ad86d3154293ff817716d985247","id":"641dc37d8745de52617f7a83"},{"firstName":"Alexei","profileImageUrl":"https://www.gravatar.com/avatar/ee529e1250688ab30538a26e7cf85127?d=https://api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127","id":"641dcffdc4f18365045f0528"},{"firstName":"AntonHryshukevich","profileImageUrl":"https://www.gravatar.com/avatar/eae09aa5450665dde0cba545e6e962f5?d=retro","id":"665d644750a580c878538ad0"}]

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11882)
Category:	dropped
Size (bytes):	13131
Entropy (8bit):	5.399072964831191
Encrypted:	false
SSDEEP:	192:qbnOw5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRgWERcxzPuiv3N6:qbnOvjURHjXo2BtcCuocxz/v3N6
MD5:	088981EA3715387925431207550A1E56
SHA1:	34D88D7A01048E7789F7B2F395B6BDFFEEF1324E
SHA-256:	F811F71E0C2A81E9DEFCA8E8B79D67067D6F4CCEF9C97AA4C3A64AC2857CF95C
SHA-512:	6177F598B9637D5A9201E46E353839FE48131499A22F1E59EEB88394B25FC4DB581DC76DF42502F557BB2B52C7595AC2246AEC9E1B7E1BBC05A270E1BC580340
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3708882,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","setting

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38858)
Category:	downloaded
Size (bytes):	38935
Entropy (8bit):	5.237265076598061
Encrypted:	false
SSDEEP:	768:GAAOCT5RRAlrN24iLzN24bPeN24l1KZikiX4zh59Yl:GTtfRAlrN24iLzN24CN24rKZfy
MD5:	DF0589890BFFFF6422577E53D586F690
SHA1:	20A2CF04794F7DCE12556A08E6C0DCE4767BFA67
SHA-256:	B31D579B1F399DD6B3C1D74AE83E9E5B95A77CC6FFAC9A32BE6F2F4F5DB9F534
SHA-512:	4134774F892B0B718EC7FAEE05D6EE9EDF6476E790823601F517B8C1CAC7E820347D31D7B2DC57C8BCF8FC6FF57665409DB13324813FA18618B2CFAB87C58C5C
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/3020.18ed824f.chunk.js
Preview:	/! For license information please see 3020.18ed824f.chunk.js.LICENSE.txt /.(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3020],{32760:function(t,e,n){"use strict";function r(){return(null===n.g\|\|void 0===n.g?void 0:n.g.crypto)\|\|(null===n.g\|\|void 0===n.g?void 0:n.g.msCrypto)\|\|{}}function o(){var t=r();return t.subtle\|\|t.webkitSubtle}Object.defineProperty(e,"__esModule",{value:!0}),e.isBrowserCryptoAvailable=e.getSubtleCrypto=e.getBrowerCrypto=void 0,e.getBrowerCrypto=r,e.getSubtleCrypto=o,e.isBrowserCryptoAvailable=function(){return!!r()&&!!o()}},34300:function(t,e,n){"use strict";var r=n(7490);function o(){return"undefined"===typeof document&&"undefined"!==typeof navigator&&"ReactNative"===navigator.product}function i(){return"undefined"!==typeof r&&"undefined"!==typeof r.versions&&"undefined"!==typeof r.versions.node}Object.defineProperty(e,"__esModule",{value:!0}),e.isBrowser=e.isNode=e.isReactNative=void 0,e.isReactNative=o,e.isNode=i,e.isBrowser=f

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65475)
Category:	downloaded
Size (bytes):	104548
Entropy (8bit):	5.2693737531111955
Encrypted:	false
SSDEEP:	1536:+eNkXy7bGwtOV7wqJuidnVTEMwCC5BEacNfwUn9:+m3O9Kidnt7XR
MD5:	F19D815A6BADAF89A540F8E4DC029BD3
SHA1:	CF95140349D8E7EFF04F420351F3C478E6F493F2
SHA-256:	84D9248910A79321E5B3659C6A0EE9E9CA2432BCA0B95E4F465D7F6E4DC8C891
SHA-512:	5F1337AAAF64F0201248CB1F8D69FE014D544519907C8FCA5DA1C78390C680F68514F2CACDD645878C3724FC6B3DCB3A3E78FBDEFD6BC56F3DA8CA085B458D4E
Malicious:	false
Reputation:	low
URL:	https://a.trstplse.com/app/js/api.min.js
Preview:	/! ! built on Thursday, October 31st 2024, 17:03:53 UTC /.!function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)n.d(i,r,function(e){return t[e]}.bind(null,r));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=8)}([function(t,e,n){"use strict"

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12108)
Category:	dropped
Size (bytes):	323413
Entropy (8bit):	5.569201108563544
Encrypted:	false
SSDEEP:	3072:AUCGkxQXsiq8n98nWbfU003cRNZ5DcVp1OTrp40NsJsL2UYAwMwCqq5kQo/IWHtB:rCAsiqo98nWBc1OTrp40Ka+Cqq5kQo/n
MD5:	F995CC41D32778AD19DD4AE5A8B0E7FF
SHA1:	22FC7928E292DE86AD34D7F6CEC78F0F1681E212
SHA-256:	72BAE2FA82B78F719690609D7826639B118DB445B0C5CAE49B8A5089346ED01B
SHA-512:	61CDF289FF841627BE478079A4CA84D17D0CCAEF79121214EC787E4A247ACB44CEEB7223A698EB882078E2DBCB49DDA1F0B8FE33530C1C631E162E3B3613E137
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"43",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"957027334"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"427391422902188"},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__c","vtp_value":"G-EHZSQKTF1P"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__cvt_1480359_155","vtp_useCustomEventCounter":false},{"function":"__jsm","vtp_javas

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	dropped
Size (bytes):	213993
Entropy (8bit):	5.601337896041867
Encrypted:	false
SSDEEP:	3072:rru4waIFmhXNhzjbgygePFpH7PSSGfPhLtH/7JXN:ri4whF273LdGBLtFN
MD5:	E5FD2C86C1B8F0A06C77AA265987EB94
SHA1:	2358A8FA4C4AC594034C7D7A7C339495EE34112C
SHA-256:	4F73D4371A82A1A29A5CD0B101A27FA67A4329C7AAF69DE54DA4E707DD567ADC
SHA-512:	32BB7B30EF4255E537CDBBE30FF3515A079D377C2F2D02EC92167A88F8D667288BA1026C97173C23D50C609B6C6B8E5CEFF7025DDF615229CE26E00B5C641C37
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 4366.ea2f9748.chunk.js.LICENSE.txt /."use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[4366],{84366:function(t,e,n){n.r(e),n.d(e,{W3mAccountButton:function(){return fc},W3mConnectButton:function(){return Bc},W3mCoreButton:function(){return ts},W3mModal:function(){return ws},W3mNetworkSwitch:function(){return ks},W3mQrCode:function(){return wl}});var r=n(97326),i=n(4942),a=n(74165),o=n(15861),l=n(93433),c=n(15671),s=n(43144),u=n(60136),d=n(29388);function h(t,e){return e\|\|(e=t.slice(0)),Object.freeze(Object.defineProperties(t,{raw:{value:Object.freeze(e)}}))}var m,v,f=n(29439),p=n(37762),w=n(98737),g=window,b=g.ShadowRoot&&(void 0===g.ShadyCSS\|\|g.ShadyCSS.nativeShadow)&&"adoptedStyleSheets"in Document.prototype&&"replace"in CSSStyleSheet.prototype,y=Symbol(),x=new WeakMap,k=function(){function t(e,n,r){if((0,c.Z)(this,t),this._$cssResult$=!0,r!==y)throw Error("CSSResult is not constructable. Use `unsafeCSS

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226966
Entropy (8bit):	5.37858105337111
Encrypted:	false
SSDEEP:	1536:EwmvhwvwV1UMwl+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPybFkK8yDaIG+UNM3VBYG3:MhwvwVGMwHZXixont8Fk9KRUytxYScY7
MD5:	4EEC238587F7F82D91A29F25D83A5FB6
SHA1:	8F443236A805D1A5F7DE04D07F1BF0331B63C70D
SHA-256:	F0A9B19D1615E0E2AFDCA507D4C7CBE384B0BDFAD5CBAF63C14A386DF33A62D7
SHA-512:	35E407C0B077E2B066F53E5B0A83194F28B29F249E7A0440B89A475EE654E7E004F3F1FF759F0444F1E4931B06237BC440062C9496B52A4E3C4F5C6CF4EDEE85
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.6f60e575cf8ad7cb10f7.js
Preview:	/! For license information please see modules.6f60e575cf8ad7cb10f7.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2938), with no line terminators
Category:	dropped
Size (bytes):	2938
Entropy (8bit):	5.191726055149565
Encrypted:	false
SSDEEP:	48:0EPHjpv3EywovFHqrYMxcwM21yzACjC75xRGSTBUCwu3zJzKrVazr0:zPHjrMJX0jC75xRGSTBUlYpKVO0
MD5:	6BC66FAF4EF04BAA93A407A9EAE17CDE
SHA1:	92A8872633D6B49E0ABD7C99BDA0D299B39022C4
SHA-256:	619525C2F61FE49D5B4B324DB94E5392019087CF61038AF3110642E475D6EA88
SHA-512:	6A08247A6EEAA65EBF52251D9F093D2E97031E8DFF1942E8A0E5D8D85109A2F6A83A9A9D5535D5436886374D024617AB586C0DCE8C56F4B647B7733DD61FDD2D
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta property="og:title" content="Secure Swiss File Transfer & Decentralized Storage \| WeSendit"/><meta property="og:description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta name="theme-color" content="#000000"/><meta property="og:image" content="/share.jpg"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_EN"/><meta http-equiv="X-UA-Compatible" content="IE=9"/><script>!func

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	6.601086931258533
Encrypted:	false
SSDEEP:	6:6v/lhPOihmjZOl4N2c2Ff6NhZh6Dnnv5r2arO8OfCinneW2//bp:6v/72VZO6kc2FCNynpV+fCiniX1
MD5:	B11F09F500DEE717E7D270A7FD35FC29
SHA1:	86A3DDDFD676F0606A2BC42A3CDC334721E50F7A
SHA-256:	85EBE6B1DC0AE403C8672B1EF516383386BF7016EDBBB05CA6F937CA612E0244
SHA-512:	D31ADC0A726990A3307BA94975607A7511197CC72A9A73B17AB5B559EBB5C8A82A542F3987E4299BD1A68F6140FEC94BD10549C700964879E9B97ABB29146569
Malicious:	false
Reputation:	low
URL:	https://www.gravatar.com/avatar/eae09aa5450665dde0cba545e6e962f5?d=retro
Preview:	.PNG........IHDR...P...P......se.....pHYs..........+......IDATx...1.BA..QW.>.G..B.F..)....y..?.X...^.J.........K~....2..`:..v.w.......t...L.....=<}...D.m.`:....K{.#...q.6..`:..v. ....3..`....c....a....3.........Lg0..t...Lg0..t....f...3..`:....3..`./).(..w.Z....IEND.B`.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	324694
Entropy (8bit):	5.4038431957349635
Encrypted:	false
SSDEEP:	3072:WQjTVORHCrtppRuDqC1RRuDbGbBcLOhnIi2bHeM7SjQ5uiJ:WQjTVOMrttaRSz82bHeM2jQ5uiJ
MD5:	174F6B78E03D25C43AE6DA89889358F3
SHA1:	9B436EE7965C7F8B5239A3234F2FAC0606A326F3
SHA-256:	1793034713C26523338FC70C601924BED2E171596E506114202A3175867C39DC
SHA-512:	9A225900B9DE9793A9C7EF48ED62EF8AFF3C96DA3623EFA435A699F535B5FCAA11CC18ED95B64A31C0E66F37D05897A3EEC2CFFAC7C39C70E919BCEF5C2ADF17
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/406.ce8fba17.chunk.js
Preview:	/! For license information please see 406.ce8fba17.chunk.js.LICENSE.txt /.(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[406],{79734:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(44654);function i(e,t,r){return void 0===t&&(t=new Uint8Array(2)),void 0===r&&(r=0),t[r+0]=e>>>8,t[r+1]=e>>>0,t}function o(e,t,r){return void 0===t&&(t=new Uint8Array(2)),void 0===r&&(r=0),t[r+0]=e>>>0,t[r+1]=e>>>8,t}function a(e,t){return void 0===t&&(t=0),e[t]<<24\|e[t+1]<<16\|e[t+2]<<8\|e[t+3]}function s(e,t){return void 0===t&&(t=0),(e[t]<<24\|e[t+1]<<16\|e[t+2]<<8\|e[t+3])>>>0}function c(e,t){return void 0===t&&(t=0),e[t+3]<<24\|e[t+2]<<16\|e[t+1]<<8\|e[t]}function u(e,t){return void 0===t&&(t=0),(e[t+3]<<24\|e[t+2]<<16\|e[t+1]<<8\|e[t])>>>0}function f(e,t,r){return void 0===t&&(t=new Uint8Array(4)),void 0===r&&(r=0),t[r+0]=e>>>24,t[r+1]=e>>>16,t[r+2]=e>>>8,t[r+3]=e>>>0,t}function l(e,t,r){return void 0===t&&(t=new Uint8Array(4)),void 0===r&&(r

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1732), with no line terminators
Category:	dropped
Size (bytes):	1732
Entropy (8bit):	5.208351716391666
Encrypted:	false
SSDEEP:	48:XOLGy09RyVbdg8M8GFVxPHGisTlVpdDkv/:XOGyN0tlv9miMl3dAX
MD5:	00BBE629D93A6E14C220D25495D41C85
SHA1:	084EFDB030D2BDD009A085062B120661586B5C00
SHA-256:	662EB604D7A8143BA32B293EC8B5170AF181DBCCD6238EDEE4454744D0870027
SHA-512:	0B61C77C73485681EB65AA4707180F8B747903FD55325E9CBDA7B0078840F0168001CE3FB950C8570BD05B6B7F072B6B93F4806FCA13B7135C3CF173F2317B2E
Malicious:	false
Reputation:	low
Preview:	!async function(){var e=document.getElementById("crowdswapWidget"),t=(e&&(e.style.display="none",(t=document.createElement("style")).textContent='.app-splash-screen{background:linear-gradient(180deg,rgba(6,130,97,1) 0%,rgba(55,200,162,1) 50%,rgba(6,130,97,1) 100%);position:absolute;width:100%;max-width:506px;height:100%;max-height:506px;display:flex;justify-content:center;align-items:center;z-index:150;transition:left 0.5s;left:50%;transform:translateX(-50%);border-radius:6px;}.splash-inner{display:flex;flex-direction:column;justify-content:center;align-items:center;}.splash-logo{background:url("https://widget.crowdswap.org/assets/media/logo/splash-logo.svg");background-repeat:no-repeat;max-width:100%;background-position:center;background-size:contain;width:400px;height:100px;}.splash-loader{background:url("https://widget.crowdswap.org/assets/media/icons/three-dots.svg");background-repeat:no-repeat;max-width:100%;background-position:center;background-size:contain;width:80px;height:80px

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2140
Entropy (8bit):	4.900628053011533
Encrypted:	false
SSDEEP:	48:hoYcjEvoajpMDt1ksoyQbZF/WMaTvV7z+LM+cW:hgEv9pxVcjTVH+oW
MD5:	EB4A9471B75B812E62466B0CCEE0614D
SHA1:	5A1EC1E9B74E1F70A1487E0E73312BCAA86CDC4A
SHA-256:	3F1697719D06B6EA6978A97E0326E0910EDAB3685D97BE32B19699FA0BD76291
SHA-512:	28C6E683767929F299D07B7B60B43F5720B90416386AA14783AB2CAD8804530452C29F8FCECA743FC5C4A130FFD578314EA4CA25A3D53044B82CC09190ED3ABD
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/deprecated/styles.css
Preview:	@font-face {. font-family: 'Open Sans';. src: local('Open Sans'), url('../../src/fonts/OpenSans/OpenSans-Regular.ttf') format('truetype');. font-weight: 400;. font-display: swap;.}..@font-face {. font-family: 'Open Sans';. src: local('Open Sans'), url('../../src/fonts/OpenSans/OpenSans-Bold.ttf') format('truetype');. font-weight: 700;. font-display: swap;.}...deprecated-container {. width: 100%;. height: 100vh;. box-sizing: border-box;. background-size: cover;. position: relative;. color: #252728;. overflow: hidden;.}...deprecated-mobileLogo {. position: absolute;. top: 0;. margin: 20px;.}...deprecated-desktopLogo {. display: none;.}...deprecated-modal {. display: inline-block;. position: absolute;. bottom: 0;. box-sizing: border-box;. text-align: left;. padding: 32px;. background-color: white;. border: solid black 1px;. border-radius: 8px;. margin: 10px;.}...deprecated-title {. font-weight: 700;. font-size: 18px;. line-height: 28px;. letter-spacing: -0

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	160
Entropy (8bit):	4.759586165139923
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KQHGMN46K6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqLHGGK3T
MD5:	4E08FE785642BE57B16E528DBF793470
SHA1:	9A49D3CC46D985AA6EB63D943F7197A80C70EDC6
SHA-256:	D7FFFC647284820A6ED60CB19BF897A6C8F1F66C3B05FF2114561FAEFA4864BF
SHA-512:	EC0C1EC2803D971B28FF3C6E9BA18B15DD401210B043F6BBE7CFEA3D8F88231040F4A5A919B81BBD81E6809F6E650FE24C15969F7C1C18115F8D691A4998443A
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /users/me/session-auth</pre>.</body>.</html>.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90047
Entropy (8bit):	4.967106696357494
Encrypted:	false
SSDEEP:	1536:HRtDj1lIpIZIkIsIjICINI+IfUIf7IfGIf6IfZiZpL6CEuHr7f1KaPmmbn:H7P1lIpIZIkIsIjICINI+IfUIf7IfGIo
MD5:	E27F61E4D69E260F1DCA85C050D911F0
SHA1:	3C8FB80D0C2E9E57A5975BC9EDA27D0EDDD7BB4A
SHA-256:	19EA07A6E8AD0B1DE323363E4ADC093D3D9730B0E2094BB42A7906628B308736
SHA-512:	63834AF3EC4F65C1B5DDBB3A2776B3F00A68EA23BA9B42A7DF8A2DD36EB1BA763FD8EA665EDF894D15935547C1A6F80DE55A0048BE4F6E74C505ABA50BFA3BA2
Malicious:	false
Reputation:	low
URL:	https://messenger.gleap.io/static/css/main.780ccf56.css
Preview:	.chat-message-composer{align-items:flex-end;-webkit-animation:menuFadeIn;animation:menuFadeIn;-webkit-animation-duration:.6s;animation-duration:.6s;-webkit-animation-fill-mode:forwards;animation-fill-mode:forwards;background-color:var(--background-color);border-top:1px solid var(--border-color-33);bottom:0;box-shadow:-1px -4px 10px 3px rgba(0,0,0,.02);display:flex;justify-content:space-between;left:0;position:absolute;right:0}.chat-message-composer textarea{-webkit-appearance:none;appearance:none;background-color:var(--background-color);border:none;box-sizing:border-box;color:var(--primary-text-color);font-size:14px;font-weight:400;line-height:19px;outline:0;padding:20px 0 20px 25px;resize:none;width:calc(100% - 98px)}@media screen and (max-device-width:600px){.chat-message-composer textarea{font-size:16px}}.chat-message-composer textarea::-webkit-input-placeholder{color:var(--primary-text-color);opacity:.4}.chat-message-composer textarea::placeholder{color:var(--primary-text-color);op

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 44 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	130836
Entropy (8bit):	6.676729509858488
Encrypted:	false
SSDEEP:	3072:K9Mowv/4mqRO56uKC+mO2bP7cvHl9Mi2PD4zWX:8I3qO56uKqO2EvHl2PE+
MD5:	7DF68CCFCB8FFE00669871052A4929C9
SHA1:	B4596A8E11EE5B6331F2FECF656A53F61677B56E
SHA-256:	ABE9A73C251AD253776DA6098F425DB4E50BF094DC9EDBADEE1A6E15622C9B26
SHA-512:	32BE4B56D74FDE11A5B619452A15EA396E1BDD5FE87FAF8477054A6A58A3F9122B92BFF5014FA3103392F58BF525467C2A150360EC411D486E640570E92A5238
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/media/OpenSans-Regular.9a6cfa5890d7f3eef585.ttf
Preview:	........... GDEF...U...t....GPOSU....vl..9\|GSUB.c.e........OS/2.@.,.......`STAT^.C9.......^cmap.8..........cvt =?,....x....fpgm...Z..-.....gasp...#...,....glyf.V.A......O*head..4........6hhea.......\...$hmtxS.CW..=0....loca..8.........maxp.......<... namee&q.........post&.....O...'jprep..{....8.........................t....._......./...........................4...................s.......B...._.<..................w&Q.......b.............................,..wdth....wght....ital.....&.............................................d...............3.......3.......2..................@. ....(....GOOG.........................H..... ...............H...............................................q...........m.....k.....z.....:.............x.H...z...........q.......................m.z.......k.............z.............:.q...........}...............x.~.....H.y...............z.....8.........t...................>.............#.....S.T...t.t...v.v.........................5......................... .".%

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2938), with no line terminators
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	5.191726055149565
Encrypted:	false
SSDEEP:	48:0EPHjpv3EywovFHqrYMxcwM21yzACjC75xRGSTBUCwu3zJzKrVazr0:zPHjrMJX0jC75xRGSTBUlYpKVO0
MD5:	6BC66FAF4EF04BAA93A407A9EAE17CDE
SHA1:	92A8872633D6B49E0ABD7C99BDA0D299B39022C4
SHA-256:	619525C2F61FE49D5B4B324DB94E5392019087CF61038AF3110642E475D6EA88
SHA-512:	6A08247A6EEAA65EBF52251D9F093D2E97031E8DFF1942E8A0E5D8D85109A2F6A83A9A9D5535D5436886374D024617AB586C0DCE8C56F4B647B7733DD61FDD2D
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta property="og:title" content="Secure Swiss File Transfer & Decentralized Storage \| WeSendit"/><meta property="og:description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta name="theme-color" content="#000000"/><meta property="og:image" content="/share.jpg"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_EN"/><meta http-equiv="X-UA-Compatible" content="IE=9"/><script>!func

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65475)
Category:	dropped
Size (bytes):	104548
Entropy (8bit):	5.2693737531111955
Encrypted:	false
SSDEEP:	1536:+eNkXy7bGwtOV7wqJuidnVTEMwCC5BEacNfwUn9:+m3O9Kidnt7XR
MD5:	F19D815A6BADAF89A540F8E4DC029BD3
SHA1:	CF95140349D8E7EFF04F420351F3C478E6F493F2
SHA-256:	84D9248910A79321E5B3659C6A0EE9E9CA2432BCA0B95E4F465D7F6E4DC8C891
SHA-512:	5F1337AAAF64F0201248CB1F8D69FE014D544519907C8FCA5DA1C78390C680F68514F2CACDD645878C3724FC6B3DCB3A3E78FBDEFD6BC56F3DA8CA085B458D4E
Malicious:	false
Reputation:	low
Preview:	/! ! built on Thursday, October 31st 2024, 17:03:53 UTC /.!function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)n.d(i,r,function(e){return t[e]}.bind(null,r));return i},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=8)}([function(t,e,n){"use strict"

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.94770277922009
Encrypted:	false
SSDEEP:	3:mn:mn
MD5:	722969577A96CA3953E84E3D949DEE81
SHA1:	3DAB5F6012E3E149B5A939B9CEBBA4A0B84DC8F5
SHA-256:	78342A0905A72CE44DA083DCB5D23B8EA0C16992BA2A82EECE97E033D76BA3D3
SHA-512:	54B2B4596CD1769E46A12A0CA6EDE70468985CF8771C2B11E75B3F52567A64418BC24C067D96D52037E0E135E7A7FF828AD0241D55B827506E1C67DE1CAEE8BC
Malicious:	false
Reputation:	low
URL:	https://api.web3modal.com/getAnalyticsConfig
Preview:	Forbidden

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3969)
Category:	downloaded
Size (bytes):	287929
Entropy (8bit):	5.561934165085947
Encrypted:	false
SSDEEP:	3072:fvCGkxQXsiq8nV8JfbfU0r3cRNZ5DcVp1OTrp40NoJsL2UYAw9wLFq5kQo/M1oa5:nCAsiqoV8Jfkc1OTrp40eaZLFq5kQo/6
MD5:	C61F958942AE3B257C14A127137F5DE2
SHA1:	7D6ECEEBE7EC3AFE6276599C2EBCFE6588CED335
SHA-256:	5AE29C05C4BB11BE2A0D4AF34C28FC8AC9FE18071A535CA320052E28E67CD608
SHA-512:	39D5F7750B9F690318D8CFFBA6EF158AB9591A35C36065CEFB9C1949E6AC887E808D9126E0A1CA4FC32181DCE1C03AB5B304B23A636AA6A8572E140BF7304851
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-957027334&l=dataLayer&cx=c&gtm=45He4bb0v71480359za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":15,"vtp_instanceDestinationId":"AW-957027334","tag_id":15},{"function":"__ogt_cps","priority":5,"vtp_cpsAds":true,"vtp_cpsPlaystore":true,"vtp_cpsYoutube":true,"vtp_cpsSearch":true,"vtp_cpsMode":"SOME","vtp_cpsShopping":true,"vtp_cpsMaps":true,"tag_id":8},{"function":"__ogt_1p_data_v2","priority":5,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_au

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2091
Entropy (8bit):	4.087276690123768
Encrypted:	false
SSDEEP:	24:tT8kuXMMqjSn5BDlHtb018bBGFMKW4TKsnNPVLkoS/fLfyp7AVicSmbwSAFjea7s:ehdG18SMKW5ygB+TOxa7adQiCavv
MD5:	F3648F46FE4E38B0DE24285FEF86B3D5
SHA1:	413C546D2E39B34391FCBD6580A6DA38C0C56D32
SHA-256:	BA724FC2CFD6F1801A7FB3A4A5348041062F330D00D9D651E07AEEC171246938
SHA-512:	9F50E4FA04F8582EB92DDBD742F8A931DFC079B0E163F4B104E3491B69545A523941A3FF2BB1C0BEB9946D47E705744825FA57B3D400D51DEE64712E3D962BA3
Malicious:	false
Reputation:	low
URL:	https://gleapcdn.com/res/iconidea.svg
Preview:	<svg width="18" height="22" viewBox="0 0 18 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M8.34663 1.74664C8.34663 1.27536 8.72868 0.893311 9.19996 0.893311C9.67124 0.893311 10.0533 1.27536 10.0533 1.74664V2.59998C10.0533 3.07126 9.67124 3.45331 9.19996 3.45331C8.72868 3.45331 8.34663 3.07126 8.34663 2.59998V1.74664ZM12.9952 12.8634C13.8184 11.9548 14.32 10.7493 14.32 9.42664C14.32 6.59895 12.0277 4.30664 9.19996 4.30664C6.37226 4.30664 4.07996 6.59895 4.07996 9.42664C4.07996 10.7493 4.58149 11.9548 5.40475 12.8634C5.90923 13.4201 6.33662 14.0732 6.41138 14.8208C6.51594 15.8664 7.1469 16.8426 8.18261 17.0204C8.51325 17.0771 8.85317 17.1067 9.2 17.1067C9.54678 17.1067 9.88666 17.0771 10.2173 17.0204C11.253 16.8427 11.884 15.8665 11.9885 14.8208C12.0633 14.0732 12.4907 13.4201 12.9952 12.8634ZM11.5456 19.2506C11.5845 18.8612 11.2076 18.5586 10.8251 18.641C10.3013 18.7539 9.75758 18.8133 9.2 18.8133C8.6424 18.8133 8.09868 18.7539 7.57

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://api.gleap.io/projects/conversations?limit=25&skip=0
Preview:	[]

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62231)
Category:	dropped
Size (bytes):	5873463
Entropy (8bit):	5.686981925671662
Encrypted:	false
SSDEEP:	98304:lEsK2/m3KPfuCD/Rb25udvTOnH7yVYfN9I/mciko:lEsKl3KPfuCD/RC5uxTgHOiFu/v9o
MD5:	77C1C250E22DB00C751C02DB7E0D7782
SHA1:	291DC834941DA3F36C8A24F2DAD2CDDFEFC42B9B
SHA-256:	43D41E41B2A60662DDD00E706466ACDBAAD0D95670A396A44F306167F415C93E
SHA-512:	DEF43B2BE127BA5879E5C9A3531BD223D256F7355A9A17E32663D1DF5DA15A672403AB54E4848D462F1F78FC1EA5AD30E2B9E73D6ACCC81FF0B5589D0F1760F8
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdO={},e=[],r.O=(n,t,i,f)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,i,f]=e[o],c=!0,d=0;d<t.length;d++)(!1&f\|\|a>=f)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f\|\|0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return r.d(n,{a:n}),n},(()=>{var n,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i\|\|"object"==typeof t&&t&&(4&i&&t.__esModule\|\|16&i&&"function"==typeof t.then))return t;var f=Object.create(null);r.r(f);var o={};n=n\|\|[null,e({}),e([]),e(e)];for(var a=2&i&&t;"object"==typeof a&&!~n.indexOf(a);a=e(a))Object.getOwnPropertyNames(a).forEach(c=>o[c]=()=>t[c

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2917 x 2918, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	115807
Entropy (8bit):	7.21390869368252
Encrypted:	false
SSDEEP:	3072:+i7RZ09yP2BnXd026RWya0b7XDf41G8L9RW+:+WwcP21XqRWyHknLt
MD5:	2A1839BE22CAD55D4347633177859901
SHA1:	EA85BFE53545F9CAA63DE58D7951E03E289180FE
SHA-256:	88A3E9BFC9FB31DBABFCEBD04BEB2184CA8DCC833CE91C1694DC0FFFAC426323
SHA-512:	7731DE8CDAD9E0271FFDB29B0B8A8055097342488B715ED40A4BEEEAF75E4B7B67D8234B54CDF9261F1754BB43CAFE471122EAE7B345B3F512D2F0B6AC13E075
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...e...f............pHYs...#...#.x.?v.. .IDATx....Q$Y..}.......v.A.D....PhP......H..)A.?5H.......5.>..E.....k...]=e..O....?..........^J..F..;.s......}D,...Yvms.........#&..........."....?.S....<F.....?..o.......?.....`.D......k...z.....vd.....e..W-^..D.......%......x..Q.../......../C.]..u.......(.........aD..?..k.....~O/.s...q..k..W......&A..........?.........o..k.........e.....;.r9......W/\.?.l.f.9.^.\.^..}..r.C.....vC.......].e5.~.h.2..Z.....h.....k.........$.......$...Y.^.~.v..{{&.......x{....................../....G&....7.....m.....O.l........j`.._.N\|....q...j......X....`.D.....0.+.....{...o\...g.6........'........].L.]..........#.......I....M.s?"...#{....K...}.6K.......=Q6....lQ.e5.>^.t..z...x.o].^tm.0L......Q6....l@.x..\....Y..e.5..l..............R..+.....M.l/.C.._wm..I....x.Q6.....@.e.../...s.`..^...^............D.........'f...._.^.P..h.k.[#....`.D...........G>...!.5._.y...X......Q6.....T.......<.m....@[..............5...`.Vc.?..mn......

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 420, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	177946
Entropy (8bit):	1.0064738041727075
Encrypted:	false
SSDEEP:	192:mbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbhbbbe:h
MD5:	88A4A26DD5178CE79E905B6F7E90B665
SHA1:	B1C732A92EB51A1AA112054CD96DDBE519CDC162
SHA-256:	B6A87123B37E103997D7346FDAABE23A5E89E112363047A1B6DC809F8C2CB93B
SHA-512:	4CF4B3E4BC385728661D7E2363A824E834C8D6F23432251B4E8459E2A8AE2867CD45643E02A9B64F13D9CE4D37CA6A9AD08CC49E1BCFA9F33AE6121D98672F81
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/api.gleap.io/identicon/362e9ad86d3154293ff817716d985247?ssl=1
Preview:	.PNG........IHDR.............I.......PLTE.....y..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS...................................................................................................................................................................................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1782), with no line terminators
Category:	dropped
Size (bytes):	1782
Entropy (8bit):	5.8973807465632175
Encrypted:	false
SSDEEP:	48:VKEAhfKfKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:fAtHMI5czgk/msuG
MD5:	D7A6D8480F2162E1A16E093655637415
SHA1:	EEB20818021A0EEA4E3FD924B2DE33299D4D30E9
SHA-256:	6A82C9CD03E469060205187F85D1F541243153040860FEAF30B57B832B46A2DB
SHA-512:	78865BD82E824070C43533508439A5FF5823BFD07D267A4BC23900C848FF44604DEA1EE5ADEBB28A6599EFD9CBE6DE28B2E0FD835911EFF3232D8D334071A720
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeMpiwcAAAAAAuGag4PWJvwSSgH0mCVX7EDQIjT');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9363), with no line terminators
Category:	downloaded
Size (bytes):	9363
Entropy (8bit):	5.563783843565914
Encrypted:	false
SSDEEP:	96:fvYyMrCW5CqTdNx6vWEfJ4korYeVsDtGQZhM7IIwaSZrpiGTMxBdSMQQGQWQ0pXY:4yEC8/2rBlgYeVsDtaglUNSMQQQQIa4q
MD5:	D3CE1FF04D9C9AF9D15079F151301353
SHA1:	F0A8B026A6CE22D9C312F3FB5BE65CD1D70E5780
SHA-256:	31AE48B7F6825F3EB64AD0746DD2368C12479BA21CC53A769340906760E328ED
SHA-512:	1A34114E606CBEB2831A9D58E47F4FF834174E2B1C3A06B7438930FDC2B5E67CFF26686A1998DA84E25C7F9603E1707A0D5A6784307548B74A4160CEE488F8C3
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/8839.6d5fc415.chunk.js
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[8839],{83343:function(e,n,t){"use strict";t.d(n,{l:function(){return f}});var a=t(64749),o=t(53046),i=t(58335),r="PageHeaderWithNavigation_header__hVadz",l="PageHeaderWithNavigation_desktopTitleBar__2bqcy",s="PageHeaderWithNavigation_desktopTitleGroup__aBrFQ",d="PageHeaderWithNavigation_title__NHVsH",c="PageHeaderWithNavigation_activeLabelIcon__aIaQ6",u="PageHeaderWithNavigation_navSection__bDuEz",p=t(46417),f=function(e){var n=e.navigationOnly,t=void 0!==n&&n,f=e.title,v=e.Icon;return(0,p.jsx)(p.Fragment,{children:t?(0,p.jsx)("div",{className:u,children:(0,p.jsx)(o.w,{})}):(0,p.jsx)(i.pU,{greaterThanOrEqual:"xl",children:(0,p.jsx)("div",{className:r,children:(0,p.jsxs)("div",{className:l,children:[(0,p.jsxs)("div",{className:s,children:[v&&(0,p.jsx)(v,{className:c}),(0,p.jsx)(a.Z,{variant:"h2-bold-desktop",className:d,children:f})]}),(0,p.jsx)(o.w,{})]})})})})}},46997:function(e,n,t){"use strict";t.r(n),t.d

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	226966
Entropy (8bit):	5.37858105337111
Encrypted:	false
SSDEEP:	1536:EwmvhwvwV1UMwl+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPybFkK8yDaIG+UNM3VBYG3:MhwvwVGMwHZXixont8Fk9KRUytxYScY7
MD5:	4EEC238587F7F82D91A29F25D83A5FB6
SHA1:	8F443236A805D1A5F7DE04D07F1BF0331B63C70D
SHA-256:	F0A9B19D1615E0E2AFDCA507D4C7CBE384B0BDFAD5CBAF63C14A386DF33A62D7
SHA-512:	35E407C0B077E2B066F53E5B0A83194F28B29F249E7A0440B89A475EE654E7E004F3F1FF759F0444F1E4931B06237BC440062C9496B52A4E3C4F5C6CF4EDEE85
Malicious:	false
Reputation:	low
Preview:	/! For license information please see modules.6f60e575cf8ad7cb10f7.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62231)
Category:	downloaded
Size (bytes):	5873463
Entropy (8bit):	5.686981925671662
Encrypted:	false
SSDEEP:	98304:lEsK2/m3KPfuCD/Rb25udvTOnH7yVYfN9I/mciko:lEsKl3KPfuCD/RC5uxTgHOiFu/v9o
MD5:	77C1C250E22DB00C751C02DB7E0D7782
SHA1:	291DC834941DA3F36C8A24F2DAD2CDDFEFC42B9B
SHA-256:	43D41E41B2A60662DDD00E706466ACDBAAD0D95670A396A44F306167F415C93E
SHA-512:	DEF43B2BE127BA5879E5C9A3531BD223D256F7355A9A17E32663D1DF5DA15A672403AB54E4848D462F1F78FC1EA5AD30E2B9E73D6ACCC81FF0B5589D0F1760F8
Malicious:	false
Reputation:	low
URL:	https://widget.crowdswap.org/crowdswap-widget.js?1730283708
Preview:	(()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdO={},e=[],r.O=(n,t,i,f)=>{if(!t){var a=1/0;for(o=0;o<e.length;o++){for(var[t,i,f]=e[o],c=!0,d=0;d<t.length;d++)(!1&f\|\|a>=f)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f\|\|0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n=e=>{var n=e&&e.__esModule?()=>e.default:()=>e;return r.d(n,{a:n}),n},(()=>{var n,e=Object.getPrototypeOf?t=>Object.getPrototypeOf(t):t=>t.__proto__;r.t=function(t,i){if(1&i&&(t=this(t)),8&i\|\|"object"==typeof t&&t&&(4&i&&t.__esModule\|\|16&i&&"function"==typeof t.then))return t;var f=Object.create(null);r.r(f);var o={};n=n\|\|[null,e({}),e([]),e(e)];for(var a=2&i&&t;"object"==typeof a&&!~n.indexOf(a);a=e(a))Object.getOwnPropertyNames(a).forEach(c=>o[c]=()=>t[c

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 420, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	177946
Entropy (8bit):	0.9176452440944018
Encrypted:	false
SSDEEP:	192:BbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbB:f
MD5:	FF9353844A2E8552986A6F9E752FBA12
SHA1:	BD695785C2AF6349217A55DAA983D9C29A433738
SHA-256:	16C6E5DCE5FD403C27041FAC015014C121B691018858E384B1F8FCAC0ECBA881
SHA-512:	52A16781F1A8E52DDD2B3809485EF9D65F006EA117A39B0E04CC9F19893830D0B462E71836F273C22367F087DACA85B46434E1A31B127D8C45B0319EF0758E0E
Malicious:	false
Reputation:	low
URL:	https://i2.wp.com/api.gleap.io/identicon/ee529e1250688ab30538a26e7cf85127?ssl=1
Preview:	.PNG........IHDR.............I.......PLTE...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................@.......tRNS...................................................................................................................................................................................

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24696), with no line terminators
Category:	downloaded
Size (bytes):	24696
Entropy (8bit):	5.525314169400636
Encrypted:	false
SSDEEP:	384:UpuAQ3hYU6fUp2fS9Hwa9nyIaaKUpb2yLCfFe5Lde2OjM6EUT6NOzRRvMfhkT4iU:auAQ3GaAyLCfmLd/OjuK6sAkTVpYjpP
MD5:	E5C87BA1E0BB5D6E4D405B1821ABB42F
SHA1:	935E5802FEE6DD56F43BB2B86BFE0881E9D5CB70
SHA-256:	F00D0732EF45FC873388B98A33835C7693DCF1103DF9BF14953503C45EAF7F97
SHA-512:	AC385C09F48F181F4BF6566D5C8049FEB9B1E1BDEF090520FA52831C01581EA09634B0F628CCD7AE7816DBADA253008EE597CE19E13B9173D801E00D98F9D2BE
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/6316.088c246e.chunk.js
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6316],{51664:function(t){"use strict";var e={single_source_shortest_paths:function(t,r,n){var o={},i={};i[r]=0;var a,u,s,f,c,h,d,g=e.PriorityQueue.make();for(g.push(r,0);!g.empty();)for(s in u=(a=g.pop()).value,f=a.cost,c=t[u]\|\|{})c.hasOwnProperty(s)&&(h=f+c[s],d=i[s],("undefined"===typeof i[s]\|\|d>h)&&(i[s]=h,g.push(s,h),o[s]=u));if("undefined"!==typeof n&&"undefined"===typeof i[n]){var l=["Could not find a path from ",r," to ",n,"."].join("");throw new Error(l)}return o},extract_shortest_path_from_predecessor_list:function(t,e){for(var r=[],n=e;n;)r.push(n),t[n],n=t[n];return r.reverse(),r},find_path:function(t,r,n){var o=e.single_source_shortest_paths(t,r,n);return e.extract_shortest_path_from_predecessor_list(o,n)},PriorityQueue:{make:function(t){var r,n=e.PriorityQueue,o={};for(r in t=t\|\|{},n)n.hasOwnProperty(r)&&(o[r]=n[r]);return o.queue=[],o.sorter=t.sorter\|\|n.default_sorter,o},default_sorter:function

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	6545242
Entropy (8bit):	4.542514424421968
Encrypted:	false
SSDEEP:	6144:hs5RmGluC123egnW2buirmxeoboIvg0/4BQp2b7iDfyrwzuQzTUbvkDeLLboIfQt:hs8mN
MD5:	18FEB6A4920723B24E4BE5E8784C7115
SHA1:	280D8466C5BA14F2FFA9103B4B70791AB323A331
SHA-256:	1BDDF788974F5BF10CE23E41155A696466F3A0F0DF85AE7CCD99DC74776EE3D3
SHA-512:	F7032776FFB1074AA081AA75231ED166DD9642B872D1281160F3C0BF5913C2AC6746D35D2AD8F9B2AEAC0F37BA18C5F33FA4867FF3220E9B2BD7FC837A8F6D8E
Malicious:	false
Reputation:	low
URL:	https://widget.crowdswap.org/crowdswap-widget.css?1730283708
Preview:	.font-28{font-size:28px!important}.font-24{font-size:24px!important}.font-32{font-size:32px!important}.font-22{font-size:22px!important}.font-20{font-size:20px!important}.font-18{font-size:18px!important}.font-16{font-size:16px!important}.font-14{font-size:14px!important}.font-13{font-size:13px!important}.font-12{font-size:12px!important}.font-11{font-size:11px!important}.font-10{font-size:10px!important}.font-9{font-size:9px!important}.font-8{font-size:8px!important}.line-height-18{line-height:18px!important}.line-height-10px{line-height:10px!important}.line-height-initial{line-height:initial!important}.line-height-full{line-height:100%!important}.font-w-900{font-weight:900!important}.font-w-800{font-weight:800!important}.font-w-700{font-weight:700!important}.font-w-500{font-weight:500!important}.text-left{text-align:left!important}.text-right{text-align:right!important}.text-center{text-align:center!important}.letter-spacing-normal{letter-spacing:normal!important}@media (max-width: 7

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/957027334?random=1731385168509&cv=11&fst=1731385168509&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	9631
Entropy (8bit):	7.904780699363779
Encrypted:	false
SSDEEP:	192:+acnwOrgDd3RyzVzD3LP6Ov2pkSxaNdhaVfh9Tl1MLR6SMwT8P:j9Or0h26GsedhqfTj1wT8P
MD5:	38F7BB276F622184ACE609805B3D508F
SHA1:	628B6D8865E25237F1DA10C244C68A19069421D4
SHA-256:	826409613753D438F5A98913EE180AF3C76D29B5EC5F2B22EBE6E2B4DA28558A
SHA-512:	D272C0527668C79D98BC743B0995E89E05BE4331DACFFE6766953D31DF6D3745DD96AC713E94D13514F1A1C82DB50AF9399ADA3C65044B10582CD0E8B3C28F3D
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/favicon.ico
Preview:	............ ..%.......PNG........IHDR.............\r.f....orNT..w...%CIDATx..]...E..$....U=...;<..v.,...'v....d..HG.(..Cl...FQ...T....(.........a7...&./...~.e7_..{g.wf."D..T....!.N.p$7...F.\|.......(..v.w..w..q.s.. ,.s.>...g...0.r...No9....X.......R.........taw......g.;}e.B.)EtS....?..3.q...}...}.}^.}O...f..r&.$g.(Q.}..\|..]..m....~..zj..5.....{8......hBpz^QDPC.@.Q..&Ga..Ia..d...."I..&..f......7;\.,../..p...e...=6...j..f...&Ka..!J.)zL.......L.te..lj..^...=t..M......M-......6...TF...`..xE.j.xoP..Z.4.. B.Y...hO..X.r..9=j.y,6.+7...5.;.s. .s......~6cc.D..K..6Wz)}r....Te........!l......:..xC...l<....bl9\....1WYY....8.Fn.D.3K......aC.DD.\.aQ.Y.[.........-......X....6.A......S......n...f...V.Q%M.X...P8.F!..........,!.j"Dr.=.mj...<..../...3..l....0.&++...U......H....p5.IXw....fq...%H`...I)..,.j@.....z...X.....f.AX.K.Nor.;...Qw!j....&C.S...Oy..O....0....OJ..[UO...<..U$.k~.......G..#..../#gfN@...+.n?.?AX..>t.[E..#(..#U....M.*.]f .A..p,.U..K(.]8.EX.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3755
Entropy (8bit):	3.8903696164136328
Encrypted:	false
SSDEEP:	96:8lVxYQO3f+UdKslfo4XC+aNiAq8fiGoaa0YsEK:GHQ3fs+ftX7aNikisl3
MD5:	C7395C1D9FB05BE119C36CFE70520A7D
SHA1:	AC353D544BFFF4FE9F2F7EA58FCD03CD4E73391C
SHA-256:	C3406FE1298E15EC2B1D75D9FC7A1CB4E73CF639D60F8A56F8A902A21582BDE3
SHA-512:	1E75C9E9D3F8F2C838E31D7534D39BC4213ADB9F37ECA16496AC7B15208DC6B3C56460697486272463FF3A20D2614254E79BC85D4B491395C06805A0A7557F2C
Malicious:	false
Reputation:	low
URL:	https://gleapcdn.com/res/iconcontact.svg
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.8021 7.12682C19.1661 11.8836 16.4157 16.8454 11.6589 18.2094L12.3646 20.6703C12.3646 20.6703 3.04605 20.6791 0.576335 12.0662C-0.787649 7.30946 1.96275 2.34761 6.71953 0.983623C11.4763 -0.380361 16.4382 2.37004 17.8021 7.12682ZM7.09081 14.2078C7.73738 14.4337 8.47483 14.5467 9.30317 14.5467C9.6719 14.5467 10.0302 14.5207 10.3782 14.4688C10.7288 14.4194 11.0429 14.3532 11.3208 14.2701C11.6012 14.1896 11.8232 14.1026 11.9868 14.0092L11.6012 12.8796C11.461 12.9367 11.2754 12.9952 11.0442 13.0549C10.8131 13.1172 10.5548 13.1691 10.2691 13.2107C9.9835 13.2548 9.69138 13.2769 9.39276 13.2769C8.75917 13.2769 8.19829 13.1938 7.71011 13.0276C7.22194 12.8614 6.81166 12.6173 6.47929 12.2953C6.14691 11.9734 5.89504 11.5761 5.72365 11.1035C5.55487 10.6283 5.46918 10.083 5.46658 9.46756C5.46918 8.90928 5.54968 8.39384 5.70807 7.92124C5.86907 7.44605 6.1

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42630), with no line terminators
Category:	dropped
Size (bytes):	42630
Entropy (8bit):	5.16821853091734
Encrypted:	false
SSDEEP:	768:bbD9mOyyk4ufYu0Uvk6ogqpCsoUAng6oAK1Pm1Pl1PM1PA1P89DwGQr+x:bbF+Nlvk6oLpCsoPng6oTRmRlRMRAR8N
MD5:	220916AF03983DD5B9283C7C0F8A7BDC
SHA1:	6E87DC376B2D5EEDBFC4B29831714740F1997C68
SHA-256:	6C808FAA514DF688A211FBC71E191E3CAB4C06942D3375F52536755F314742E5
SHA-512:	E495FBCF61392A6C4EEDB2E3B933B22F37B5C1E4D5C3FA745851783B434F31D9308664708F38346DDF4EEFB41AEE09DF980498A16F8E56397E99C2EFD0D7455C
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6458],{4903:function(i,t,a){a.d(t,{r:function(){return y}});var e,n,r,s,o,m,x=a(47313),l=["title","titleId"];function d(){return d=Object.assign?Object.assign.bind():function(i){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var e in a)Object.prototype.hasOwnProperty.call(a,e)&&(i[e]=a[e])}return i},d.apply(this,arguments)}function k(i,t){if(null==i)return{};var a,e,n=function(i,t){if(null==i)return{};var a,e,n={},r=Object.keys(i);for(e=0;e<r.length;e++)a=r[e],t.indexOf(a)>=0\|\|(n[a]=i[a]);return n}(i,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(i);for(e=0;e<r.length;e++)a=r[e],t.indexOf(a)>=0\|\|Object.prototype.propertyIsEnumerable.call(i,a)&&(n[a]=i[a])}return n}function c(i,t){var a=i.title,c=i.titleId,y=k(i,l);return x.createElement("svg",d({width:80,height:80,viewBox:"0 0 80 80",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":c},y),

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	9631
Entropy (8bit):	7.904780699363779
Encrypted:	false
SSDEEP:	192:+acnwOrgDd3RyzVzD3LP6Ov2pkSxaNdhaVfh9Tl1MLR6SMwT8P:j9Or0h26GsedhqfTj1wT8P
MD5:	38F7BB276F622184ACE609805B3D508F
SHA1:	628B6D8865E25237F1DA10C244C68A19069421D4
SHA-256:	826409613753D438F5A98913EE180AF3C76D29B5EC5F2B22EBE6E2B4DA28558A
SHA-512:	D272C0527668C79D98BC743B0995E89E05BE4331DACFFE6766953D31DF6D3745DD96AC713E94D13514F1A1C82DB50AF9399ADA3C65044B10582CD0E8B3C28F3D
Malicious:	false
Reputation:	low
Preview:	............ ..%.......PNG........IHDR.............\r.f....orNT..w...%CIDATx..]...E..$....U=...;<..v.,...'v....d..HG.(..Cl...FQ...T....(.........a7...&./...~.e7_..{g.wf."D..T....!.N.p$7...F.\|.......(..v.w..w..q.s.. ,.s.>...g...0.r...No9....X.......R.........taw......g.;}e.B.)EtS....?..3.q...}...}.}^.}O...f..r&.$g.(Q.}..\|..]..m....~..zj..5.....{8......hBpz^QDPC.@.Q..&Ga..Ia..d...."I..&..f......7;\.,../..p...e...=6...j..f...&Ka..!J.)zL.......L.te..lj..^...=t..M......M-......6...TF...`..xE.j.xoP..Z.4.. B.Y...hO..X.r..9=j.y,6.+7...5.;.s. .s......~6cc.D..K..6Wz)}r....Te........!l......:..xC...l<....bl9\....1WYY....8.Fn.D.3K......aC.DD.\.aQ.Y.[.........-......X....6.A......S......n...f...V.Q%M.X...P8.F!..........,!.j"Dr.=.mj...<..../...3..l....0.&++...U......H....p5.IXw....fq...%H`...I)..,.j@.....z...X.....f.AX.K.Nor.;...Qw!j....&C.S...Oy..O....0....OJ..[UO...<..U$.k~.......G..#..../#gfN@...+.n?.?AX..>t.[E..#(..#U....M.*.]f .A..p,.U..K(.]8.EX.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21308), with no line terminators
Category:	dropped
Size (bytes):	21308
Entropy (8bit):	5.125166609416375
Encrypted:	false
SSDEEP:	192:Et10FTvwEF078svRIVJDgVZfZyDy313RbbPuxtu4Hx+GeIJzun3zIZqwbBmn64So:Q1ioIVbUbKtto2lBZldnBR/aUAD
MD5:	CFCB140A815E2191977AED0DBC6F39BA
SHA1:	AFE60A90EB29E2F10532B4D003B90FB7FD9B845A
SHA-256:	AA4F46CC067E2EAE5AB15561714E9942C47BA80681F988E6494ED3F678CE5847
SHA-512:	50D53A02687BF06F2E6E21830FFF1225EE9052915318ACC4F76EC9C3DB7A11EA7CA0632FED55D70E0B19BE3E03B2C6AA6419E282988E68C2B45D0160CD142474
Malicious:	false
Reputation:	low
Preview:	(function(e){var c=false;var d="";var a="Do you really want to cancel the payment?";var b=function(g){if(typeof g.data==="string"){var f={};try{f=JSON.parse(g.data)}catch(g){}if(f.payrexx){jQuery.each(f.payrexx,function(h,i){switch(h){case"transaction":if(typeof i==="object"){e.fn.payrexxModal.transaction=i}break;case"closeModal":c=true;if(i){d=i}e.fn.payrexxModal.modalInstance.modalPx("hide");break;case"closeConfirmation":if(i){a=i}break}})}}};window.addEventListener("message",b,false);e.fn.payrexxModal=function(f){var g=e.extend({},e.fn.payrexxModal.defaults,f);e("head").append(e('<style type="text/css">html.payrexx-modal-open, html.payrexx-modal-open > body {\n overflow: hidden;\n}\n\n@media (max-width: 1024px) {\n html.payrexx-modal-open > body > *:not(#payrexx-modal):not(.px-modal-backdrop) {\n display: none;\n }\n}\n\n#payrexx-modal #payrexx-modal-iframe {\n display: block;\n visibility: hidden;\n width: 100%;\n border: 0;\n}\n\n#payrexx-modal #payrexx

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.7737797132873965
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbtt6vYk2ZRMRJfHKERSAEtvxLrXZiLKY8KWWVPK6c4NGL:hxuJzhqIzyYk+qRU4zEdxXZiqNGPK34A
MD5:	0BBE41BEE2A58977B6CD82BEDA9F0802
SHA1:	679FB5A7E9C99AE37216C957D7817B031E1C2223
SHA-256:	18D2717BB21F35F4D470E43F79B7017699CE5DCD0DC0BF8F6A2DEEC98E94577D
SHA-512:	8D87BB9174DF9A47681E3414EC57732727DBD05E89B86EA5993FCB1867634EF46A0442CDBA67CFD5D0DD3612181D0DC28423C47F28E057A901B8DD8DD452FF4E
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta charset="utf-8">.<title>Error</title>.</head>.<body>.<pre>Cannot GET /sessions/ping</pre>.</body>.</html>.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7486), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	7577
Entropy (8bit):	5.399227001332063
Encrypted:	false
SSDEEP:	96:f+aqyTfA8qjnhZg5Pq0wAmtBwDezHHkwWoO1GroXY71SUcuhjG2Ac6nMEtOI4T27:GaffAZhZg5PqTAoBwD6t/Vcux8c6CZqB
MD5:	C6F29826BD4723BCB436DAF56E160B6C
SHA1:	FF747AD1A42F9E9F5220E6FA1AA10583031C569B
SHA-256:	CF3E999E02C9C5A8DBF5D2241FF96D27C49BF2E0A1F01214B6D94A1D12791E04
SHA-512:	7BB4A9A5AA64A385A1AE8B982F79E0BB7E3F2866F0CC9F67831EA3A65C7949D4D4B6CBB316A996BDA2CAFA18DA5F7E865F1874F06CE2F430EC00BAFBDACA0475
Malicious:	false
Reputation:	low
URL:	https://pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.min.js
Preview:	(function(a,b){if(typeof define==="function"&&define.amd){define([],b)}else{if(typeof module==="object"&&module.exports){module.exports=b()}else{a.SecureFields=b()}}}(typeof self!=="undefined"?self:this,function(){return function(E){var C={};var B=h();var H={};var y={TOKENIZE:"TOKENIZE",PAY:"PAY",REGISTER:"REGISTER"};var d="/upp/payment/SecureFields",e,s,g,f,p,c,A,G,q,z,w;function D(){e={};s={};g=[];p=false;G="";w=null;f=null;H={};z=false}D();function l(){if(window.console&&e.debug){var I=Array.prototype.slice.call(arguments).map(function(J){return(typeof J==="object")?JSON.stringify(J,null,"\t"):J});I.splice(1,0,"color: blue");I[0]="%c"+I[0];console.log.apply(console,I)}}function h(){return Math.random().toString(36).substr(2,9)}function m(I){return"securefields-"+B+"--"+I}C.initTokenize=function(K,J,I){q=y.TOKENIZE;n(K,null,J,I)};C.initPay=function(K,J,I){q=y.PAY;n(K,null,J,I)};C.initRegister=function(K,J,I){q=y.REGISTER;n(K,null,J,I)};C.init=function(K,J,I){n(null,K,J,I)};function n

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	281796
Entropy (8bit):	7.999160468432722
Encrypted:	true
SSDEEP:	6144:B+CQVouVwlJ2hwVeTOU4ZQV0U16s/FB7C0gFEQlqLKKqZlTszmv5c8:aouVwiqVoOoV0U1/7oFEQldKZiv5c8
MD5:	A013AA5320533F411C7ED3702817427F
SHA1:	38BC33D1DB53A1EF09B0BB56D668D2E842485D94
SHA-256:	36AEAFBD9DA40052DB7CB4A4FC60A8ECF3337C2E98A19C2457E84E92883149AE
SHA-512:	7D732F4E4450B5F720A0C00958F6775C46C86195094EA955F0CA4A22B25A51C0B529F4F8F80A52CEC91982DF8A5784E010C2C3C45093F07F1D7198A291CE7DD4
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/media/background.89952b18428ee1e72fb5.webp
Preview:	RIFF.L..WEBPVP8 .L..p......8....%....^.....~.....g.................D+....}.._&..<5...S...t..u.....s.....K.S.....y'.w.vtxW.?.;..............G.......O.......e.....w..d....y.........z.....................?~?.}......'....p>......O........_._....'..........._....{.~K.?.w._a...........+...OvO........_._.?...........~Q.........w._.?......7.s.o.......?............./...'.....w.: ......eq..Z...WR..y.....i;......N0q.w.....d..-..`ADC...(.b]...3..p....EA..~IY.h.b5t.v..-..\ ..8.&.?..X.qNWB..R...G.u5....V...~.#1~G..;..@Y...X..?../.4. ..:....yo.v\|...6(.7...go:.0...g!.....XK.....#....LX..........2..>..../........L0..<..)..........E.~.\._......0.......0..bN.M.....N.k..k..H..@G...~......\|..Z..A..e.-.-..0...=..f....... .............f.uf.Q..9r.-.w..Z...oy..Eg:.t1O.....i....R......8.o.}..vfEWR....esA.l!&...U^zO.....8`..0.>7[...GiW,0 .@33*o.0...YR..v%h$.5G.......B.\|.:.....Co....wN......MT..Pb.X..F...}{...M.X....f......?..k..$9.q......_...>.e.L>.nk8~'. G..>p...

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4824), with no line terminators
Category:	dropped
Size (bytes):	4824
Entropy (8bit):	5.831034095559939
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU78jTfeMM:1DY0hf1bT47OIqWb1+8jTfeMM
MD5:	D4933BB8B92585D97ED30BE8040606FE
SHA1:	412478824630F48FC6FE3F5DCFC5ED1D08A3B148
SHA-256:	BCA8BBFFD2C3B7421D6437CAAACF5028425F4D9DF143C48A5DDDF5C4080EA618
SHA-512:	19A3B1516708911CBF754FB487FABEBB86A0E4189522EEA37E3DDBCD203F5DF3C1B746CE176E9B0A5037629EF91A5C2C575E30F682A64DDA0E9F52EDDD04CE4E
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7032), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	51949
Entropy (8bit):	5.34712980979754
Encrypted:	false
SSDEEP:	768:9y6Zn7bQa78Amqtzn9BzVIAa7mviZVL9TVm5o6SJNQ6z:zZn7Txtj/zVIAbqfBVm5o6Snz
MD5:	F93F883037EE40B66D8C875912EA0528
SHA1:	B08942862D1B1A1F300415360EC4DC294DF51803
SHA-256:	641450EBC3705A56F771D5EEC9C7188707B4E48945C6879D3CF3607FD5671D9D
SHA-512:	35808E51C568EE6DBC50433D9215BA50E5317A450E437ECB46A659F7B3DD8F4DD2CBFA23BD7AE04AD4400A4D77DA26672B0BE725B5951869036902E773F2CF36
Malicious:	false
Reputation:	low
URL:	https://pay.datatrans.com/upp/payment/js/paypal-button-1.0.0.js
Preview:	parcelRequire=function(e,r,t,n){var i,o="function"==typeof parcelRequire&&parcelRequire,u="function"==typeof require&&require;function f(t,n){if(!r[t]){if(!e[t]){var i="function"==typeof parcelRequire&&parcelRequire;if(!n&&i)return i(t,!0);if(o)return o(t,!0);if(u&&"string"==typeof t)return u(t);var c=new Error("Cannot find module '"+t+"'");throw c.code="MODULE_NOT_FOUND",c}p.resolve=function(r){return e[t][1][r]\|\|r},p.cache={};var l=r[t]=new f.Module(t);e[t][0].call(l.exports,p,l,l.exports,this)}return r[t].exports;function p(e){return f(p.resolve(e))}}f.isParcelRequire=!0,f.Module=function(e){this.id=e,this.bundle=f,this.exports={}},f.modules=e,f.cache=r,f.parent=o,f.register=function(r,t){e[r]=[function(e,r){r.exports=t},{}]};for(var c=0;c<t.length;c++)try{f(t[c])}catch(e){i\|\|(i=e)}if(t.length){var l=f(t[t.length-1]);"object"==typeof exports&&"undefined"!=typeof module?module.exports=l:"function"==typeof define&&define.amd?define(function(){return l}):n&&(this[n]=l)}if(parcelRequire

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50183
Entropy (8bit):	4.908458195945145
Encrypted:	false
SSDEEP:	768:ZEmIoWKp+AnvggQAZ+cviybN37vyvUbvClWLvLCvjuJGv1ey7856Xv:ZEmImZ+TyMlnuiWW
MD5:	A38F20E2DF1909B918FDACB3312B72E0
SHA1:	B4E0ED85C3C3B4E89A42F708F6C81B6CF58035B0
SHA-256:	C4FD80B003FE4B4D99A45B88E5A12F5A2D83ADA6DFD38C5115EFEF65822DABE3
SHA-512:	DBF85E7B147F7EE542DEAA8AEC8AF9028F0953C6765F0ACEAB0C9A118650D341A39D7671F7C4FFAC613D1F449D1614744A9CA0D90A4D1BC213935F263869A8D6
Malicious:	false
Reputation:	low
URL:	https://api.gleap.io/config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO
Preview:	{"flowConfig":{"newsMenuLabel":"News","checklistMenuLabel":"VIP User","featureRequestsMenuLabel":"Roadmap","allConversationsMenuLabel":"Messages","knowledgeBaseMenuLabel":"Help","welcomeText":"How can we help?","replyTime":"within a few minutes","color":"#012747","backgroundColor":"#f3faff","headerColor":"#2142E7","buttonColor":"#e32900","borderRadius":19,"buttonX":20,"buttonY":20,"operatorAvatarImage":"https://staticfiles.gleap.io/gfeedback_widgets/aHNVMhW648GjxmVjdr9rFMi7vxByShcI35VhsToNLiOXu0iZB9kIoWwhZ8tj9MiFVdR5NiQ7Vtv.png","operatorName":"Kai","logo":"https://staticfiles.gleap.io/gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png","buttonLogo":"","customCSS":"","hideFeatureRequests":true,"hideNews":true,"hideAllConversations":false,"hideKnowledgeBase":true,"enableOpeningTimesBot":true,"openingTimes":[{"day":"Weekdays","openingTime":"09:00","closingTime":"17:00"}],"timezone":"Europe/Zurich","showOnlineStatus":true,"spamProtection":tru

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16032), with no line terminators
Category:	dropped
Size (bytes):	16032
Entropy (8bit):	5.712372633407957
Encrypted:	false
SSDEEP:	384:6YgaVMISVYPP7v+UBxATBBJbw7E2aCdaEC:6sVMBUzv+U/sBbw7EH
MD5:	E80EE1A69FD6AEEFE618FA9175A9FCE6
SHA1:	0A990A55515198713BA89D70D92B07534561133F
SHA-256:	CA79D058A7E466F25AE3B71AC8B913FA8E8B24453ABF27EDB683C1DF00E20965
SHA-512:	244585F4CB84DC12AB69BC4BBBF49B34F4B194D933A0872C0528C41998D3A9FCC1C0856771FA2D253489CF6C17C6654BEC2EF6B870824DEDDA76944E2AC8650F
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3046],{74853:function(e,t,n){n.d(t,{s:function(){return m}});var i,a=n(85554),r=n(47313),o=["title","titleId"];function l(){return l=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(e[i]=n[i])}return e},l.apply(this,arguments)}function s(e,t){if(null==e)return{};var n,i,a=function(e,t){if(null==e)return{};var n,i,a={},r=Object.keys(e);for(i=0;i<r.length;i++)n=r[i],t.indexOf(n)>=0\|\|(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(i=0;i<r.length;i++)n=r[i],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}function c(e,t){var n=e.title,a=e.titleId,c=s(e,o);return r.createElement("svg",l({width:22,height:24,viewBox:"0 0 22 24",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":a},c

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2938), with no line terminators
Category:	downloaded
Size (bytes):	2938
Entropy (8bit):	5.191726055149565
Encrypted:	false
SSDEEP:	48:0EPHjpv3EywovFHqrYMxcwM21yzACjC75xRGSTBUCwu3zJzKrVazr0:zPHjrMJX0jC75xRGSTBUlYpKVO0
MD5:	6BC66FAF4EF04BAA93A407A9EAE17CDE
SHA1:	92A8872633D6B49E0ABD7C99BDA0D299B39022C4
SHA-256:	619525C2F61FE49D5B4B324DB94E5392019087CF61038AF3110642E475D6EA88
SHA-512:	6A08247A6EEAA65EBF52251D9F093D2E97031E8DFF1942E8A0E5D8D85109A2F6A83A9A9D5535D5436886374D024617AB586C0DCE8C56F4B647B7733DD61FDD2D
Malicious:	false
Reputation:	low
URL:	https://www.wesendit.com/?timestamp=1731385167183
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta property="og:title" content="Secure Swiss File Transfer & Decentralized Storage \| WeSendit"/><meta property="og:description" content="Experience secure file transfer and decentralized storage with WeSendit, the #1 provider worldwide. Share and store large files effortlessly. Transfer up to 5GB for free."/><meta name="theme-color" content="#000000"/><meta property="og:image" content="/share.jpg"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_EN"/><meta http-equiv="X-UA-Compatible" content="IE=9"/><script>!func

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	244375
Entropy (8bit):	5.4541358501238815
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713EN:pfLeYc+PJxH8NNfFcrHurPK713C
MD5:	98A1AA6D0155EA8597C93CD050CE5808
SHA1:	C844C1CBAA79A4F09F50E2DF3F648B8B5AA6CB5E
SHA-256:	527BF3DACC5EB62211130FE4BF315C682861320AB25B4AA2EFE6EA87A760DB8C
SHA-512:	BB01621E0CBE1185D2167CEDB9517A29FE6537AE0E23254243DF90F36A66A0E1D91034E9A772E76C94FC1E1E969DB9082177777EC6085A752B3BCB9BC8B98BC2
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42630), with no line terminators
Category:	downloaded
Size (bytes):	42630
Entropy (8bit):	5.16821853091734
Encrypted:	false
SSDEEP:	768:bbD9mOyyk4ufYu0Uvk6ogqpCsoUAng6oAK1Pm1Pl1PM1PA1P89DwGQr+x:bbF+Nlvk6oLpCsoPng6oTRmRlRMRAR8N
MD5:	220916AF03983DD5B9283C7C0F8A7BDC
SHA1:	6E87DC376B2D5EEDBFC4B29831714740F1997C68
SHA-256:	6C808FAA514DF688A211FBC71E191E3CAB4C06942D3375F52536755F314742E5
SHA-512:	E495FBCF61392A6C4EEDB2E3B933B22F37B5C1E4D5C3FA745851783B434F31D9308664708F38346DDF4EEFB41AEE09DF980498A16F8E56397E99C2EFD0D7455C
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/6458.c8caa6c4.chunk.js
Preview:	"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6458],{4903:function(i,t,a){a.d(t,{r:function(){return y}});var e,n,r,s,o,m,x=a(47313),l=["title","titleId"];function d(){return d=Object.assign?Object.assign.bind():function(i){for(var t=1;t<arguments.length;t++){var a=arguments[t];for(var e in a)Object.prototype.hasOwnProperty.call(a,e)&&(i[e]=a[e])}return i},d.apply(this,arguments)}function k(i,t){if(null==i)return{};var a,e,n=function(i,t){if(null==i)return{};var a,e,n={},r=Object.keys(i);for(e=0;e<r.length;e++)a=r[e],t.indexOf(a)>=0\|\|(n[a]=i[a]);return n}(i,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(i);for(e=0;e<r.length;e++)a=r[e],t.indexOf(a)>=0\|\|Object.prototype.propertyIsEnumerable.call(i,a)&&(n[a]=i[a])}return n}function c(i,t){var a=i.title,c=i.titleId,y=k(i,l);return x.createElement("svg",d({width:80,height:80,viewBox:"0 0 80 80",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":c},y),

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.867816035402674
Encrypted:	false
SSDEEP:	3:XzOYNRf6jixHJD3OYNRf6jiwdKVRNmdUngMPYf2:Xzjj6jixHN3jj6jifrm+nvI2
MD5:	CE59D1DDEFA88C64E2391B1669F984A4
SHA1:	FA680BA7A9F0A363EC80042D4947F34939290B71
SHA-256:	72B599E111F14A80061C1849E93D0C7812201A046B88A227BD243DE75CE61BD3
SHA-512:	5D05552744F172FDB120360193A9B2152A00F162652B3556EAE06CEAC95A409B45A1A7E82287FC062BDA4F8D3312F072306ED9EBD0EB9A6CE9F8865F36A91B42
Malicious:	false
Reputation:	low
URL:	https://secure_sharing0documentpreview.wesendit.com/static/js/5883.38419619.chunk.js
Preview:	(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[5883],{35883:function(){}}]);

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	244375
Entropy (8bit):	5.4541358501238815
Encrypted:	false
SSDEEP:	3072:pfLeYH8AtPJ137OeR8NteqZEbkxZNsucrl0xYurPK713EN:pfLeYc+PJxH8NNfFcrHurPK713C
MD5:	98A1AA6D0155EA8597C93CD050CE5808
SHA1:	C844C1CBAA79A4F09F50E2DF3F648B8B5AA6CB5E
SHA-256:	527BF3DACC5EB62211130FE4BF315C682861320AB25B4AA2EFE6EA87A760DB8C
SHA-512:	BB01621E0CBE1185D2167CEDB9517A29FE6537AE0E23254243DF90F36A66A0E1D91034E9A772E76C94FC1E1E969DB9082177777EC6085A752B3BCB9BC8B98BC2
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-EHZSQKTF1P&gacid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=326597971
Preview:	<html></html>

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 420, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	157052
Entropy (8bit):	0.873719709635034
Encrypted:	false
SSDEEP:	192:Bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbz:
MD5:	51A71C6A659CFA2F2AD5C3F29B7C18F8
SHA1:	E2ECA2A3C2AAC5DAF04D2BC499BF4CA13F41959D
SHA-256:	66B2F46FC9BBF7E51BB9B1F25C48D91EFB7B27888DB70EF766D3EAB34FADD3FB
SHA-512:	4BE7661632506FB32C3FCC4523A8451EEBDEDD97C8B00FBE3CBA2BF64F982FED98EBCEFC5747E69D0DFDCB5E7175129B71EE352E5D1E2E70DFD15D7375DAB765
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............I.......PLTE...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................@.......tRNS...................................................................................................................................................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11882)
Category:	downloaded
Size (bytes):	13131
Entropy (8bit):	5.399072964831191
Encrypted:	false
SSDEEP:	192:qbnOw5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRgWERcxzPuiv3N6:qbnOvjURHjXo2BtcCuocxz/v3N6
MD5:	088981EA3715387925431207550A1E56
SHA1:	34D88D7A01048E7789F7B2F395B6BDFFEEF1324E
SHA-256:	F811F71E0C2A81E9DEFCA8E8B79D67067D6F4CCEF9C97AA4C3A64AC2857CF95C
SHA-512:	6177F598B9637D5A9201E46E353839FE48131499A22F1E59EEB88394B25FC4DB581DC76DF42502F557BB2B52C7595AC2246AEC9E1B7E1BBC05A270E1BC580340
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-3708882.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3708882,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","setting

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.087276690123768
Encrypted:	false
SSDEEP:	24:tT8kuXMMqjSn5BDlHtb018bBGFMKW4TKsnNPVLkoS/fLfyp7AVicSmbwSAFjea7s:ehdG18SMKW5ygB+TOxa7adQiCavv
MD5:	F3648F46FE4E38B0DE24285FEF86B3D5
SHA1:	413C546D2E39B34391FCBD6580A6DA38C0C56D32
SHA-256:	BA724FC2CFD6F1801A7FB3A4A5348041062F330D00D9D651E07AEEC171246938
SHA-512:	9F50E4FA04F8582EB92DDBD742F8A931DFC079B0E163F4B104E3491B69545A523941A3FF2BB1C0BEB9946D47E705744825FA57B3D400D51DEE64712E3D962BA3
Malicious:	false
Reputation:	low
Preview:	<svg width="18" height="22" viewBox="0 0 18 22" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M8.34663 1.74664C8.34663 1.27536 8.72868 0.893311 9.19996 0.893311C9.67124 0.893311 10.0533 1.27536 10.0533 1.74664V2.59998C10.0533 3.07126 9.67124 3.45331 9.19996 3.45331C8.72868 3.45331 8.34663 3.07126 8.34663 2.59998V1.74664ZM12.9952 12.8634C13.8184 11.9548 14.32 10.7493 14.32 9.42664C14.32 6.59895 12.0277 4.30664 9.19996 4.30664C6.37226 4.30664 4.07996 6.59895 4.07996 9.42664C4.07996 10.7493 4.58149 11.9548 5.40475 12.8634C5.90923 13.4201 6.33662 14.0732 6.41138 14.8208C6.51594 15.8664 7.1469 16.8426 8.18261 17.0204C8.51325 17.0771 8.85317 17.1067 9.2 17.1067C9.54678 17.1067 9.88666 17.0771 10.2173 17.0204C11.253 16.8427 11.884 15.8665 11.9885 14.8208C12.0633 14.0732 12.4907 13.4201 12.9952 12.8634ZM11.5456 19.2506C11.5845 18.8612 11.2076 18.5586 10.8251 18.641C10.3013 18.7539 9.75758 18.8133 9.2 18.8133C8.6424 18.8133 8.09868 18.7539 7.57

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2917 x 2918, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	115807
Entropy (8bit):	7.21390869368252
Encrypted:	false
SSDEEP:	3072:+i7RZ09yP2BnXd026RWya0b7XDf41G8L9RW+:+WwcP21XqRWyHknLt
MD5:	2A1839BE22CAD55D4347633177859901
SHA1:	EA85BFE53545F9CAA63DE58D7951E03E289180FE
SHA-256:	88A3E9BFC9FB31DBABFCEBD04BEB2184CA8DCC833CE91C1694DC0FFFAC426323
SHA-512:	7731DE8CDAD9E0271FFDB29B0B8A8055097342488B715ED40A4BEEEAF75E4B7B67D8234B54CDF9261F1754BB43CAFE471122EAE7B345B3F512D2F0B6AC13E075
Malicious:	false
Reputation:	low
URL:	https://staticfiles.gleap.io/gfeedback_widgets/YEmLm9LpZMim7869NIUMjxhFmqLirqPdxYwQrwmNxwFGvV8pTTwrP8sZGQnS5lGnIwchcSqBytC.png
Preview:	.PNG........IHDR...e...f............pHYs...#...#.x.?v.. .IDATx....Q$Y..}.......v.A.D....PhP......H..)A.?5H.......5.>..E.....k...]=e..O....?..........^J..F..;.s......}D,...Yvms.........#&..........."....?.S....<F.....?..o.......?.....`.D......k...z.....vd.....e..W-^..D.......%......x..Q.../......../C.]..u.......(.........aD..?..k.....~O/.s...q..k..W......&A..........?.........o..k.........e.....;.r9......W/\.?.l.f.9.^.\.^..}..r.C.....vC.......].e5.~.h.2..Z.....h.....k.........$.......$...Y.^.~.v..{{&.......x{....................../....G&....7.....m.....O.l........j`.._.N\|....q...j......X....`.D.....0.+.....{...o\...g.6........'........].L.]..........#.......I....M.s?"...#{....K...}.6K.......=Q6....lQ.e5.>^.t..z...x.o].^tm.0L......Q6....l@.x..\....Y..e.5..l..............R..+.....M.l/.C.._wm..I....x.Q6.....@.e.../...s.`..^...^............D.........'f...._.^.P..h.k.[#....`.D...........G>...!.5._.y...X......Q6.....T.......<.m....@[..............5...`.Vc.?..mn......

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	dropped
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 12, 2024 05:19:22.026387930 CET	192.168.2.4	1.1.1.1	0xd643	Standard query (0)	secure_sharing0documentpreview.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:22.027359009 CET	192.168.2.4	1.1.1.1	0x67c6	Standard query (0)	secure_sharing0documentpreview.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:23.193270922 CET	192.168.2.4	1.1.1.1	0xa937	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.193434954 CET	192.168.2.4	1.1.1.1	0xad87	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:23.193857908 CET	192.168.2.4	1.1.1.1	0x330b	Standard query (0)	media.payrexx.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.193990946 CET	192.168.2.4	1.1.1.1	0xcdc	Standard query (0)	media.payrexx.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:23.194432020 CET	192.168.2.4	1.1.1.1	0x9ec0	Standard query (0)	widget.crowdswap.org	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.194555044 CET	192.168.2.4	1.1.1.1	0xee72	Standard query (0)	widget.crowdswap.org	65	IN (0x0001)	false
Nov 12, 2024 05:19:23.902334929 CET	192.168.2.4	1.1.1.1	0x6512	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.902882099 CET	192.168.2.4	1.1.1.1	0x605e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:23.929802895 CET	192.168.2.4	1.1.1.1	0xf130	Standard query (0)	pay.datatrans.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.930195093 CET	192.168.2.4	1.1.1.1	0x847f	Standard query (0)	pay.datatrans.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:24.268029928 CET	192.168.2.4	1.1.1.1	0x6760	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.268170118 CET	192.168.2.4	1.1.1.1	0x3b7b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:24.651969910 CET	192.168.2.4	1.1.1.1	0x1c82	Standard query (0)	widget.crowdswap.org	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.652164936 CET	192.168.2.4	1.1.1.1	0x1429	Standard query (0)	widget.crowdswap.org	65	IN (0x0001)	false
Nov 12, 2024 05:19:25.138576984 CET	192.168.2.4	1.1.1.1	0x7f2	Standard query (0)	a.trstplse.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:25.138756990 CET	192.168.2.4	1.1.1.1	0xffad	Standard query (0)	a.trstplse.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:25.149542093 CET	192.168.2.4	1.1.1.1	0x24cf	Standard query (0)	media.payrexx.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:25.149923086 CET	192.168.2.4	1.1.1.1	0x2eaa	Standard query (0)	media.payrexx.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:26.547509909 CET	192.168.2.4	1.1.1.1	0x303f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.547657967 CET	192.168.2.4	1.1.1.1	0x42d8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:26.568941116 CET	192.168.2.4	1.1.1.1	0x7457	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.569149017 CET	192.168.2.4	1.1.1.1	0x671a	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:26.637092113 CET	192.168.2.4	1.1.1.1	0x5d6d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.637291908 CET	192.168.2.4	1.1.1.1	0x12c4	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:27.511866093 CET	192.168.2.4	1.1.1.1	0x7c3	Standard query (0)	api.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.512557983 CET	192.168.2.4	1.1.1.1	0x6a0e	Standard query (0)	api.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:19:27.534940958 CET	192.168.2.4	1.1.1.1	0xdd71	Standard query (0)	o4503915977375744.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.535382986 CET	192.168.2.4	1.1.1.1	0x48e3	Standard query (0)	o4503915977375744.ingest.sentry.io	65	IN (0x0001)	false
Nov 12, 2024 05:19:27.866079092 CET	192.168.2.4	1.1.1.1	0x93a5	Standard query (0)	api.trstplse.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.866837025 CET	192.168.2.4	1.1.1.1	0x2ab9	Standard query (0)	api.trstplse.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:28.083782911 CET	192.168.2.4	1.1.1.1	0x9e10	Standard query (0)	api-prod.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.084532976 CET	192.168.2.4	1.1.1.1	0x28f9	Standard query (0)	api-prod.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:28.085418940 CET	192.168.2.4	1.1.1.1	0xe181	Standard query (0)	www.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.085647106 CET	192.168.2.4	1.1.1.1	0x999c	Standard query (0)	www.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:28.947276115 CET	192.168.2.4	1.1.1.1	0xcd7	Standard query (0)	pay.datatrans.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.947776079 CET	192.168.2.4	1.1.1.1	0x335d	Standard query (0)	pay.datatrans.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.004113913 CET	192.168.2.4	1.1.1.1	0xd023	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.004326105 CET	192.168.2.4	1.1.1.1	0xc7e1	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.020695925 CET	192.168.2.4	1.1.1.1	0x2454	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.021045923 CET	192.168.2.4	1.1.1.1	0x3241	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.126827955 CET	192.168.2.4	1.1.1.1	0xf34b	Standard query (0)	secure_sharing0documentpreview.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.127017975 CET	192.168.2.4	1.1.1.1	0x34d3	Standard query (0)	secure_sharing0documentpreview.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.130429029 CET	192.168.2.4	1.1.1.1	0xf289	Standard query (0)	a.trstplse.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.130624056 CET	192.168.2.4	1.1.1.1	0xd791	Standard query (0)	a.trstplse.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.137593031 CET	192.168.2.4	1.1.1.1	0x44b1	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.137758970 CET	192.168.2.4	1.1.1.1	0x667b	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.140197039 CET	192.168.2.4	1.1.1.1	0xe6b2	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.140342951 CET	192.168.2.4	1.1.1.1	0xf987	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.145984888 CET	192.168.2.4	1.1.1.1	0x56b1	Standard query (0)	o4503915977375744.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.146193027 CET	192.168.2.4	1.1.1.1	0x3552	Standard query (0)	o4503915977375744.ingest.sentry.io	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.325671911 CET	192.168.2.4	1.1.1.1	0xf3e5	Standard query (0)	api-prod.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.325819016 CET	192.168.2.4	1.1.1.1	0xdd70	Standard query (0)	api-prod.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.330131054 CET	192.168.2.4	1.1.1.1	0x9fa5	Standard query (0)	www.wesendit.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.330274105 CET	192.168.2.4	1.1.1.1	0x9d43	Standard query (0)	www.wesendit.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.390398979 CET	192.168.2.4	1.1.1.1	0xa670	Standard query (0)	relay.walletconnect.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.390803099 CET	192.168.2.4	1.1.1.1	0x8a70	Standard query (0)	relay.walletconnect.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:29.833112955 CET	192.168.2.4	1.1.1.1	0x8e70	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.833256006 CET	192.168.2.4	1.1.1.1	0xa23b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:33.055704117 CET	192.168.2.4	1.1.1.1	0xeaa1	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.055991888 CET	192.168.2.4	1.1.1.1	0xb0a7	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:33.474119902 CET	192.168.2.4	1.1.1.1	0x3e62	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.474247932 CET	192.168.2.4	1.1.1.1	0x41aa	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:35.393963099 CET	192.168.2.4	1.1.1.1	0x610e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.394366980 CET	192.168.2.4	1.1.1.1	0x873	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:35.553072929 CET	192.168.2.4	1.1.1.1	0x9e69	Standard query (0)	api.web3modal.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.553493977 CET	192.168.2.4	1.1.1.1	0x165c	Standard query (0)	api.web3modal.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:35.764921904 CET	192.168.2.4	1.1.1.1	0xd6c1	Standard query (0)	api.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.765593052 CET	192.168.2.4	1.1.1.1	0xbc1	Standard query (0)	api.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:19:37.730350018 CET	192.168.2.4	1.1.1.1	0xbe60	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.730607986 CET	192.168.2.4	1.1.1.1	0xdcc5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:38.212116003 CET	192.168.2.4	1.1.1.1	0x2f51	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.212696075 CET	192.168.2.4	1.1.1.1	0x1e36	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:38.253983974 CET	192.168.2.4	1.1.1.1	0xc992	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.254208088 CET	192.168.2.4	1.1.1.1	0x71d8	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 12, 2024 05:19:39.444824934 CET	192.168.2.4	1.1.1.1	0x983c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:39.444875956 CET	192.168.2.4	1.1.1.1	0x7c2f	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Nov 12, 2024 05:19:39.446666002 CET	192.168.2.4	1.1.1.1	0x3782	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:39.446815014 CET	192.168.2.4	1.1.1.1	0xc709	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:21.491168976 CET	192.168.2.4	1.1.1.1	0x61ab	Standard query (0)	messenger.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:21.491364002 CET	192.168.2.4	1.1.1.1	0x3cc6	Standard query (0)	messenger.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:22.370479107 CET	192.168.2.4	1.1.1.1	0x2f1f	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:22.370662928 CET	192.168.2.4	1.1.1.1	0x1d9a	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:23.136698961 CET	192.168.2.4	1.1.1.1	0x32a4	Standard query (0)	messenger.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:23.136698961 CET	192.168.2.4	1.1.1.1	0x9266	Standard query (0)	messenger.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.248392105 CET	192.168.2.4	1.1.1.1	0xa87e	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.248723984 CET	192.168.2.4	1.1.1.1	0x966e	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.174367905 CET	192.168.2.4	1.1.1.1	0xe20c	Standard query (0)	api.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.174679995 CET	192.168.2.4	1.1.1.1	0x87f0	Standard query (0)	api.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.292726994 CET	192.168.2.4	1.1.1.1	0x5ec5	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.293164015 CET	192.168.2.4	1.1.1.1	0xe83f	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.294151068 CET	192.168.2.4	1.1.1.1	0x6f9b	Standard query (0)	staticfiles.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.295058966 CET	192.168.2.4	1.1.1.1	0xfe9c	Standard query (0)	staticfiles.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.307601929 CET	192.168.2.4	1.1.1.1	0x1a46	Standard query (0)	gleapcdn.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.308784962 CET	192.168.2.4	1.1.1.1	0xccf8	Standard query (0)	gleapcdn.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.352186918 CET	192.168.2.4	1.1.1.1	0xbd06	Standard query (0)	ws-eu.pusher.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.352426052 CET	192.168.2.4	1.1.1.1	0xd541	Standard query (0)	ws-eu.pusher.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.382817030 CET	192.168.2.4	1.1.1.1	0x9d4d	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.382966995 CET	192.168.2.4	1.1.1.1	0x1c59	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.383711100 CET	192.168.2.4	1.1.1.1	0xaf89	Standard query (0)	staticfiles.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.393033981 CET	192.168.2.4	1.1.1.1	0xd95a	Standard query (0)	staticfiles.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.427274942 CET	192.168.2.4	1.1.1.1	0xed3b	Standard query (0)	gleapcdn.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.459012032 CET	192.168.2.4	1.1.1.1	0x7c68	Standard query (0)	gleapcdn.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:26.459566116 CET	192.168.2.4	1.1.1.1	0x339b	Standard query (0)	ws-eu.pusher.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.460267067 CET	192.168.2.4	1.1.1.1	0xbb35	Standard query (0)	ws-eu.pusher.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:28.307576895 CET	192.168.2.4	1.1.1.1	0x423	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:28.307795048 CET	192.168.2.4	1.1.1.1	0x6c14	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:28.808646917 CET	192.168.2.4	1.1.1.1	0xd96	Standard query (0)	sockjs-eu.pusher.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:28.809075117 CET	192.168.2.4	1.1.1.1	0x8185	Standard query (0)	sockjs-eu.pusher.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:29.061109066 CET	192.168.2.4	1.1.1.1	0xe7c6	Standard query (0)	i2.wp.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.061399937 CET	192.168.2.4	1.1.1.1	0x223c	Standard query (0)	i2.wp.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:29.260787010 CET	192.168.2.4	1.1.1.1	0x55c5	Standard query (0)	staticfiles.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.260965109 CET	192.168.2.4	1.1.1.1	0x3d5c	Standard query (0)	staticfiles.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:29.262696028 CET	192.168.2.4	1.1.1.1	0x7748	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.262902021 CET	192.168.2.4	1.1.1.1	0xa33a	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 12, 2024 05:20:29.263478994 CET	192.168.2.4	1.1.1.1	0x24a4	Standard query (0)	gleapcdn.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.263657093 CET	192.168.2.4	1.1.1.1	0xac5d	Standard query (0)	gleapcdn.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:29.267534971 CET	192.168.2.4	1.1.1.1	0x88a8	Standard query (0)	www.gravatar.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.267724991 CET	192.168.2.4	1.1.1.1	0xb852	Standard query (0)	www.gravatar.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:30.703758955 CET	192.168.2.4	1.1.1.1	0x7bc3	Standard query (0)	api.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:30.707350969 CET	192.168.2.4	1.1.1.1	0x7325	Standard query (0)	api.gleap.io	65	IN (0x0001)	false
Nov 12, 2024 05:20:30.921746969 CET	192.168.2.4	1.1.1.1	0xc9f2	Standard query (0)	i2.wp.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:30.922249079 CET	192.168.2.4	1.1.1.1	0x53ee	Standard query (0)	i2.wp.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:35.903579950 CET	192.168.2.4	1.1.1.1	0x95f9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:35.904087067 CET	192.168.2.4	1.1.1.1	0x3e78	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 12, 2024 05:20:42.830954075 CET	192.168.2.4	1.1.1.1	0xfb33	Standard query (0)	api.gleap.io	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:42.831183910 CET	192.168.2.4	1.1.1.1	0x74c6	Standard query (0)	api.gleap.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 12, 2024 05:19:22.044635057 CET	1.1.1.1	192.168.2.4	0xd643	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.46	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:22.044635057 CET	1.1.1.1	192.168.2.4	0xd643	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:22.044635057 CET	1.1.1.1	192.168.2.4	0xd643	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:22.044635057 CET	1.1.1.1	192.168.2.4	0xd643	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.199841976 CET	1.1.1.1	192.168.2.4	0xa937	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.199841976 CET	1.1.1.1	192.168.2.4	0xa937	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.200525999 CET	1.1.1.1	192.168.2.4	0xad87	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:23.203016043 CET	1.1.1.1	192.168.2.4	0x9ec0	No error (0)	widget.crowdswap.org		172.67.173.54	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.203016043 CET	1.1.1.1	192.168.2.4	0x9ec0	No error (0)	widget.crowdswap.org		104.21.30.157	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.204581022 CET	1.1.1.1	192.168.2.4	0xee72	No error (0)	widget.crowdswap.org			65	IN (0x0001)	false
Nov 12, 2024 05:19:23.219971895 CET	1.1.1.1	192.168.2.4	0xcdc	No error (0)	media.payrexx.com	platform-lb2-new.payrexx.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:23.220562935 CET	1.1.1.1	192.168.2.4	0x330b	No error (0)	media.payrexx.com	platform-lb2-new.payrexx.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:23.220562935 CET	1.1.1.1	192.168.2.4	0x330b	No error (0)	platform-lb2-new.payrexx.com		52.29.111.249	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.220562935 CET	1.1.1.1	192.168.2.4	0x330b	No error (0)	platform-lb2-new.payrexx.com		35.156.206.228	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.909315109 CET	1.1.1.1	192.168.2.4	0x6512	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:23.909550905 CET	1.1.1.1	192.168.2.4	0x605e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:23.936589003 CET	1.1.1.1	192.168.2.4	0xf130	No error (0)	pay.datatrans.com		193.16.220.35	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.274631023 CET	1.1.1.1	192.168.2.4	0x6760	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.274631023 CET	1.1.1.1	192.168.2.4	0x6760	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.274678946 CET	1.1.1.1	192.168.2.4	0x3b7b	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:24.675609112 CET	1.1.1.1	192.168.2.4	0x1429	No error (0)	widget.crowdswap.org			65	IN (0x0001)	false
Nov 12, 2024 05:19:24.676531076 CET	1.1.1.1	192.168.2.4	0x1c82	No error (0)	widget.crowdswap.org		104.21.30.157	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:24.676531076 CET	1.1.1.1	192.168.2.4	0x1c82	No error (0)	widget.crowdswap.org		172.67.173.54	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:25.147497892 CET	1.1.1.1	192.168.2.4	0xffad	No error (0)	a.trstplse.com	trustpulse.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:25.152054071 CET	1.1.1.1	192.168.2.4	0x7f2	No error (0)	a.trstplse.com	trustpulse.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:25.152054071 CET	1.1.1.1	192.168.2.4	0x7f2	No error (0)	trustpulse.b-cdn.net		169.150.247.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:25.170197964 CET	1.1.1.1	192.168.2.4	0x2eaa	No error (0)	media.payrexx.com	platform-lb2-new.payrexx.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:25.176913023 CET	1.1.1.1	192.168.2.4	0x24cf	No error (0)	media.payrexx.com	platform-lb2-new.payrexx.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:25.176913023 CET	1.1.1.1	192.168.2.4	0x24cf	No error (0)	platform-lb2-new.payrexx.com		35.156.206.228	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:25.176913023 CET	1.1.1.1	192.168.2.4	0x24cf	No error (0)	platform-lb2-new.payrexx.com		52.29.111.249	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.554155111 CET	1.1.1.1	192.168.2.4	0x303f	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.554166079 CET	1.1.1.1	192.168.2.4	0x42d8	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:26.575496912 CET	1.1.1.1	192.168.2.4	0x7457	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:26.575496912 CET	1.1.1.1	192.168.2.4	0x7457	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.575496912 CET	1.1.1.1	192.168.2.4	0x7457	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.575496912 CET	1.1.1.1	192.168.2.4	0x7457	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.575496912 CET	1.1.1.1	192.168.2.4	0x7457	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:26.575867891 CET	1.1.1.1	192.168.2.4	0x671a	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:26.643814087 CET	1.1.1.1	192.168.2.4	0x12c4	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:26.643814087 CET	1.1.1.1	192.168.2.4	0x12c4	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:26.643814087 CET	1.1.1.1	192.168.2.4	0x12c4	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:26.644002914 CET	1.1.1.1	192.168.2.4	0x5d6d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:26.644002914 CET	1.1.1.1	192.168.2.4	0x5d6d	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.520085096 CET	1.1.1.1	192.168.2.4	0x7c3	No error (0)	api.gleap.io		67.207.79.245	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.557157993 CET	1.1.1.1	192.168.2.4	0xdd71	No error (0)	o4503915977375744.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.874309063 CET	1.1.1.1	192.168.2.4	0x93a5	No error (0)	api.trstplse.com		172.66.40.81	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.874309063 CET	1.1.1.1	192.168.2.4	0x93a5	No error (0)	api.trstplse.com		172.66.43.175	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:27.875468016 CET	1.1.1.1	192.168.2.4	0x2ab9	No error (0)	api.trstplse.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:28.111562967 CET	1.1.1.1	192.168.2.4	0xe181	No error (0)	www.wesendit.com		13.225.78.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.111562967 CET	1.1.1.1	192.168.2.4	0xe181	No error (0)	www.wesendit.com		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.111562967 CET	1.1.1.1	192.168.2.4	0xe181	No error (0)	www.wesendit.com		13.225.78.46	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.111562967 CET	1.1.1.1	192.168.2.4	0xe181	No error (0)	www.wesendit.com		13.225.78.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.112759113 CET	1.1.1.1	192.168.2.4	0x9e10	No error (0)	api-prod.wesendit.com		3.126.198.9	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.112759113 CET	1.1.1.1	192.168.2.4	0x9e10	No error (0)	api-prod.wesendit.com		3.122.152.118	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:28.973985910 CET	1.1.1.1	192.168.2.4	0xcd7	No error (0)	pay.datatrans.com		193.16.220.35	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011059046 CET	1.1.1.1	192.168.2.4	0xd023	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011059046 CET	1.1.1.1	192.168.2.4	0xd023	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011059046 CET	1.1.1.1	192.168.2.4	0xd023	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011059046 CET	1.1.1.1	192.168.2.4	0xd023	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011059046 CET	1.1.1.1	192.168.2.4	0xd023	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.011651993 CET	1.1.1.1	192.168.2.4	0xc7e1	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.027379036 CET	1.1.1.1	192.168.2.4	0x2454	No error (0)	td.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.139797926 CET	1.1.1.1	192.168.2.4	0xf289	No error (0)	a.trstplse.com	trustpulse.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.139797926 CET	1.1.1.1	192.168.2.4	0xf289	No error (0)	trustpulse.b-cdn.net		169.150.247.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.142071009 CET	1.1.1.1	192.168.2.4	0xd791	No error (0)	a.trstplse.com	trustpulse.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144172907 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144172907 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144172907 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144172907 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144172907 CET	1.1.1.1	192.168.2.4	0x44b1	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.144335985 CET	1.1.1.1	192.168.2.4	0x667b	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.146723986 CET	1.1.1.1	192.168.2.4	0xe6b2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.146723986 CET	1.1.1.1	192.168.2.4	0xe6b2	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.147110939 CET	1.1.1.1	192.168.2.4	0xf987	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:29.147110939 CET	1.1.1.1	192.168.2.4	0xf987	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:29.147110939 CET	1.1.1.1	192.168.2.4	0xf987	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:29.151976109 CET	1.1.1.1	192.168.2.4	0xf34b	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.151976109 CET	1.1.1.1	192.168.2.4	0xf34b	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.151976109 CET	1.1.1.1	192.168.2.4	0xf34b	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.151976109 CET	1.1.1.1	192.168.2.4	0xf34b	No error (0)	secure_sharing0documentpreview.wesendit.com		13.225.78.46	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.168071985 CET	1.1.1.1	192.168.2.4	0x56b1	No error (0)	o4503915977375744.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.348736048 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	www.wesendit.com		13.225.78.37	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.348736048 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	www.wesendit.com		13.225.78.46	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.348736048 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	www.wesendit.com		13.225.78.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.348736048 CET	1.1.1.1	192.168.2.4	0x9fa5	No error (0)	www.wesendit.com		13.225.78.63	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.375832081 CET	1.1.1.1	192.168.2.4	0xf3e5	No error (0)	api-prod.wesendit.com		3.69.70.211	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.375832081 CET	1.1.1.1	192.168.2.4	0xf3e5	No error (0)	api-prod.wesendit.com		3.124.71.201	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.397005081 CET	1.1.1.1	192.168.2.4	0xa670	No error (0)	relay.walletconnect.com		3.66.52.205	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.397005081 CET	1.1.1.1	192.168.2.4	0xa670	No error (0)	relay.walletconnect.com		3.73.141.134	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.397005081 CET	1.1.1.1	192.168.2.4	0xa670	No error (0)	relay.walletconnect.com		3.124.182.184	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:29.840186119 CET	1.1.1.1	192.168.2.4	0x8e70	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.062686920 CET	1.1.1.1	192.168.2.4	0xeaa1	No error (0)	script.hotjar.com		13.32.27.107	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.062686920 CET	1.1.1.1	192.168.2.4	0xeaa1	No error (0)	script.hotjar.com		13.32.27.21	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.062686920 CET	1.1.1.1	192.168.2.4	0xeaa1	No error (0)	script.hotjar.com		13.32.27.19	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.062686920 CET	1.1.1.1	192.168.2.4	0xeaa1	No error (0)	script.hotjar.com		13.32.27.54	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.480709076 CET	1.1.1.1	192.168.2.4	0x3e62	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:33.480936050 CET	1.1.1.1	192.168.2.4	0x41aa	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:35.400917053 CET	1.1.1.1	192.168.2.4	0x610e	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.400917053 CET	1.1.1.1	192.168.2.4	0x610e	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.400917053 CET	1.1.1.1	192.168.2.4	0x610e	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.400917053 CET	1.1.1.1	192.168.2.4	0x610e	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.560317993 CET	1.1.1.1	192.168.2.4	0x9e69	No error (0)	api.web3modal.com		104.18.29.72	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.560317993 CET	1.1.1.1	192.168.2.4	0x9e69	No error (0)	api.web3modal.com		104.18.28.72	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:35.562558889 CET	1.1.1.1	192.168.2.4	0x165c	No error (0)	api.web3modal.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:35.774064064 CET	1.1.1.1	192.168.2.4	0xd6c1	No error (0)	api.gleap.io		67.207.79.245	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.070764065 CET	1.1.1.1	192.168.2.4	0xdece	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.070764065 CET	1.1.1.1	192.168.2.4	0xdece	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.718414068 CET	1.1.1.1	192.168.2.4	0xf477	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:37.718414068 CET	1.1.1.1	192.168.2.4	0xf477	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.736954927 CET	1.1.1.1	192.168.2.4	0xbe60	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:37.736954927 CET	1.1.1.1	192.168.2.4	0xbe60	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:37.737294912 CET	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:37.737294912 CET	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:37.737294912 CET	1.1.1.1	192.168.2.4	0xdcc5	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:38.218961954 CET	1.1.1.1	192.168.2.4	0x2f51	No error (0)	script.hotjar.com		13.32.27.19	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.218961954 CET	1.1.1.1	192.168.2.4	0x2f51	No error (0)	script.hotjar.com		13.32.27.107	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.218961954 CET	1.1.1.1	192.168.2.4	0x2f51	No error (0)	script.hotjar.com		13.32.27.54	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.218961954 CET	1.1.1.1	192.168.2.4	0x2f51	No error (0)	script.hotjar.com		13.32.27.21	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.260876894 CET	1.1.1.1	192.168.2.4	0xc992	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:38.261321068 CET	1.1.1.1	192.168.2.4	0x71d8	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 12, 2024 05:19:39.451682091 CET	1.1.1.1	192.168.2.4	0x983c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:39.451682091 CET	1.1.1.1	192.168.2.4	0x983c	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:39.451694012 CET	1.1.1.1	192.168.2.4	0x7c2f	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:39.451694012 CET	1.1.1.1	192.168.2.4	0x7c2f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:39.451694012 CET	1.1.1.1	192.168.2.4	0x7c2f	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:39.453370094 CET	1.1.1.1	192.168.2.4	0xc709	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 12, 2024 05:19:39.453381062 CET	1.1.1.1	192.168.2.4	0x3782	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:19:51.971122026 CET	1.1.1.1	192.168.2.4	0xad49	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:19:51.971122026 CET	1.1.1.1	192.168.2.4	0xad49	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:13.733774900 CET	1.1.1.1	192.168.2.4	0x4c4e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:13.733774900 CET	1.1.1.1	192.168.2.4	0x4c4e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:17.582339048 CET	1.1.1.1	192.168.2.4	0xfd5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:17.582339048 CET	1.1.1.1	192.168.2.4	0xfd5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:21.499361038 CET	1.1.1.1	192.168.2.4	0x61ab	No error (0)	messenger.gleap.io		104.26.13.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:21.499361038 CET	1.1.1.1	192.168.2.4	0x61ab	No error (0)	messenger.gleap.io		172.67.70.214	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:21.499361038 CET	1.1.1.1	192.168.2.4	0x61ab	No error (0)	messenger.gleap.io		104.26.12.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:21.501034021 CET	1.1.1.1	192.168.2.4	0x3cc6	No error (0)	messenger.gleap.io			65	IN (0x0001)	false
Nov 12, 2024 05:20:22.377021074 CET	1.1.1.1	192.168.2.4	0x2f1f	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:22.377021074 CET	1.1.1.1	192.168.2.4	0x2f1f	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:22.377194881 CET	1.1.1.1	192.168.2.4	0x1d9a	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:23.145618916 CET	1.1.1.1	192.168.2.4	0x9266	No error (0)	messenger.gleap.io		104.26.12.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.145618916 CET	1.1.1.1	192.168.2.4	0x9266	No error (0)	messenger.gleap.io		172.67.70.214	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.145618916 CET	1.1.1.1	192.168.2.4	0x9266	No error (0)	messenger.gleap.io		104.26.13.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.147131920 CET	1.1.1.1	192.168.2.4	0x32a4	No error (0)	messenger.gleap.io			65	IN (0x0001)	false
Nov 12, 2024 05:20:23.255191088 CET	1.1.1.1	192.168.2.4	0x966e	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:23.255351067 CET	1.1.1.1	192.168.2.4	0xa87e	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:23.255351067 CET	1.1.1.1	192.168.2.4	0xa87e	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.183734894 CET	1.1.1.1	192.168.2.4	0xe20c	No error (0)	api.gleap.io		67.207.79.245	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.299556017 CET	1.1.1.1	192.168.2.4	0x5ec5	No error (0)	www.recaptcha.net		142.250.186.99	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.302879095 CET	1.1.1.1	192.168.2.4	0x6f9b	No error (0)	staticfiles.gleap.io		104.26.12.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.302879095 CET	1.1.1.1	192.168.2.4	0x6f9b	No error (0)	staticfiles.gleap.io		104.26.13.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.302879095 CET	1.1.1.1	192.168.2.4	0x6f9b	No error (0)	staticfiles.gleap.io		172.67.70.214	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.304224968 CET	1.1.1.1	192.168.2.4	0xfe9c	No error (0)	staticfiles.gleap.io			65	IN (0x0001)	false
Nov 12, 2024 05:20:26.321135044 CET	1.1.1.1	192.168.2.4	0xccf8	No error (0)	gleapcdn.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:26.340987921 CET	1.1.1.1	192.168.2.4	0x1a46	No error (0)	gleapcdn.com		104.21.70.203	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.340987921 CET	1.1.1.1	192.168.2.4	0x1a46	No error (0)	gleapcdn.com		172.67.139.72	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	ws-eu.pusher.com	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		18.202.37.109	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		63.34.121.250	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		52.48.188.83	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		34.250.93.249	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		34.242.38.209	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		34.241.207.113	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		18.203.7.65	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.358935118 CET	1.1.1.1	192.168.2.4	0xbd06	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		63.34.56.71	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.359725952 CET	1.1.1.1	192.168.2.4	0xd541	No error (0)	ws-eu.pusher.com	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:26.389695883 CET	1.1.1.1	192.168.2.4	0x9d4d	No error (0)	www.recaptcha.net		142.250.185.131	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.391825914 CET	1.1.1.1	192.168.2.4	0xaf89	No error (0)	staticfiles.gleap.io		104.26.12.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.391825914 CET	1.1.1.1	192.168.2.4	0xaf89	No error (0)	staticfiles.gleap.io		172.67.70.214	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.391825914 CET	1.1.1.1	192.168.2.4	0xaf89	No error (0)	staticfiles.gleap.io		104.26.13.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.401655912 CET	1.1.1.1	192.168.2.4	0xd95a	No error (0)	staticfiles.gleap.io			65	IN (0x0001)	false
Nov 12, 2024 05:20:26.462006092 CET	1.1.1.1	192.168.2.4	0xed3b	No error (0)	gleapcdn.com		172.67.139.72	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.462006092 CET	1.1.1.1	192.168.2.4	0xed3b	No error (0)	gleapcdn.com		104.21.70.203	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	ws-eu.pusher.com	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		54.155.137.70	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		99.81.185.255	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		52.48.188.83	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		52.211.64.225	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		34.242.230.145	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		18.200.43.190	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		34.242.38.209	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.466480970 CET	1.1.1.1	192.168.2.4	0x339b	No error (0)	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		54.195.29.174	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:26.467641115 CET	1.1.1.1	192.168.2.4	0xbb35	No error (0)	ws-eu.pusher.com	socket-eu-ingress-1850214078.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:26.622414112 CET	1.1.1.1	192.168.2.4	0x7c68	No error (0)	gleapcdn.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:28.314563990 CET	1.1.1.1	192.168.2.4	0x423	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:28.815958977 CET	1.1.1.1	192.168.2.4	0x8185	No error (0)	sockjs-eu.pusher.com	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:28.826859951 CET	1.1.1.1	192.168.2.4	0xd96	No error (0)	sockjs-eu.pusher.com	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:28.826859951 CET	1.1.1.1	192.168.2.4	0xd96	No error (0)	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com		54.216.83.132	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:28.826859951 CET	1.1.1.1	192.168.2.4	0xd96	No error (0)	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com		52.48.38.99	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:28.826859951 CET	1.1.1.1	192.168.2.4	0xd96	No error (0)	ingress-sticky-haproxy-eu-da5b7868dc470a9a.elb.eu-west-1.amazonaws.com		99.81.234.0	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.068144083 CET	1.1.1.1	192.168.2.4	0xe7c6	No error (0)	i2.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.268760920 CET	1.1.1.1	192.168.2.4	0x55c5	No error (0)	staticfiles.gleap.io		104.26.12.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.268760920 CET	1.1.1.1	192.168.2.4	0x55c5	No error (0)	staticfiles.gleap.io		104.26.13.7	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.268760920 CET	1.1.1.1	192.168.2.4	0x55c5	No error (0)	staticfiles.gleap.io		172.67.70.214	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.269269943 CET	1.1.1.1	192.168.2.4	0x7748	No error (0)	www.recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.270025015 CET	1.1.1.1	192.168.2.4	0x3d5c	No error (0)	staticfiles.gleap.io			65	IN (0x0001)	false
Nov 12, 2024 05:20:29.274022102 CET	1.1.1.1	192.168.2.4	0x88a8	No error (0)	www.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.275881052 CET	1.1.1.1	192.168.2.4	0x24a4	No error (0)	gleapcdn.com		172.67.139.72	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.275881052 CET	1.1.1.1	192.168.2.4	0x24a4	No error (0)	gleapcdn.com		104.21.70.203	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:29.286570072 CET	1.1.1.1	192.168.2.4	0xac5d	No error (0)	gleapcdn.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:30.712245941 CET	1.1.1.1	192.168.2.4	0x7bc3	No error (0)	api.gleap.io		67.207.79.245	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:30.928287029 CET	1.1.1.1	192.168.2.4	0xc9f2	No error (0)	i2.wp.com		192.0.77.2	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:33.129472017 CET	1.1.1.1	192.168.2.4	0x6d7f	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 12, 2024 05:20:33.129472017 CET	1.1.1.1	192.168.2.4	0x6d7f	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:35.910255909 CET	1.1.1.1	192.168.2.4	0x95f9	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Nov 12, 2024 05:20:35.910581112 CET	1.1.1.1	192.168.2.4	0x3e78	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 12, 2024 05:20:42.839135885 CET	1.1.1.1	192.168.2.4	0xfb33	No error (0)	api.gleap.io		67.207.79.245	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:22 UTC	749	OUT	GET /dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:23 UTC	1927	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html Content-Length: 2938 Connection: close Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Date: Mon, 11 Nov 2024 18:59:48 GMT Etag: "6bc66faf4ef04baa93a407a9eae17cde" Via: 1.1 52f0756596448c36265861853c0a44a4.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 33576 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:33795 Cloudfront-Viewer-Country: US X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: wQPWzyNYVeeLKFKWQBF-sfrfZGAQ1c5jNIOioWDZYIvBBUHbZo_JeA==
2024-11-12 04:19:23 UTC	2938	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 64 65 70 72 65 63 61 74 65 64 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:23 UTC	669	OUT	GET /deprecated/styles.css HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:23 UTC	1915	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/css Content-Length: 2140 Connection: close Date: Tue, 12 Nov 2024 04:19:24 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "eb4a9471b75b812e62466b0ccee0614d" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e5b747ffd1713cb17ddd7d55234a3300.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:52159 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 9HZR1XGwf-C-KNybwxOyb6X0dOaCqg0hNnJQoRqSYwTcI6lmf2-Y6g==
2024-11-12 04:19:23 UTC	2140	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 20 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 73 72 63 2f 66 6f 6e 74 73 2f 4f 70 65 6e 53 61 6e 73 2f 4f 70 65 6e 53 61 6e 73 2d 52 65 67 75 6c 61 72 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 20 75 Data Ascii: @font-face { font-family: 'Open Sans'; src: local('Open Sans'), url('../../src/fonts/OpenSans/OpenSans-Regular.ttf') format('truetype'); font-weight: 400; font-display: swap;}@font-face { font-family: 'Open Sans'; src: local('Open Sans'), u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	104.17.25.14	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:23 UTC	641	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure_sharing0documentpreview.wesendit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:23 UTC	955	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 396981 Expires: Sun, 02 Nov 2025 04:19:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=On9D3voSJickwejrrKKBY5wipdBGPFYuq6dPjjWtLXZkMg9GozN77afAEkuGw44lGnGug1Xumy2m5TYq5xB5DOKZkSanMyb0M56lpYkjYUxatxu0jL3a%2BCzVIyfXQtfTqriT6gpc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e13b93a6d3de74a-DFW alt-svc: h3=":443"; ma=86400
2024-11-12 04:19:23 UTC	414	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3977/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 Data Ascii: ,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeT
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c Data Ascii: even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 Data Ascii: keArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 Data Ascii: \"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.)*)"+M+"+$","g"),_=new Re
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 Data Ascii: ,ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 Data Ascii: r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 61 70 70 65 Data Ascii: 9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e).appe
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3b 69 66 28 22 Data Ascii: &n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("
2024-11-12 04:19:23 UTC	1369	IN	Data Raw: 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 61 62 6c 65 64 Data Ascii: dden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:24 UTC	676	OUT	GET /static/css/main.55b776a0.css HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:24 UTC	1917	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/css Content-Length: 129955 Connection: close Date: Tue, 12 Nov 2024 04:19:25 GMT Last-Modified: Tue, 15 Oct 2024 09:39:32 GMT Etag: "2269c1fc668d53ac61150989aa5650bc" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:54155 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: GBQXIhfJuvNYK4utYUgmzux0_njvn0gZoNo_gNXn3avMMUiRzWDVXg==
2024-11-12 04:19:24 UTC	8192	IN	Data Raw: 2e 54 79 70 6f 67 72 61 70 68 79 5f 68 31 2d 62 6f 6c 64 2d 64 65 73 6b 74 6f 70 5f 5f 34 5c 2b 47 41 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 34 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 38 30 70 78 7d 2e 54 79 70 6f 67 72 61 70 68 79 5f 68 32 2d 62 6f 6c 64 2d 64 65 73 6b 74 6f 70 5f 5f 31 49 66 77 50 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 54 79 70 6f 67 72 61 70 68 79 5f 68 32 2d 62 69 67 2d 62 6f 6c 64 2d 64 65 73 6b 74 6f 70 5f 5f 75 75 51 62 51 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: .Typography_h1-bold-desktop__4\+GA8{font-size:54px;font-weight:700;letter-spacing:-.04em;line-height:80px}.Typography_h2-bold-desktop__1IfwP{font-size:32px;font-weight:700;line-height:40px}.Typography_h2-big-bold-desktop__uuQbQ{font-size:40px;font-weight:
2024-11-12 04:19:24 UTC	8764	IN	Data Raw: 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 7d 2e 54 79 70 6f 67 72 61 70 68 79 5f 64 65 73 6b 74 6f 70 5f 68 33 2d 6c 69 67 68 74 2d 6d 6f 62 69 6c 65 5f 5f 6d 76 65 59 44 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 7d 2e 54 79 70 6f 67 72 61 70 68 79 5f 64 65 73 6b 74 6f 70 5f 73 75 62 74 69 74 6c 65 2d 62 6f 6c 64 2d 6d 6f 62 69 6c 65 5f 5f 62 78 70 45 75 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 34 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 54 79 70 6f 67 Data Ascii: ;line-height:28px}.Typography_desktop_h3-light-mobile__mveYD{font-size:20px;font-weight:300;letter-spacing:-.02em;line-height:28px}.Typography_desktop_subtitle-bold-mobile__bxpEu{font-size:16px;font-weight:700;letter-spacing:-.04em;line-height:24px}.Typog
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 6a 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 74 72 61 6e 73 6c 61 74 65 58 28 33 70 78 29 7d 35 31 25 7b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 42 75 74 74 6f 6e 5f 6c 32 2d 32 5f 5f 70 63 76 53 Data Ascii: j{0%{-webkit-transform:rotate(0deg) translateX(3px);transform:rotate(0deg) translateX(3px)}50%{opacity:0;-webkit-transform:rotate(0deg) translateX(3px);transform:rotate(0deg) translateX(3px)}51%{opacity:1}to{opacity:1}}@-webkit-keyframes Button_l2-2__pcvS
2024-11-12 04:19:24 UTC	1024	IN	Data Raw: 72 61 70 70 65 72 5f 5f 48 76 73 46 70 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 72 65 6d 69 6e 64 65 72 5f 5f 73 4f 4e 61 45 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 31 38 2c 31 2c 2e 31 35 29 3b 63 6f 6c 6f 72 3a 23 66 36 37 36 30 31 7d 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 57 72 61 70 70 65 72 5f 5f 48 76 73 46 70 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 6e 66 6f 5f 5f 4f 71 61 56 43 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 2c 35 34 2c 39 38 2c 2e 30 38 29 3b 63 6f 6c 6f 72 3a 23 30 32 33 36 36 32 7d 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 57 72 61 70 70 65 72 5f 5f 48 76 73 46 70 2e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 74 69 6e 67 73 Data Ascii: rapper__HvsFp.Notification_reminder__sONaE{background-color:rgba(246,118,1,.15);color:#f67601}.Notification_iconWrapper__HvsFp.Notification_info__OqaVC{background-color:rgba(2,54,98,.08);color:#023662}.Notification_iconWrapper__HvsFp.Notification_settings
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 37 32 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 32 7d 2e 50 6f 70 75 70 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 4c 69 73 74 5f 70 6f 70 75 70 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 4c 69 73 74 5f 5f 65 39 6b 67 62 2e 50 6f 70 75 70 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 4c 69 73 74 5f 61 6c 65 72 74 50 72 65 73 65 6e 74 5f 5f 61 55 50 7a 4b 7b 74 6f 70 3a 31 33 35 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 50 6f 70 75 70 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 4c 69 73 74 5f 6e 6f 74 4d 6f 62 69 6c 65 5f 5f 46 53 4f 68 49 2e 50 6f 70 75 70 4e 6f 74 69 66 69 63 61 74 69 Data Ascii: lex-direction:column;gap:24px;position:fixed;top:72px;z-index:1002}.PopupNotificationsList_popupNotificationsList__e9kgb.PopupNotificationsList_alertPresent__aUPzK{top:135px}@media (min-width:768px){.PopupNotificationsList_notMobile__FSOhI.PopupNotificati
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 7d 2e 54 6f 6f 6c 74 69 70 5f 74 6f 6f 6c 74 69 70 5f 5f 74 7a 38 6d 33 2e 54 6f 6f 6c 74 69 70 5f 74 6f 70 5f 5f 74 47 43 63 36 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 33 66 61 66 66 3b 74 6f 70 3a 31 30 30 25 7d 2e 54 6f 6f 6c 74 69 70 5f 74 6f 6f 6c 74 69 70 5f 5f 74 7a 38 6d 33 2e 54 6f 6f 6c 74 69 70 5f 72 69 67 68 74 5f 5f 49 4a 30 39 56 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 33 66 61 66 66 3b 6c 65 66 74 3a 2d 37 2e 32 70 78 3b 74 6f 70 3a 32 30 25 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 32 30 25 29 3b 74 Data Ascii: tion:absolute;width:0}.Tooltip_tooltip__tz8m3.Tooltip_top__tGCc6:before{border-top-color:#f3faff;top:100%}.Tooltip_tooltip__tz8m3.Tooltip_right__IJ09V:before{border-right-color:#f3faff;left:-7.2px;top:20%;-webkit-transform:translateX(0) translateY(-20%);t
2024-11-12 04:19:24 UTC	650	IN	Data Raw: 77 69 64 74 68 3a 31 30 30 25 7d 2e 44 72 6f 70 64 6f 77 6e 5f 65 72 72 6f 72 4d 65 73 73 61 67 65 5f 5f 52 69 58 31 54 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 33 61 30 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 33 61 30 66 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 32 34 70 78 7d 2e 44 72 6f 70 64 6f 77 6e 5f 65 72 72 6f 72 4d 65 73 73 61 67 65 5f 5f 52 69 58 31 54 2e 44 72 6f 70 64 6f 77 6e 5f 6f 75 74 6c 69 6e 65 64 5f 5f 47 74 42 58 6f 7b 62 6f 72 64 65 72 3a 30 3b 70 Data Ascii: width:100%}.Dropdown_errorMessage__RiX1T{background:#fff;border:1px solid #ff3a0f;border-bottom-left-radius:15px;border-bottom-right-radius:15px;border-top:0;color:#ff3a0f;padding:12px 24px}.Dropdown_errorMessage__RiX1T.Dropdown_outlined__GtBXo{border:0;p
2024-11-12 04:19:24 UTC	1398	IN	Data Raw: 5f 69 6e 70 75 74 45 6c 65 6d 65 6e 74 5f 5f 62 77 61 73 66 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 44 72 6f 70 64 6f 77 6e 5f 69 6e 70 75 74 45 6c 65 6d 65 6e 74 5f 5f 62 77 61 73 66 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 34 37 34 37 34 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 30 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 44 72 6f 70 64 6f 77 6e 5f 69 6e 70 75 74 45 6c 65 6d 65 6e 74 5f Data Ascii: _inputElement__bwasf{font-size:16px;font-weight:400;letter-spacing:-.02em;line-height:24px}.Dropdown_inputElement__bwasf::-webkit-input-placeholder{color:#747474;font-size:16px;font-weight:400;letter-spacing:-.02em;line-height:24px}.Dropdown_inputElement_
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 2d 70 69 65 63 65 3a 73 74 61 72 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 44 72 6f 70 64 6f 77 6e 5f 6f 70 74 69 6f 6e 73 5f 5f 58 72 65 69 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 2d 70 69 65 63 65 3a 65 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 44 72 6f 70 64 6f 77 6e 5f 6f 70 74 69 6f 6e 73 5f 5f 58 72 65 69 73 20 2e 44 72 6f 70 64 6f 77 6e 5f 6f 70 74 69 6f 6e 73 49 74 65 6d 5f 5f 5c 2b 75 75 67 61 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f Data Ascii: -piece:start{background-color:initial;margin-top:8px}.Dropdown_options__Xreis::-webkit-scrollbar-track-piece:end{background:transparent;margin-bottom:8px}.Dropdown_options__Xreis .Dropdown_optionsItem__\+uuga{align-items:center;box-sizing:border-box;curso
2024-11-12 04:19:24 UTC	1024	IN	Data Raw: 31 32 70 78 7d 2e 55 70 6c 6f 61 64 65 64 46 69 6c 65 73 43 6f 6e 74 65 6e 74 5f 69 74 65 6d 57 72 61 70 70 65 72 5f 5f 49 6d 77 54 36 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 55 70 6c 6f 61 64 65 64 46 69 6c 65 73 43 6f 6e 74 65 6e 74 5f 64 72 61 67 46 69 6c 65 45 6c 65 6d 65 6e 74 5f 5f 52 69 33 59 76 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 55 70 6c 6f 61 64 65 64 46 69 6c 65 73 43 6f 6e 74 65 6e 74 5f 6d 6f 62 69 6c 65 42 75 74 74 6f 6e 73 57 72 61 70 70 65 72 5f 5f 68 2d 51 57 62 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 32 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 Data Ascii: 12px}.UploadedFilesContent_itemWrapper__ImwT6:last-child{margin-bottom:0}.UploadedFilesContent_dragFileElement__Ri3Yv{bottom:0;left:0;position:absolute;right:0;top:0}.UploadedFilesContent_mobileButtonsWrapper__h-QWb{display:flex;gap:12px;justify-content:s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:24 UTC	660	OUT	GET /static/js/main.fa247412.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:24 UTC	1932	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 4280073 Connection: close Date: Tue, 12 Nov 2024 04:19:25 GMT Last-Modified: Tue, 15 Oct 2024 09:39:35 GMT Etag: "c4efb6b0e90fb24a12c73f569d253019" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e1e056e45a0f8d6bc22b223900511170.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:36999 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: SYDpDXeRQUwL4lrKc9w_y0OHFwcL26hBUli6xPg7BDyX3BNWWaNlXQ==
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 66 61 32 34 37 34 31 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 38 38 31 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 72 2c 69 2c 61 3d 6e 28 34 37 33 31 33 29 2c 6f 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a Data Ascii: /! For license information please see main.fa247412.js.LICENSE.txt /(function(){var __webpack_modules__={88142:function(e,t,n){"use strict";n.d(t,{r:function(){return l}});var r,i,a=n(47313),o=["title","titleId"];function s(){return s=Object.assign?Obj
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 74 69 74 6c 65 2c 75 3d 65 2e 74 69 74 6c 65 49 64 2c 6c 3d 63 28 65 2c 6f 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 73 28 7b 77 69 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 Data Ascii: (r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}function u(e,t){var n=e.title,u=e.titleId,l=c(e,o);return a.createElement("svg",s({width:16,height:16,viewBox:"0 0 16 16",fill:"none",xmlns:"
2024-11-12 04:19:24 UTC	1613	IN	Data Raw: 31 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 72 65 66 3a 74 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6c 7d 2c 64 29 2c 6e 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6c 7d 2c 6e 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 33 39 2c 68 65 69 67 68 74 3a 32 30 2c 66 69 6c 6c 3a 22 23 31 44 37 33 42 42 22 7d 29 29 2c 69 7c 7c 28 69 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 38 2e 31 33 34 37 37 20 31 32 2e 36 32 31 31 43 38 2e 31 33 34 37 37 20 31 33 2e 31 32 38 39 20 38 Data Ascii: 1",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":l},d),n?o.createElement("title",{id:l},n):null,r\|\|(r=o.createElement("rect",{width:39,height:20,fill:"#1D73BB"})),i\|\|(i=o.createElement("path",{d:"M8.13477 12.6211C8.13477 13.1289 8
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 38 34 33 38 20 39 2e 30 36 34 34 35 20 34 2e 36 30 31 35 36 20 39 2e 32 30 35 30 38 43 34 2e 37 32 32 36 36 20 39 2e 33 34 31 38 20 34 2e 39 30 32 33 34 20 39 2e 34 37 34 36 31 20 35 2e 31 34 30 36 32 20 39 2e 36 30 33 35 32 43 35 2e 33 38 32 38 31 20 39 2e 37 33 32 34 32 20 35 2e 36 38 33 35 39 20 39 2e 38 38 32 38 31 20 36 2e 30 34 32 39 37 20 31 30 2e 30 35 34 37 43 36 2e 34 38 30 34 37 20 31 30 2e 32 36 31 37 20 36 2e 38 35 33 35 32 20 31 30 2e 34 37 38 35 20 37 2e 31 36 32 31 31 20 31 30 2e 37 30 35 31 43 37 2e 34 37 34 36 31 20 31 30 2e 39 32 37 37 20 37 2e 37 31 34 38 34 20 31 31 2e 31 39 31 34 20 37 2e 38 38 32 38 31 20 31 31 2e 34 39 36 31 43 38 2e 30 35 30 37 38 20 31 31 2e 37 39 36 39 20 38 2e 31 33 34 37 37 20 31 32 2e 31 37 31 39 20 38 2e 31 Data Ascii: 8438 9.06445 4.60156 9.20508C4.72266 9.3418 4.90234 9.47461 5.14062 9.60352C5.38281 9.73242 5.68359 9.88281 6.04297 10.0547C6.48047 10.2617 6.85352 10.4785 7.16211 10.7051C7.47461 10.9277 7.71484 11.1914 7.88281 11.4961C8.05078 11.7969 8.13477 12.1719 8.1
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 34 2e 32 32 32 36 38 20 31 38 2e 32 34 39 38 43 34 2e 32 32 30 38 35 20 31 38 2e 34 39 30 37 20 34 2e 33 31 34 36 33 20 31 38 2e 37 32 32 35 20 34 2e 34 38 33 34 36 20 31 38 2e 38 39 34 33 43 34 2e 36 35 32 32 39 20 31 39 2e 30 36 36 32 20 34 2e 38 38 32 33 38 20 31 39 2e 31 36 34 20 35 2e 31 32 33 32 37 20 31 39 2e 31 36 36 35 48 31 35 2e 35 34 34 33 43 31 35 2e 37 38 35 32 20 31 39 2e 31 36 34 20 31 36 2e 30 31 35 33 20 31 39 2e 30 36 36 32 20 31 36 2e 31 38 34 31 20 31 38 2e 38 39 34 33 43 31 36 2e 33 35 33 20 31 38 2e 37 32 32 35 20 31 36 2e 34 34 36 37 20 31 38 2e 34 39 30 37 20 31 36 2e 34 34 34 39 20 31 38 2e 32 34 39 38 56 36 2e 30 Data Ascii: null,r\|\|(r=c.createElement("path",{d:"M4.22268 18.2498C4.22085 18.4907 4.31463 18.7225 4.48346 18.8943C4.65229 19.0662 4.88238 19.164 5.12327 19.1665H15.5443C15.7852 19.164 16.0153 19.0662 16.1841 18.8943C16.353 18.7225 16.4467 18.4907 16.4449 18.2498V6.0
2024-11-12 04:19:24 UTC	2048	IN	Data Raw: 73 77 6f 72 64 3a 74 7d 29 2c 6e 26 26 7b 65 6d 61 69 6c 48 61 73 68 3a 6e 7d 29 29 7d 2c 64 6f 77 6e 6c 6f 61 64 46 69 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 75 62 6c 69 63 49 64 2c 6e 3d 65 2e 66 69 6c 65 49 64 2c 72 3d 65 2e 68 61 73 68 2c 69 3d 65 2e 70 61 73 73 77 6f 72 64 2c 61 3d 65 2e 64 6f 77 6e 6c 6f 61 64 65 72 49 70 41 64 64 72 65 73 73 3b 72 65 74 75 72 6e 20 6f 2e 78 31 2e 70 6f 73 74 28 22 22 2e 63 6f 6e 63 61 74 28 66 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 68 2c 22 2f 64 6f 77 6e 6c 6f 61 64 22 29 2c 7b 70 75 62 6c 69 63 49 64 3a 74 2c 66 69 6c 65 49 64 3a 6e 2c 69 73 44 6f 77 6e 6c 6f 61 64 41 6c 6c 3a 21 6e 2c 72 65 63 69 70 69 65 6e 74 3a 72 2c 70 61 73 73 77 6f 72 64 3a 69 2c 64 6f 77 6e 6c 6f 61 64 Data Ascii: sword:t}),n&&{emailHash:n}))},downloadFiles:function(e){var t=e.publicId,n=e.fileId,r=e.hash,i=e.password,a=e.downloaderIpAddress;return o.x1.post("".concat(f,"/").concat(h,"/download"),{publicId:t,fileId:n,isDownloadAll:!n,recipient:r,password:i,download
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 61 67 65 6d 65 6e 74 55 70 6c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 30 2c 64 2e 42 29 28 29 2c 72 3d 6e 2e 74 6f 6b 65 6e 2c 6f 3d 6e 2e 75 73 65 72 6e 61 6d 65 3b 72 65 74 75 72 6e 20 65 2e 70 6f 73 74 28 22 22 2e 63 6f 6e 63 61 74 28 66 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 2f 63 6f 6d 70 6c 65 74 65 22 29 2c 74 2c 28 30 2c 61 2e 5a 29 28 7b 7d 2c 72 26 26 6f 26 26 7b 68 65 61 64 65 72 73 3a 28 30 2c 69 2e 5a 29 28 7b 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 6f 29 7d 29 29 7d 2c 67 65 74 4d 79 46 6f 6c 64 65 72 73 43 6f 6e 74 65 6e 74 4c 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: agementUploading:function(e,t){var n=(0,d.B)(),r=n.token,o=n.username;return e.post("".concat(f,"/").concat(p,"/complete"),t,(0,a.Z)({},r&&o&&{headers:(0,i.Z)({Authorization:"Bearer ".concat(r)},"".concat(s.mY),o)}))},getMyFoldersContentList:function(e,t,
2024-11-12 04:19:24 UTC	1024	IN	Data Raw: 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 69 29 7d 29 29 7d 2c 65 78 70 6f 72 74 43 6f 6e 74 61 63 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 30 2c 63 2e 42 29 28 29 2c 72 3d 6e 2e 74 6f 6b 65 6e 2c 69 3d 6e 2e 75 73 65 72 6e 61 6d 65 3b 72 65 74 75 72 6e 20 65 2e 70 6f 73 74 28 22 22 2e 63 6f 6e 63 61 74 28 64 2c 22 2f 63 6f 6e 74 61 63 74 73 2f 65 78 70 6f 72 74 22 29 2c 74 2c 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 72 26 26 69 26 26 7b 68 65 61 64 65 72 73 3a 28 30 2c 61 2e 5a 29 28 7b 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 69 29 7d 29 29 7d 2c 67 65 74 43 6f 6d 70 61 6e 69 Data Ascii: ".concat(r)},"".concat(s.mY),i)}))},exportContacts:function(e,t){var n=(0,c.B)(),r=n.token,i=n.username;return e.post("".concat(d,"/contacts/export"),t,(0,o.Z)({},r&&i&&{headers:(0,a.Z)({Authorization:"Bearer ".concat(r)},"".concat(s.mY),i)}))},getCompani
2024-11-12 04:19:24 UTC	16384	IN	Data Raw: 65 3a 74 2c 6f 70 65 72 61 74 6f 72 3a 22 45 51 55 41 4c 53 22 7d 5d 2c 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 72 26 26 69 26 26 7b 68 65 61 64 65 72 73 3a 28 30 2c 61 2e 5a 29 28 7b 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 69 29 7d 29 29 7d 2c 65 64 69 74 43 6f 6e 74 61 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 30 2c 63 2e 42 29 28 29 2c 72 3d 6e 2e 74 6f 6b 65 6e 2c 69 3d 6e 2e 75 73 65 72 6e 61 6d 65 3b 72 65 74 75 72 6e 20 65 2e 70 61 74 63 68 28 22 22 2e 63 6f 6e 63 61 74 28 64 2c 22 2f 63 6f 6e 74 61 63 74 73 22 29 2c 74 2c 28 30 2c 6f 2e 5a 29 28 7b 7d 2c 72 26 26 69 26 26 7b 68 65 61 64 65 72 73 3a 28 30 2c 61 2e Data Ascii: e:t,operator:"EQUALS"}],(0,o.Z)({},r&&i&&{headers:(0,a.Z)({Authorization:"Bearer ".concat(r)},"".concat(s.mY),i)}))},editContact:function(e,t){var n=(0,c.B)(),r=n.token,i=n.username;return e.patch("".concat(d,"/contacts"),t,(0,o.Z)({},r&&i&&{headers:(0,a.
2024-11-12 04:19:24 UTC	1024	IN	Data Raw: 26 26 45 65 28 70 29 2c 68 3d 3d 3d 50 2e 43 35 2e 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 26 26 6b 65 28 29 29 3b 63 61 73 65 20 36 37 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 29 2c 65 2c 6e 75 6c 6c 2c 5b 5b 39 2c 36 30 5d 5d 29 7d 29 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 28 28 30 2c 54 2e 6b 79 29 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 6f 2c 73 2c 63 2c 6c 3d 2b 6e 2c 64 3d 65 5b 6c 5d 3b 72 65 74 75 72 6e 20 65 5b 6c 5d 2e 73 74 61 74 75 73 Data Ascii: &&Ee(p),h===P.C5.VALIDATION_ERROR&&ke());case 67:case"end":return e.stop()}}),e,null,[[9,60]])})));return function(){return e.apply(this,arguments)}}(),Oe=function(e){V((0,T.ky)(Object.keys(e).reduce((function(t,n){var o,s,c,l=+n,d=e[l];return e[l].status

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	52.29.111.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:24 UTC	565	OUT	GET /modal/v1/modal.min.js HTTP/1.1 Host: media.payrexx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:24 UTC	445	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Access-Control-Allow-Origin: null Access-Control-Allow-Headers: Origin, X-Requested-With, Authorization, Content-Type Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-XSS-Protection: 1; mode=block Referrer-Policy: origin
2024-11-12 04:19:24 UTC	15939	IN	Data Raw: 34 32 36 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 76 61 72 20 64 3d 22 22 3b 76 61 72 20 61 3d 22 44 6f 20 79 6f 75 20 72 65 61 6c 6c 79 20 77 61 6e 74 20 74 6f 20 63 61 6e 63 65 6c 20 74 68 65 20 70 61 79 6d 65 6e 74 3f 22 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 79 70 65 6f 66 20 67 2e 64 61 74 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 76 61 72 20 66 3d 7b 7d 3b 74 72 79 7b 66 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 67 2e 64 61 74 61 29 7d 63 61 74 63 68 28 67 29 7b 7d 69 66 28 66 2e 70 61 79 72 65 78 78 29 7b 6a 51 75 65 72 79 2e 65 61 63 68 28 66 2e 70 61 79 72 65 78 78 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 73 77 69 74 63 68 28 68 29 7b 63 61 73 65 22 74 72 61 6e 73 61 63 74 69 Data Ascii: 426f(function(e){var c=false;var d="";var a="Do you really want to cancel the payment?";var b=function(g){if(typeof g.data==="string"){var f={};try{f=JSON.parse(g.data)}catch(g){}if(f.payrexx){jQuery.each(f.payrexx,function(h,i){switch(h){case"transacti
2024-11-12 04:19:24 UTC	1076	IN	Data Raw: 74 72 69 67 67 65 72 28 22 68 69 64 64 65 6e 2e 62 73 2e 6d 6f 64 61 6c 2e 70 78 22 29 7d 29 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 42 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 26 26 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 2e 72 65 6d 6f 76 65 28 29 3b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 3d 6e 75 6c 6c 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 76 61 72 20 6d 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 22 66 61 64 65 22 3a 22 22 3b 69 66 28 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 61 Data Ascii: trigger("hidden.bs.modal.px")})};i.prototype.removeBackdrop=function(){this.$backdrop&&this.$backdrop.remove();this.$backdrop=null};i.prototype.backdrop=function(p){var o=this;var m=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.ba
2024-11-12 04:19:24 UTC	4309	IN	Data Raw: 31 30 63 64 0d 0a 57 69 64 74 68 29 7b 72 65 74 75 72 6e 7d 74 68 69 73 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 74 68 69 73 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 7c 7c 74 68 69 73 2e 6d 65 61 73 75 72 65 53 63 72 6f 6c 6c 62 61 72 28 29 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6c 3d 70 61 72 73 65 49 6e 74 28 28 74 68 69 73 2e 24 62 6f 64 79 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 7c 7c 30 29 2c 31 30 29 3b 69 66 28 74 68 69 73 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 29 7b 74 68 69 73 2e 24 62 6f 64 79 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 6c 2b 74 68 69 73 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 29 Data Ascii: 10cdWidth){return}this.scrollbarWidth=this.scrollbarWidth\|\|this.measureScrollbar()};i.prototype.setScrollbar=function(){var l=parseInt((this.$body.css("padding-right")\|\|0),10);if(this.scrollbarWidth){this.$body.css("padding-right",l+this.scrollbarWidth)
2024-11-12 04:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	172.67.173.54	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:24 UTC	560	OUT	GET /loadAssets.js HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:24 UTC	1083	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"b79f047260ef5106739d8eb8d4323b4f" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OINchj6F6mFlK4BEW0TkgDxjY%2B18ghn7aRynFSc7pPOPXts7q55o9Sh8qYnm7Lf64ep5ELznH9xgJ8fNNM5FmgmIKrOr7TLtoPaZAcA15EtvsQ0YEkaAaBAlUKGoDIm4f5UgTDZZww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6182 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b93e29f82cd7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1138&delivery_rate=1684700&cwnd=32&unsent_bytes=0&cid=2c6db7698e6f812f&ts=160&x=0"
2024-11-12 04:19:24 UTC	286	IN	Data Raw: 36 63 34 0d 0a 21 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 6f 77 64 73 77 61 70 57 69 64 67 65 74 22 29 2c 74 3d 28 65 26 26 28 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 27 2e 61 70 70 2d 73 70 6c 61 73 68 2d 73 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 72 67 62 61 28 36 2c 31 33 30 2c 39 37 2c 31 29 20 30 25 2c 72 67 62 61 28 35 35 2c 32 30 30 2c 31 36 32 2c 31 29 20 35 30 25 2c 72 67 62 61 28 36 2c 31 Data Ascii: 6c4!async function(){var e=document.getElementById("crowdswapWidget"),t=(e&&(e.style.display="none",(t=document.createElement("style")).textContent='.app-splash-screen{background:linear-gradient(180deg,rgba(6,130,97,1) 0%,rgba(55,200,162,1) 50%,rgba(6,1
2024-11-12 04:19:24 UTC	1369	IN	Data Raw: 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 36 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 30 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 35 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 30 2e 35 73 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 7d 2e 73 70 6c 61 73 68 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 Data Ascii: e;width:100%;max-width:506px;height:100%;max-height:506px;display:flex;justify-content:center;align-items:center;z-index:150;transition:left 0.5s;left:50%;transform:translateX(-50%);border-radius:6px;}.splash-inner{display:flex;flex-direction:column;justi
2024-11-12 04:19:24 UTC	84	IN	Data Raw: 74 3d 74 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 28 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 29 3b 0d 0a Data Ascii: t=t,document.head.appendChild(e),document.head.appendChild(a)}((window,document));
2024-11-12 04:19:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	104.17.24.14	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:24 UTC	380	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:25 UTC	965	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 396982 Expires: Sun, 02 Nov 2025 04:19:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hp5k5vpvkMIHHS%2FR4zTGCxT90HGo3PTzWEZ%2FTa1R3hZPyQypgCAxP2C3tsA%2FoyTrD992P5jGQHNVnqiU4CV2K%2FDHR%2FXcURI7eZvgOw4gIWSVey9%2BRM3irkpo5SFL1eQxZhRx4xsb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8e13b940c99f1441-DFW alt-svc: h3=":443"; ma=86400
2024-11-12 04:19:25 UTC	404	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7beb/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 Data Ascii: rototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=type
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 Data Ascii: s.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b Data Ascii: turn e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 Data Ascii: \\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 Data Ascii: ion(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function f
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 Data Ascii: urn r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChi
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 Data Ascii: de("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagNa
2024-11-12 04:19:25 UTC	1369	IN	Data Raw: 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 Data Ascii: "type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	193.16.220.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:25 UTC	585	OUT	GET /upp/payment/js/secure-fields-2.0.0.min.js HTTP/1.1 Host: pay.datatrans.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:25 UTC	895	IN	HTTP/1.1 200 Server: nginx Date: Tue, 12 Nov 2024 04:19:25 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" X-XSS-Protection: 1; mode=block Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; child-src 'self'; frame-src 'self' https://pay.google.com https://3d.sandbox.datatrans.com https://3d.datatrans.com; object-src 'self'; report-uri /upp/csp-report Cache-Control: public, max-age=300 Expires: Tue, 12 Nov 2024 04:24:25 GMT ETag: 1729759548333
2024-11-12 04:19:25 UTC	7596	IN	Data Raw: 31 64 33 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 5d 2c 62 29 7d 65 6c 73 65 7b 69 66 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 7d 65 6c 73 65 7b 61 2e 53 65 63 75 72 65 46 69 65 6c 64 73 3d 62 28 29 7d 7d 7d 28 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 45 29 7b 76 61 72 20 43 3d 7b 7d 3b 76 61 72 20 42 3d 68 Data Ascii: 1d3e(function(a,b){if(typeof define==="function"&&define.amd){define([],b)}else{if(typeof module==="object"&&module.exports){module.exports=b()}else{a.SecureFields=b()}}}(typeof self!=="undefined"?self:this,function(){return function(E){var C={};var B=h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	193.16.220.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:25 UTC	581	OUT	GET /upp/payment/js/paypal-button-1.0.0.js HTTP/1.1 Host: pay.datatrans.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:25 UTC	895	IN	HTTP/1.1 200 Server: nginx Date: Tue, 12 Nov 2024 04:19:25 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" X-XSS-Protection: 1; mode=block Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; child-src 'self'; frame-src 'self' https://pay.google.com https://3d.sandbox.datatrans.com https://3d.datatrans.com; object-src 'self'; report-uri /upp/csp-report Cache-Control: public, max-age=300 Expires: Tue, 12 Nov 2024 04:24:25 GMT ETag: 1729759548333
2024-11-12 04:19:25 UTC	15489	IN	Data Raw: 33 63 38 61 0d 0a 70 61 72 63 65 6c 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 61 72 63 65 6c 52 65 71 75 69 72 65 26 26 70 61 72 63 65 6c 52 65 71 75 69 72 65 2c 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 6e 29 7b 69 66 28 21 72 5b 74 5d 29 7b 69 66 28 21 65 5b 74 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 61 72 63 65 6c 52 65 71 75 69 72 65 26 26 70 61 72 63 65 6c 52 65 71 75 69 72 65 3b 69 66 28 21 6e 26 26 69 29 72 65 74 75 72 6e 20 69 28 74 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 Data Ascii: 3c8aparcelRequire=function(e,r,t,n){var i,o="function"==typeof parcelRequire&&parcelRequire,u="function"==typeof require&&require;function f(t,n){if(!r[t]){if(!e[t]){var i="function"==typeof parcelRequire&&parcelRequire;if(!n&&i)return i(t,!0);if(o)retu
2024-11-12 04:19:25 UTC	16384	IN	Data Raw: 75 6c 65 2c 65 78 70 6f 72 74 73 29 20 7b 0a 0d 0a 66 66 38 0d 0a 76 61 72 20 72 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 68 61 73 22 29 2c 65 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 74 6f 2d 69 6f 62 6a 65 63 74 22 29 2c 75 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 61 72 72 61 79 2d 69 6e 63 6c 75 64 65 73 22 29 28 21 31 29 2c 69 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 68 61 72 65 64 2d 6b 65 79 22 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 3b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 76 61 72 20 6e 2c 73 3d 65 28 6f 29 2c 74 3d 30 2c 68 3d 5b 5d 3b 66 6f 72 28 6e 20 69 6e 20 73 29 6e 21 3d 69 26 26 72 28 73 2c 6e 29 26 26 68 2e 70 75 73 68 28 6e 29 3b 66 6f 72 28 3b 61 2e 6c 65 6e 67 74 68 3e 74 3b 29 72 28 73 2c 6e Data Ascii: ule,exports) {ff8var r=require("./_has"),e=require("./_to-iobject"),u=require("./_array-includes")(!1),i=require("./_shared-key")("IE_PROTO");module.exports=function(o,a){var n,s=e(o),t=0,h=[];for(n in s)n!=i&&r(s,n)&&h.push(n);for(;a.length>t;)r(s,n
2024-11-12 04:19:25 UTC	16384	IN	Data Raw: 69 3f 6e 65 77 20 74 28 65 29 3a 72 28 65 29 7d 29 2c 75 28 75 2e 47 2b 75 2e 57 2b 75 2e 46 2a 21 45 2c 7b 50 72 6f 6d 69 73 65 3a 6b 7d 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 65 74 2d 74 6f 2d 73 74 72 69 6e 67 2d 74 61 67 22 29 28 6b 2c 6a 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 65 74 2d 73 70 65 63 69 65 73 22 29 28 6a 29 2c 69 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 63 6f 72 65 22 29 5b 6a 5d 2c 75 28 75 2e 53 2b 75 2e 46 2a 21 45 2c 6a 2c 7b 72 65 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 53 28 74 68 69 73 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 72 65 6a 65 63 74 29 28 65 29 2c 72 2e 70 72 6f 6d 69 73 65 7d 7d 29 2c 75 28 75 2e 53 2b 75 2e 46 2a 28 6e 7c 7c 21 45 29 2c 6a 2c 7b 72 65 73 6f 6c 76 65 3a 66 75 6e 63 Data Ascii: i?new t(e):r(e)}),u(u.G+u.W+u.F!E,{Promise:k}),require("./_set-to-string-tag")(k,j),require("./_set-species")(j),i=require("./_core")[j],u(u.S+u.F!E,j,{reject:function(e){var r=S(this);return(0,r.reject)(e),r.promise}}),u(u.S+u.F*(n\|\|!E),j,{resolve:func
2024-11-12 04:19:25 UTC	3743	IN	Data Raw: 61 6e 73 61 63 74 69 6f 6e 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 6e 7c 7c 78 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 22 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 66 2e 72 65 66 6e 6f 26 26 6e 75 6c 6c 21 3d 66 2e 72 65 66 6e 6f 7c 7c 78 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 22 72 65 66 6e 6f 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 22 29 2c 6c 3d 66 2e 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 4f 6e 6c 79 2c 64 3d 66 2e 72 65 74 75 72 6e 41 64 64 72 65 73 73 2c 63 3d 66 2e 72 65 66 6e 6f 2c 6d 3d 6e 2c 76 3d 7b 6d 65 72 63 68 61 6e 74 49 64 3a 68 2e 6d 65 72 63 68 61 6e 74 49 64 2c 72 65 66 6e 6f 3a 63 Data Ascii: ansaction,void 0!==n&&null!=n\|\|x.emit("error","container is a mandatory parameter"),void 0!==f.refno&&null!=f.refno\|\|x.emit("error","refno is a mandatory parameter"),l=f.authenticationOnly,d=f.returnAddress,c=f.refno,m=n,v={merchantId:h.merchantId,refno:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:25 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-12 04:19:26 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=217536 Date: Tue, 12 Nov 2024 04:19:25 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	104.21.30.157	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:26 UTC	357	OUT	GET /loadAssets.js HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:26 UTC	1083	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"b79f047260ef5106739d8eb8d4323b4f" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OINchj6F6mFlK4BEW0TkgDxjY%2B18ghn7aRynFSc7pPOPXts7q55o9Sh8qYnm7Lf64ep5ELznH9xgJ8fNNM5FmgmIKrOr7TLtoPaZAcA15EtvsQ0YEkaAaBAlUKGoDIm4f5UgTDZZww%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 6184 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b94a1fe6e9b1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=935&delivery_rate=2419381&cwnd=242&unsent_bytes=0&cid=fdb6e8351c2a5d91&ts=575&x=0"
2024-11-12 04:19:26 UTC	286	IN	Data Raw: 36 63 34 0d 0a 21 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 72 6f 77 64 73 77 61 70 57 69 64 67 65 74 22 29 2c 74 3d 28 65 26 26 28 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 28 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 27 2e 61 70 70 2d 73 70 6c 61 73 68 2d 73 63 72 65 65 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 72 67 62 61 28 36 2c 31 33 30 2c 39 37 2c 31 29 20 30 25 2c 72 67 62 61 28 35 35 2c 32 30 30 2c 31 36 32 2c 31 29 20 35 30 25 2c 72 67 62 61 28 36 2c 31 Data Ascii: 6c4!async function(){var e=document.getElementById("crowdswapWidget"),t=(e&&(e.style.display="none",(t=document.createElement("style")).textContent='.app-splash-screen{background:linear-gradient(180deg,rgba(6,130,97,1) 0%,rgba(55,200,162,1) 50%,rgba(6,1
2024-11-12 04:19:26 UTC	1369	IN	Data Raw: 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 36 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 30 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 35 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 30 2e 35 73 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 7d 2e 73 70 6c 61 73 68 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 Data Ascii: e;width:100%;max-width:506px;height:100%;max-height:506px;display:flex;justify-content:center;align-items:center;z-index:150;transition:left 0.5s;left:50%;transform:translateX(-50%);border-radius:6px;}.splash-inner{display:flex;flex-direction:column;justi
2024-11-12 04:19:26 UTC	84	IN	Data Raw: 74 3d 74 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 28 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 29 3b 0d 0a Data Ascii: t=t,document.head.appendChild(e),document.head.appendChild(a)}((window,document));
2024-11-12 04:19:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	35.156.206.228	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:26 UTC	362	OUT	GET /modal/v1/modal.min.js HTTP/1.1 Host: media.payrexx.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:26 UTC	445	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:26 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Vary: Accept-Encoding Access-Control-Allow-Origin: null Access-Control-Allow-Headers: Origin, X-Requested-With, Authorization, Content-Type Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-XSS-Protection: 1; mode=block Referrer-Policy: origin
2024-11-12 04:19:26 UTC	15939	IN	Data Raw: 34 66 38 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 76 61 72 20 64 3d 22 22 3b 76 61 72 20 61 3d 22 44 6f 20 79 6f 75 20 72 65 61 6c 6c 79 20 77 61 6e 74 20 74 6f 20 63 61 6e 63 65 6c 20 74 68 65 20 70 61 79 6d 65 6e 74 3f 22 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 79 70 65 6f 66 20 67 2e 64 61 74 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 76 61 72 20 66 3d 7b 7d 3b 74 72 79 7b 66 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 67 2e 64 61 74 61 29 7d 63 61 74 63 68 28 67 29 7b 7d 69 66 28 66 2e 70 61 79 72 65 78 78 29 7b 6a 51 75 65 72 79 2e 65 61 63 68 28 66 2e 70 61 79 72 65 78 78 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 73 77 69 74 63 68 28 68 29 7b 63 61 73 65 22 74 72 61 6e 73 61 63 74 69 Data Ascii: 4f88(function(e){var c=false;var d="";var a="Do you really want to cancel the payment?";var b=function(g){if(typeof g.data==="string"){var f={};try{f=JSON.parse(g.data)}catch(g){}if(f.payrexx){jQuery.each(f.payrexx,function(h,i){switch(h){case"transacti
2024-11-12 04:19:26 UTC	4429	IN	Data Raw: 74 72 69 67 67 65 72 28 22 68 69 64 64 65 6e 2e 62 73 2e 6d 6f 64 61 6c 2e 70 78 22 29 7d 29 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 42 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 26 26 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 2e 72 65 6d 6f 76 65 28 29 3b 74 68 69 73 2e 24 62 61 63 6b 64 72 6f 70 3d 6e 75 6c 6c 7d 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 63 6b 64 72 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 76 61 72 20 6d 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 22 66 61 64 65 22 3a 22 22 3b 69 66 28 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 62 61 Data Ascii: trigger("hidden.bs.modal.px")})};i.prototype.removeBackdrop=function(){this.$backdrop&&this.$backdrop.remove();this.$backdrop=null};i.prototype.backdrop=function(p){var o=this;var m=this.$element.hasClass("fade")?"fade":"";if(this.isShown&&this.options.ba
2024-11-12 04:19:26 UTC	955	IN	Data Raw: 33 62 34 0d 0a 6f 74 74 6f 6d 22 29 29 2d 70 61 72 73 65 49 6e 74 28 65 28 22 23 70 61 79 72 65 78 78 2d 6d 6f 64 61 6c 20 2e 70 78 2d 6d 6f 64 61 6c 2d 62 6f 64 79 22 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 29 2d 70 61 72 73 65 49 6e 74 28 65 28 22 23 70 61 79 72 65 78 78 2d 6d 6f 64 61 6c 20 2e 70 78 2d 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 22 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 2d 70 61 72 73 65 49 6e 74 28 65 28 22 23 70 61 79 72 65 78 78 2d 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 22 29 2e 68 65 69 67 68 74 28 29 29 2d 32 2a 70 61 72 73 65 49 6e 74 28 65 28 22 23 70 61 79 72 65 78 78 2d 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 22 29 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 69 66 28 6f 3e 38 Data Ascii: 3b4ottom"))-parseInt(e("#payrexx-modal .px-modal-body").css("padding-bottom"))-parseInt(e("#payrexx-modal .px-modal-dialog").css("margin-top"))-parseInt(e("#payrexx-modal-footer").height())-2*parseInt(e("#payrexx-modal-footer").css("margin-top"));if(o>8
2024-11-12 04:19:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	169.150.247.37	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:26 UTC	558	OUT	GET /app/js/api.min.js HTTP/1.1 Host: a.trstplse.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:26 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:26 GMT Content-Type: application/javascript Content-Length: 104548 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1080 CDN-PullZone: 293676 CDN-Uid: efcab737-66db-4b75-ab55-ed485d5a01dd CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=31919000 ETag: "6723b8bf-19864" Last-Modified: Thu, 31 Oct 2024 17:05:03 GMT CDN-StorageServer: DE-677 CDN-RequestPullSuccess: True CDN-FileServer: 887 Perma-Cache: HIT CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2024 17:26:03 CDN-EdgeStorageId: 1079 CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: d2343dd3e622704ee03cd1686bed4667 CDN-Cache: HIT Accept-Ranges: bytes
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 21 20 62 75 69 6c 74 20 6f 6e 20 54 68 75 72 73 64 61 79 2c 20 4f 63 74 6f 62 65 72 20 33 31 73 74 20 32 30 32 34 2c 20 31 37 3a 30 33 3a 35 33 20 55 54 43 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 6f 28 74 2c 65 Data Ascii: /! ! built on Thursday, October 31st 2024, 17:03:53 UTC /!function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 66 6f 72 28 61 3d 30 3b 61 3c 72 2e 70 61 72 74 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 73 2e 70 75 73 68 28 67 28 72 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 3b 69 5b 72 2e 69 64 5d 3d 7b 69 64 3a 72 2e 69 64 2c 72 65 66 73 3a 31 2c 70 61 72 74 73 3a 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 69 3d 7b 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 61 3d 65 2e 62 61 73 65 3f 6f 5b 30 5d 2b 65 2e 62 61 73 65 3a 6f 5b 30 5d 2c 73 3d 7b 63 73 73 3a 6f 5b 31 5d 2c 6d 65 64 69 61 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 4d 61 70 3a 6f 5b 33 5d 7d 3b 69 5b 61 5d 3f 69 5b 61 5d 2e 70 61 72 74 73 2e 70 75 73 68 28 73 29 Data Ascii: else{var s=[];for(a=0;a<r.parts.length;a++)s.push(g(r.parts[a],e));i[r.id]={id:r.id,refs:1,parts:s}}}}function f(t,e){for(var n=[],i={},r=0;r<t.length;r++){var o=t[r],a=e.base?o[0]+e.base:o[0],s={css:o[1],media:o[2],sourceMap:o[3]};i[a]?i[a].parts.push(s)
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 65 2e 73 75 62 73 74 72 28 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 24 2f 2c 22 22 29 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 2b 3d 74 2e 73 65 61 72 63 68 29 2c 74 2e 68 61 73 68 26 26 28 6e 2b 3d 74 2e 68 61 73 68 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 2c 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 29 3b 76 61 72 20 65 3d 74 2e 68 72 65 66 2e 73 70 6c 69 74 28 74 2e 68 6f 73 74 29 3b 72 65 74 75 72 6e 20 65 5b 31 5d 3f 65 5b 31 5d 2e 73 75 62 73 74 72 28 31 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 29 7b 76 Data Ascii: e.substr(1).replace(/\/$/,"");return e&&(n+=t.search),t.hash&&(n+=t.hash),n}function P(t){return void 0===t&&(t=!1),E(window.location,t)}function j(t){void 0===t&&(t=window.location);var e=t.href.split(t.host);return e[1]?e[1].substr(1):""}function I(t){v
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 2b 74 29 26 26 6e 75 6c 6c 3d 3d 3d 59 65 2e 67 65 74 28 22 74 70 53 75 63 63 65 73 73 2d 22 2b 74 29 26 26 6e 75 6c 6c 3d 3d 3d 59 65 2e 67 65 74 28 22 74 70 2d 73 75 63 63 65 73 73 2d 22 2b 74 29 7d 73 3d 6f 65 2c 6f 65 2e 74 69 74 6c 65 3d 22 5b 54 72 75 73 74 50 75 6c 73 65 5d 22 2c 6f 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 73 2e 74 69 74 6c 65 5d 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: +t)&&null===Ye.get("tpSuccess-"+t)&&null===Ye.get("tp-success-"+t)}s=oe,oe.title="[TrustPulse]",oe.log=function(){for(var t=arguments.length,e=new Array(t),n=0;n<t;n++)e[n]=arguments[n];"object"==typeof console&&console.log.apply(null,[s.title].concat(e))
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 76 61 72 20 69 3d 22 47 45 54 22 3d 3d 3d 74 2e 6d 65 74 68 6f 64 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 61 74 61 3f 74 2e 64 61 74 61 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 64 61 74 61 29 3b 74 2e 78 68 72 2e 6f 70 65 6e 28 74 2e 6d 65 74 68 6f 64 2c 74 2e 75 72 6c 2c 21 30 29 2c 74 2e 78 68 72 2e 74 69 6d 65 6f 75 74 3d 74 2e 74 69 6d 65 6f 75 74 2c 22 47 45 54 22 21 3d 3d 74 2e 6d 65 74 68 6f 64 26 26 28 74 2e 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 74 2e 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 2c Data Ascii: var i="GET"===t.method?null:"string"==typeof t.data?t.data:JSON.stringify(t.data);t.xhr.open(t.method,t.url,!0),t.xhr.timeout=t.timeout,"GET"!==t.method&&(t.xhr.setRequestHeader("Content-Type","application/json"),t.xhr.setRequestHeader("X-Requested-With",
2024-11-12 04:19:26 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 2e 69 6e 69 74 22 2c 7b 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 3a 74 68 69 73 7d 29 7d 2c 65 2e 6d 61 74 63 68 65 73 43 75 72 72 65 6e 74 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 72 75 6c 65 4d 61 74 63 68 65 73 43 75 72 72 65 6e 74 57 69 6e 64 6f 77 28 74 68 69 73 29 7d 2c 65 2e 69 6e 69 74 57 61 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 73 77 69 74 63 68 28 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 2e 69 6e 69 74 57 61 74 63 68 65 72 22 2c 7b 46 6f 72 6d 43 61 70 74 Data Ascii: =function(){a.trigger(document,"FormCaptureRule.init",{FormCaptureRule:this})},e.matchesCurrentWindow=function(){return r.ruleMatchesCurrentWindow(this)},e.initWatcher=function(){var t=this;switch(a.trigger(document,"FormCaptureRule.initWatcher",{FormCapt
2024-11-12 04:19:26 UTC	6244	IN	Data Raw: 65 74 28 22 70 65 6e 64 69 6e 67 53 75 62 6d 69 73 73 69 6f 6e 73 22 2c 61 29 2c 74 2e 46 6f 72 6d 53 75 62 6d 69 74 74 6f 72 2e 70 72 6f 63 65 73 73 28 29 7d 7d 29 29 2c 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 4d 61 69 6e 2e 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 52 65 61 64 79 22 2c 7b 4d 61 69 6e 3a 74 7d 29 2c 65 28 29 7d 29 29 7d 2c 65 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 46 6f 72 6d 53 75 62 6d 69 74 74 6f 72 2e 70 72 6f 63 65 73 73 28 29 7d 2c 65 2e 70 65 6e 64 69 6e 67 57 61 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: et("pendingSubmissions",a),t.FormSubmittor.process()}})),a.trigger(document,"Main.EventListener.Ready",{Main:t}),e()}))},e.process=function(){this.FormSubmittor.process()},e.pendingWatcher=function(){var t=this,e=location.href;document.body.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	172.67.173.54	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:26 UTC	615	OUT	GET /version.txt HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:26 UTC	1062	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store, max-age=0 ETag: "5e1e5feda711b086e56769d2791f3ce0" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uDHfYzAPcRoRHapbZfRFS1n40%2BhaYooiXsa6NwvcWx%2Fg8svzdQs%2FX3BALgyhyApW%2F9%2BU%2Fv5HWRqPpJVi4csiWsXkLZ2EFgoTKBmXwSyAHb4kFS4g2L3FemPIZvKLMQLgeVtJLHed%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b94a6c5b477e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=963&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1193&delivery_rate=2696461&cwnd=250&unsent_bytes=0&cid=f32402509f9c6cbf&ts=228&x=0"
2024-11-12 04:19:26 UTC	10	IN	Data Raw: 31 37 33 30 32 38 33 37 30 38 Data Ascii: 1730283708

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49759	216.58.206.36	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:27 UTC	1053	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&scrsrc=www.googletagmanager.com&frm=0&rnd=398649259.1731385166&auid=2000241421.1731385166&npa=0&gtm=45He4bb0v71480359za200&gcd=13l3l3l3l1l1&dma=0&tft=1731385165933&tfd=4497&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:27 UTC	607	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:27 GMT Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/plain Expires: Fri, 01 Jan 1990 00:00:00 GMT Vary: Origin Vary: X-Origin Vary: Referer Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Access-Control-Expose-Headers: date,vary,vary,vary,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49760	18.66.102.53	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:27 UTC	568	OUT	GET /c/hotjar-3708882.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:27 UTC	633	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 12 Nov 2024 04:19:27 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/088981ea3715387925431207550a1e56 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 9015971351bc982a04ee209a022bb1f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: cQjUeZdRnk-qo2OYXLw3_dCFPi61HDX-g3rGcVMU3-NyzUJJO9SbNQ==
2024-11-12 04:19:27 UTC	13139	IN	Data Raw: 33 33 34 62 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 33 37 30 38 38 38 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 61 6e Data Ascii: 334bwindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3708882,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"an
2024-11-12 04:19:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49762	157.240.251.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:27 UTC	564	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:27 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-v5z3z8O4' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-12 04:19:27 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-12 04:19:27 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-12 04:19:27 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-11-12 04:19:27 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-11-12 04:19:28 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-11-12 04:19:28 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49761	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-12 04:19:27 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=217572 Date: Tue, 12 Nov 2024 04:19:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-12 04:19:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	709	OUT	GET /static/js/3020.18ed824f.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166
2024-11-12 04:19:28 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 38935 Connection: close Date: Tue, 12 Nov 2024 04:19:29 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "df0589890bffff6422577e53d586f690" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:54291 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: DsektdkJQLhv6Fcp2AMB3V8AgehE0LnNYJV1dLvvztBEefWVCsCcHQ==
2024-11-12 04:19:28 UTC	14454	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 30 32 30 2e 31 38 65 64 38 32 34 66 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 32 30 5d 2c 7b 33 32 37 36 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 6e 2e 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 2e 67 3f 76 6f 69 64 20 30 3a 6e 2e 67 2e 63 Data Ascii: /! For license information please see 3020.18ed824f.chunk.js.LICENSE.txt /(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3020],{32760:function(t,e,n){"use strict";function r(){return(null===n.g\|\|void 0===n.g?void 0:n.g.c
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 6f 6e 50 61 79 6c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 70 61 79 6c 6f 61 64 22 2c 74 29 2c 28 30 2c 66 2e 69 73 4a 73 6f 6e 52 70 63 52 65 73 70 6f 6e 73 65 29 28 74 29 3f 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 22 2e 63 6f 6e 63 61 74 28 74 2e 69 64 29 2c 74 29 3a 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 6d 65 73 73 61 67 65 22 2c 7b 74 79 70 65 3a 74 2e 6d 65 74 68 6f 64 2c 64 61 74 61 3a 74 2e 70 61 72 61 6d 73 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 43 6c 6f 73 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 26 26 33 65 33 3d 3d 3d 74 2e 63 6f 64 65 26 26 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 6d 69 Data Ascii: },{key:"onPayload",value:function(t){this.events.emit("payload",t),(0,f.isJsonRpcResponse)(t)?this.events.emit("".concat(t.id),t):this.events.emit("message",{type:t.method,data:t.params})}},{key:"onClose",value:function(t){t&&3e3===t.code&&this.events.emi
2024-11-12 04:19:28 UTC	8097	IN	Data Raw: 66 20 74 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 3a 6f 26 26 42 6c 6f 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 42 6c 6f 62 3d 74 3a 69 26 26 46 6f 72 6d 44 61 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 46 6f 72 6d 44 61 74 61 3d 74 3a 6e 26 26 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3f 74 68 69 73 2e 5f 62 6f 64 79 54 65 78 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 73 26 26 6f 26 26 28 28 65 3d 74 29 26 26 44 61 74 61 56 69 65 77 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 Data Ascii: f t?this._bodyText=t:o&&Blob.prototype.isPrototypeOf(t)?this._bodyBlob=t:i&&FormData.prototype.isPrototypeOf(t)?this._bodyFormData=t:n&&URLSearchParams.prototype.isPrototypeOf(t)?this._bodyText=t.toString():s&&o&&((e=t)&&DataView.prototype.isPrototypeOf(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49768	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	708	OUT	GET /static/js/406.ce8fba17.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166
2024-11-12 04:19:28 UTC	1931	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 324694 Connection: close Date: Tue, 12 Nov 2024 04:19:29 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "174f6b78e03d25c43ae6da89889358f3" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 f99b5b46e77cfe9c3413f99dc8a4088c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:35891 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 9XktrpyxZDfNQ9__l3MwjJHgLmhYcvrpEc0dY6aQLNMgkkg_lW2o1Q==
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 30 36 2e 63 65 38 66 62 61 31 37 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 36 5d 2c 7b 37 39 37 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 72 28 34 34 Data Ascii: /! For license information please see 406.ce8fba17.chunk.js.LICENSE.txt /(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[406],{79734:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(44
2024-11-12 04:19:28 UTC	10124	IN	Data Raw: 61 79 28 5b 32 33 37 2c 32 31 31 2c 32 34 35 2c 39 32 2c 32 36 2c 39 39 2c 31 38 2c 38 38 2c 32 31 34 2c 31 35 36 2c 32 34 37 2c 31 36 32 2c 32 32 32 2c 32 34 39 2c 32 32 32 2c 32 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 36 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 69 2c 6f 3b 66 6f 72 28 6e 3d 36 33 3b 6e 3e 3d 33 32 3b 2d 2d 6e 29 7b 66 6f 72 28 72 3d 30 2c 69 3d 6e 2d 33 32 2c 6f 3d 6e 2d 31 32 3b 69 3c 6f 3b 2b 2b 69 29 74 5b 69 5d 2b 3d 72 2d 31 36 2a 74 5b 6e 5d 2a 41 5b 69 2d 28 6e 2d 33 32 29 5d 2c 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 74 5b 69 5d 2b 31 32 38 29 2f 32 35 36 29 2c 74 5b 69 5d 2d 3d 32 35 36 2a 72 3b 74 5b 69 5d 2b 3d 72 2c 74 5b 6e Data Ascii: ay([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function T(e,t){var r,n,i,o;for(n=63;n>=32;--n){for(r=0,i=n-32,o=n-12;i<o;++i)t[i]+=r-16t[n]A[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n
2024-11-12 04:19:28 UTC	16384	IN	Data Raw: 31 5d 3e 3e 3e 30 2c 65 5b 74 2b 33 5d 3d 74 68 69 73 2e 5f 68 5b 31 5d 3e 3e 3e 38 2c 65 5b 74 2b 34 5d 3d 74 68 69 73 2e 5f 68 5b 32 5d 3e 3e 3e 30 2c 65 5b 74 2b 35 5d 3d 74 68 69 73 2e 5f 68 5b 32 5d 3e 3e 3e 38 2c 65 5b 74 2b 36 5d 3d 74 68 69 73 2e 5f 68 5b 33 5d 3e 3e 3e 30 2c 65 5b 74 2b 37 5d 3d 74 68 69 73 2e 5f 68 5b 33 5d 3e 3e 3e 38 2c 65 5b 74 2b 38 5d 3d 74 68 69 73 2e 5f 68 5b 34 5d 3e 3e 3e 30 2c 65 5b 74 2b 39 5d 3d 74 68 69 73 2e 5f 68 5b 34 5d 3e 3e 3e 38 2c 65 5b 74 2b 31 30 5d 3d 74 68 69 73 2e 5f 68 5b 35 5d 3e 3e 3e 30 2c 65 5b 74 2b 31 31 5d 3d 74 68 69 73 2e 5f 68 5b 35 5d 3e 3e 3e 38 2c 65 5b 74 2b 31 32 5d 3d 74 68 69 73 2e 5f 68 5b 36 5d 3e 3e 3e 30 2c 65 5b 74 2b 31 33 5d 3d 74 68 69 73 2e 5f 68 5b 36 5d 3e 3e 3e 38 2c 65 5b Data Ascii: 1]>>>0,e[t+3]=this._h[1]>>>8,e[t+4]=this._h[2]>>>0,e[t+5]=this._h[2]>>>8,e[t+6]=this._h[3]>>>0,e[t+7]=this._h[3]>>>8,e[t+8]=this._h[4]>>>0,e[t+9]=this._h[4]>>>8,e[t+10]=this._h[5]>>>0,e[t+11]=this._h[5]>>>8,e[t+12]=this._h[6]>>>0,e[t+13]=this._h[6]>>>8,e[
2024-11-12 04:19:28 UTC	1024	IN	Data Raw: 3e 3e 3e 31 36 2c 76 3d 36 35 35 33 35 26 28 75 3d 6b 29 2c 67 3d 75 3e 3e 3e 31 36 2c 75 3d 72 5b 37 5d 2c 64 2b 3d 28 66 3d 69 5b 37 5d 29 3e 3e 3e 31 36 2c 76 2b 3d 36 35 35 33 35 26 75 2c 67 2b 3d 75 3e 3e 3e 31 36 2c 67 2b 3d 28 76 2b 3d 28 64 2b 3d 28 68 2b 3d 36 35 35 33 35 26 66 29 3e 3e 3e 31 36 29 3e 3e 3e 31 36 29 3e 3e 3e 31 36 2c 72 5b 37 5d 3d 6b 3d 36 35 35 33 35 26 76 7c 67 3c 3c 31 36 2c 69 5b 37 5d 3d 41 3d 36 35 35 33 35 26 68 7c 64 3c 3c 31 36 2c 73 2b 3d 31 32 38 2c 63 2d 3d 31 32 38 7d 72 65 74 75 72 6e 20 73 7d 74 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 6f 3b 74 2e 75 70 64 61 74 65 28 65 29 3b 76 61 72 20 72 3d 74 2e 64 69 67 65 73 74 28 29 3b 72 65 74 75 72 6e 20 74 2e 63 6c 65 61 6e 28 Data Ascii: >>>16,v=65535&(u=k),g=u>>>16,u=r[7],d+=(f=i[7])>>>16,v+=65535&u,g+=u>>>16,g+=(v+=(d+=(h+=65535&f)>>>16)>>>16)>>>16,r[7]=k=65535&v\|g<<16,i[7]=A=65535&h\|d<<16,s+=128,c-=128}return s}t.hash=function(e){var t=new o;t.update(e);var r=t.digest();return t.clean(
2024-11-12 04:19:29 UTC	9592	IN	Data Raw: 2c 64 3d 30 2c 76 3d 30 2c 67 3d 30 2c 79 3d 30 2c 62 3d 30 2c 6d 3d 30 2c 77 3d 30 2c 5f 3d 30 2c 78 3d 30 2c 45 3d 30 2c 6b 3d 30 2c 53 3d 30 2c 5a 3d 30 2c 49 3d 30 2c 4f 3d 30 2c 50 3d 30 2c 4e 3d 30 2c 52 3d 30 2c 41 3d 30 2c 54 3d 30 2c 43 3d 30 2c 55 3d 30 2c 6a 3d 72 5b 30 5d 2c 4d 3d 72 5b 31 5d 2c 4c 3d 72 5b 32 5d 2c 44 3d 72 5b 33 5d 2c 7a 3d 72 5b 34 5d 2c 71 3d 72 5b 35 5d 2c 48 3d 72 5b 36 5d 2c 56 3d 72 5b 37 5d 2c 4b 3d 72 5b 38 5d 2c 42 3d 72 5b 39 5d 2c 46 3d 72 5b 31 30 5d 2c 47 3d 72 5b 31 31 5d 2c 59 3d 72 5b 31 32 5d 2c 4a 3d 72 5b 31 33 5d 2c 57 3d 72 5b 31 34 5d 2c 58 3d 72 5b 31 35 5d 3b 6f 2b 3d 28 6e 3d 74 5b 30 5d 29 2a 6a 2c 61 2b 3d 6e 2a 4d 2c 73 2b 3d 6e 2a 4c 2c 63 2b 3d 6e 2a 44 2c 75 2b 3d 6e 2a 7a 2c 66 2b 3d 6e 2a 71 Data Ascii: ,d=0,v=0,g=0,y=0,b=0,m=0,w=0,_=0,x=0,E=0,k=0,S=0,Z=0,I=0,O=0,P=0,N=0,R=0,A=0,T=0,C=0,U=0,j=r[0],M=r[1],L=r[2],D=r[3],z=r[4],q=r[5],H=r[6],V=r[7],K=r[8],B=r[9],F=r[10],G=r[11],Y=r[12],J=r[13],W=r[14],X=r[15];o+=(n=t[0])j,a+=nM,s+=nL,c+=nD,u+=nz,f+=nq
2024-11-12 04:19:29 UTC	7816	IN	Data Raw: 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 63 68 61 72 61 63 74 65 72 22 29 29 7d 7d 7d 2c 4d 3d 6a 2c 4c 3d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 26 26 22 55 69 6e 74 38 41 72 72 61 79 22 3d 3d 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 29 3b 69 66 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 65 29 29 72 65 74 75 72 6e 20 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 2e 62 75 66 66 65 72 2c 65 2e 62 79 74 65 4f 66 66 Data Ascii: ".concat(t," character"))}}},M=j,L=(new Uint8Array(0),function(e){if(e instanceof Uint8Array&&"Uint8Array"===e.constructor.name)return e;if(e instanceof ArrayBuffer)return new Uint8Array(e);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOff
2024-11-12 04:19:29 UTC	16384	IN	Data Raw: 63 5c 75 64 66 30 61 5c 75 64 38 33 65 5c 75 64 64 32 66 5c 75 64 38 33 64 5c 75 64 63 33 37 5c 75 32 36 30 65 5c 75 64 38 33 64 5c 75 64 63 61 37 5c 75 64 38 33 64 5c 75 64 65 32 66 5c 75 64 38 33 64 5c 75 64 63 38 36 5c 75 64 38 33 64 5c 75 64 63 34 36 5c 75 64 38 33 63 5c 75 64 66 61 34 5c 75 64 38 33 64 5c 75 64 65 34 37 5c 75 64 38 33 63 5c 75 64 66 35 31 5c 75 32 37 34 34 5c 75 64 38 33 63 5c 75 64 66 33 34 5c 75 64 38 33 64 5c 75 64 63 61 33 5c 75 64 38 33 64 5c 75 64 63 33 38 5c 75 64 38 33 64 5c 75 64 63 38 63 5c 75 64 38 33 64 5c 75 64 63 63 64 5c 75 64 38 33 65 5c 75 64 64 34 30 5c 75 64 38 33 65 5c 75 64 64 32 32 5c 75 64 38 33 64 5c 75 64 63 34 35 5c 75 64 38 33 64 5c 75 64 63 61 31 5c 75 64 38 33 64 5c 75 64 63 61 39 5c 75 64 38 33 64 5c 75 Data Ascii: c\udf0a\ud83e\udd2f\ud83d\udc37\u260e\ud83d\udca7\ud83d\ude2f\ud83d\udc86\ud83d\udc46\ud83c\udfa4\ud83d\ude47\ud83c\udf51\u2744\ud83c\udf34\ud83d\udca3\ud83d\udc38\ud83d\udc8c\ud83d\udccd\ud83e\udd40\ud83e\udd22\ud83d\udc45\ud83d\udca1\ud83d\udca9\ud83d\u
2024-11-12 04:19:29 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 72 3d 5a 72 5b 65 5d 2c 6e 3d 72 2e 6d 65 73 73 61 67 65 2c 69 3d 72 2e 63 6f 64 65 3b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 74 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 3a 6e 2c 63 6f 64 65 3a 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 72 28 65 2c 74 29 7b 76 61 72 20 72 3d 53 72 5b 65 5d 2c 6e 3d 72 2e 6d 65 73 73 61 67 65 2c 69 3d 72 2e 63 6f 64 65 3b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 74 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 29 3a 6e 2c 63 6f 64 65 3a 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 28 21 28 74 79 70 Data Ascii: nction Ir(e,t){var r=Zr[e],n=r.message,i=r.code;return{message:t?"".concat(n," ").concat(t):n,code:i}}function Or(e,t){var r=Sr[e],n=r.message,i=r.code;return{message:t?"".concat(n," ").concat(t):n,code:i}}function Pr(e,t){return!!Array.isArray(e)&&(!(typ
2024-11-12 04:19:29 UTC	1024	IN	Data Raw: 73 3c 3c 72 2d 61 5d 29 2c 6e 29 66 6f 72 28 3b 6f 2e 6c 65 6e 67 74 68 2a 72 26 37 3b 29 6f 2b 3d 22 3d 22 3b 72 65 74 75 72 6e 20 6f 7d 28 65 2c 69 2c 6e 29 7d 2c 64 65 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 7b 7d 2c 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 2b 2b 6f 29 69 5b 74 5b 6f 5d 5d 3d 6f 3b 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 3b 22 3d 22 3d 3d 3d 65 5b 61 2d 31 5d 3b 29 2d 2d 61 3b 66 6f 72 28 76 61 72 20 73 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 2a 72 2f 38 7c 30 29 2c 63 3d 30 2c 75 3d 30 2c 66 3d 30 2c 6c 3d 30 3b 6c 3c 61 3b 2b 2b 6c 29 7b 76 61 72 20 70 3d 69 5b 65 5b 6c 5d 5d 3b 69 66 28 76 Data Ascii: s<<r-a]),n)for(;o.lengthr&7;)o+="=";return o}(e,i,n)},decode:function(e){return function(e,t,r,n){for(var i={},o=0;o<t.length;++o)i[t[o]]=o;for(var a=e.length;"="===e[a-1];)--a;for(var s=new Uint8Array(ar/8\|0),c=0,u=0,f=0,l=0;l<a;++l){var p=i[e[l]];if(v
2024-11-12 04:19:29 UTC	1024	IN	Data Raw: 2c 6e 61 6d 65 3a 22 62 61 73 65 31 36 22 2c 61 6c 70 68 61 62 65 74 3a 22 30 31 32 33 34 35 36 37 38 39 61 62 63 64 65 66 22 2c 62 69 74 73 50 65 72 43 68 61 72 3a 34 7d 29 2c 6c 69 3d 74 69 28 7b 70 72 65 66 69 78 3a 22 46 22 2c 6e 61 6d 65 3a 22 62 61 73 65 31 36 75 70 70 65 72 22 2c 61 6c 70 68 61 62 65 74 3a 22 30 31 32 33 34 35 36 37 38 39 41 42 43 44 45 46 22 2c 62 69 74 73 50 65 72 43 68 61 72 3a 34 7d 29 2c 70 69 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 62 61 73 65 31 36 3a 66 69 2c 62 61 73 65 31 36 75 70 70 65 72 3a 6c 69 7d 29 2c 68 69 3d 74 69 28 7b 70 72 65 66 69 78 3a 22 62 22 2c 6e 61 6d 65 3a 22 62 61 73 65 33 32 22 2c 61 6c 70 68 61 62 65 74 3a 22 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d Data Ascii: ,name:"base16",alphabet:"0123456789abcdef",bitsPerChar:4}),li=ti({prefix:"F",name:"base16upper",alphabet:"0123456789ABCDEF",bitsPerChar:4}),pi=Object.freeze({__proto__:null,base16:fi,base16upper:li}),hi=ti({prefix:"b",name:"base32",alphabet:"abcdefghijklm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49767	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	709	OUT	GET /static/js/5883.38419619.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166
2024-11-12 04:19:28 UTC	1928	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 108 Connection: close Date: Tue, 12 Nov 2024 04:19:29 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "ce59d1ddefa88c64e2391b1669f984a4" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 2b2e2811e641703aebf776da39317b9c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:56923 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: ccZipr58UzwsXgmWhDDzhMtniQhbiNRxZO91Iq6DMhTMJfMWKBWCmQ==
2024-11-12 04:19:28 UTC	108	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 38 33 5d 2c 7b 33 35 38 38 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[5883],{35883:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	571	OUT	OPTIONS /sessions HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	292	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type date: Tue, 12 Nov 2024 04:19:28 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	818	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 450 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:28 UTC	450	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 36 2e 39 35 38 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 66 65 65 61 31 35 32 31 36 38 31 62 34 32 39 31 61 30 66 36 33 36 30 39 30 37 33 62 33 31 66 33 22 2c 22 69 6e 69 74 22 3a 74 72 75 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 36 2e 39 35 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 36 2e 39 35 37 5a 22 2c 22 73 74 61 74 75 73 Data Ascii: {"sent_at":"2024-11-12T04:19:26.958Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"}}{"type":"session"}{"sid":"feea1521681b4291a0f63609073b31f3","init":true,"started":"2024-11-12T04:19:26.957Z","timestamp":"2024-11-12T04:19:26.957Z","status
2024-11-12 04:19:29 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:28 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:29 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	172.66.40.81	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	598	OUT	OPTIONS /v1/account/10400/session HTTP/1.1 Host: api.trstplse.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	1117	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-user-agent: standard-- x-cache-config: 0 0 vary: Accept-Encoding, User-Agent access-control-allow-origin: * access-control-allow-headers: X-OptinMonster-ApiKey, X-CSRF-Token, X-XSRF-Token, Bearer-Token, X-Auth-Token, Origin, X-Requested-With, Content-Type, Accept, Authorization, Auth, X-SC-Touchpoint access-control-allow-methods: GET, HEAD, OPTIONS, POST, PUT, DELETE cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0s%2B%2BT%2Fyo7x6TV7UBtHNcjDeRCMwQ%2B1FhIX%2Bx9UzyTKJsE%2BuuZ8d8TqypihLcN5paJbDSktVQzmrWcyl81gB1fg9Taep1B7NelKnTRwmgY0J6epBaRoeVTsSVCjVqLAxanDA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e13b959aaafe589-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1302&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1176&delivery_rate=2350649&cwnd=251&unsent_bytes=0&cid=040468e9c271ca1a&ts=528&x=0"
2024-11-12 04:19:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49773	3.126.198.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	672	OUT	GET /web2/api/admins/actuator/togglz-status HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	483	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:29 GMT Content-Type: application/json Content-Length: 3491 Connection: close apigw-requestid: BHaUuj0gFiAEJYg= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2 access-control-allow-origin: *
2024-11-12 04:19:29 UTC	3491	IN	Data Raw: 5b 7b 22 6e 61 6d 65 22 3a 22 41 44 44 4f 4e 53 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 72 61 74 65 67 79 22 3a 6e 75 6c 6c 2c 22 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 41 64 64 6f 6e 73 22 2c 22 67 72 6f 75 70 73 22 3a 5b 5d 2c 22 65 6e 61 62 6c 65 64 42 79 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 22 65 6e 61 62 6c 65 64 41 74 22 3a 6e 75 6c 6c 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 44 52 45 53 53 5f 42 4f 4f 4b 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 72 61 74 65 67 79 22 3a 6e 75 6c 6c 2c 22 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 41 64 64 72 65 73 Data Ascii: [{"name":"ADDONS","enabled":true,"strategy":null,"params":{},"metadata":{"label":"Addons","groups":[],"enabledByDefault":false,"attributes":{}},"enabledAt":null},{"name":"ADDRESS_BOOK","enabled":true,"strategy":null,"params":{},"metadata":{"label":"Addres

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	13.225.78.95	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:28 UTC	653	OUT	GET /?timestamp=1731385167183 HTTP/1.1 Host: www.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	1962	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html Content-Length: 2938 Connection: close Date: Tue, 12 Nov 2024 04:19:30 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "6bc66faf4ef04baa93a407a9eae17cde" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e5b93012e2bfb81dc9846f43efd610a6.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=0, must-revalidate Clear-Site-Data: cache Access-Control-Allow-Origin: Access-Control-Expose-Headers: * Cloudfront-Viewer-Address: 173.254.250.68:54013 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: StsNPqfdIChaiRBJ2oVZaaeNE_y8Ei8GHRiAJ0HCKvr-w3ouqCvyug==
2024-11-12 04:19:29 UTC	2938	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 64 65 70 72 65 63 61 74 65 64 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	172.67.173.54	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	634	OUT	GET /crowdswap-widget.js?1730283708 HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	1076	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"6ce979505a0cdcd7ca55597e6702e2f7" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zmglSSJlalSs7NFCP4MxHOZ3drcBg3wM3LBcd3UFryumdTJykHZbSc0PJdeDraia30M02BDK%2Fv8bEovZ78oiVpH3N%2BGaJnhS0eW7C9Tt9wq364ynjpVfvNVCoPX89BowqC5368vQvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b95e0a3a2d35-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1212&delivery_rate=1732057&cwnd=251&unsent_bytes=0&cid=8d71e33461712b00&ts=248&x=0"
2024-11-12 04:19:29 UTC	293	IN	Data Raw: 37 63 32 61 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 67 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3d 76 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 76 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 67 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 67 2c 72 2e 61 6d 64 4f 3d 7b 7d 2c 65 3d 5b 5d 2c 72 2e 4f 3d 28 6e 2c 74 2c 69 2c 66 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 Data Ascii: 7c2a(()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdO={},e=[],r.O=(n,t,i,f)=>{if(!t){var a=1/0;f
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 65 5b 6f 5d 2c 63 3d 21 30 2c 64 3d 30 3b 64 3c 74 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 28 21 31 26 66 7c 7c 61 3e 3d 66 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 2e 4f 29 2e 65 76 65 72 79 28 62 3d 3e 72 2e 4f 5b 62 5d 28 74 5b 64 5d 29 29 3f 74 2e 73 70 6c 69 63 65 28 64 2d 2d 2c 31 29 3a 28 63 3d 21 31 2c 66 3c 61 26 26 28 61 3d 66 29 29 3b 69 66 28 63 29 7b 65 2e 73 70 6c 69 63 65 28 6f 2d 2d 2c 31 29 3b 76 61 72 20 75 3d 69 28 29 3b 76 6f 69 64 20 30 21 3d 3d 75 26 26 28 6e 3d 75 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 3d 66 7c 7c 30 3b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3e 30 26 26 65 5b 6f 2d 31 5d 5b 32 5d 3e 66 3b 6f 2d 2d 29 65 5b 6f 5d 3d 65 5b 6f 2d 31 5d 3b 65 5b 6f 5d 3d 5b 74 2c 69 2c 66 5d 7d 2c 72 2e 6e 3d 65 Data Ascii: e[o],c=!0,d=0;d<t.length;d++)(!1&f\|\|a>=f)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f\|\|0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n=e
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 2c 72 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 72 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 6e 2b 66 29 2c 61 2e 73 72 63 3d 72 2e 74 75 28 74 29 29 2c 65 5b 74 5d 3d 5b 69 5d 3b 76 61 72 20 6c 3d 28 5f 2c 62 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 70 29 3b 76 61 72 20 68 3d 65 5b 74 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 74 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 2c 68 26 26 68 2e 66 6f 72 45 61 63 68 28 79 3d 3e 79 28 62 29 29 2c 5f 29 72 65 74 75 72 6e 20 5f 28 62 29 7d 2c 70 Data Ascii: ,r.nc&&a.setAttribute("nonce",r.nc),a.setAttribute("data-webpack",n+f),a.src=r.tu(t)),e[t]=[i];var l=(_,b)=>{a.onerror=a.onload=null,clearTimeout(p);var h=e[t];if(delete e[t],a.parentNode&&a.parentNode.removeChild(a),h&&h.forEach(y=>y(b)),_)return _(b)},p
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 70 5d 29 29 7b 66 6f 72 28 64 20 69 6e 20 61 29 72 2e 6f 28 61 2c 64 29 26 26 28 72 2e 6d 5b 64 5d 3d 61 5b 64 5d 29 3b 69 66 28 63 29 76 61 72 20 6c 3d 63 28 72 29 7d 66 6f 72 28 69 26 26 69 28 66 29 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 2e 6f 28 65 2c 75 3d 6f 5b 73 5d 29 26 26 65 5b 75 5d 26 26 65 5b 75 5d 5b 30 5d 28 29 2c 65 5b 75 5d 3d 30 3b 72 65 74 75 72 6e 20 72 2e 4f 28 6c 29 7d 2c 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 72 6f 77 64 73 77 61 70 5f 77 69 64 67 65 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 72 6f 77 64 73 77 61 70 5f 77 69 64 67 65 74 7c 7c 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 74 2e 70 75 73 68 3d 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c Data Ascii: p])){for(d in a)r.o(a,d)&&(r.m[d]=a[d]);if(c)var l=c(r)}for(i&&i(f);s<o.length;s++)r.o(e,u=o[s])&&e[u]&&e[u][0](),e[u]=0;return r.O(l)},t=self.webpackChunkcrowdswap_widget=self.webpackChunkcrowdswap_widget\|\|[];t.forEach(n.bind(null,0)),t.push=n.bind(null,
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 69 6e 28 22 22 29 7d 3b 66 6f 72 28 76 61 72 20 5a 3d 5b 5d 2c 50 3d 5b 5d 2c 75 74 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3c 22 75 22 3f 55 69 6e 74 38 41 72 72 61 79 3a 41 72 72 61 79 2c 61 74 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 7a 3d 30 3b 7a 3c 36 34 3b 2b 2b 7a 29 5a 5b 7a 5d 3d 61 74 5b 7a 5d 2c 50 5b 61 74 2e 63 68 61 72 43 6f 64 65 41 74 28 7a 29 5d 3d 7a 3b 66 75 6e 63 74 69 6f 6e 20 46 28 6b 29 7b 76 61 72 20 54 3d 6b 2e 6c 65 6e 67 74 68 3b 69 66 28 54 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 69 6e 67 2e 20 Data Ascii: in("")};for(var Z=[],P=[],ut=typeof Uint8Array<"u"?Uint8Array:Array,at="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",z=0;z<64;++z)Z[z]=at[z],P[at.charCodeAt(z)]=z;function F(k){var T=k.length;if(T%4>0)throw new Error("Invalid string.
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 74 29 3b 63 6f 6e 73 74 20 65 3d 30 7c 5f 74 28 6e 2c 74 29 3b 6c 65 74 20 72 3d 46 28 65 29 3b 63 6f 6e 73 74 20 69 3d 72 2e 77 72 69 74 65 28 6e 2c 74 29 3b 72 65 74 75 72 6e 20 69 21 3d 3d 65 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 69 29 29 2c 72 7d 28 6e 2c 74 29 3b 69 66 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 6e 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 54 28 6e 29 7b 69 66 28 6f 28 6e 2c 55 69 6e 74 38 41 72 72 61 79 29 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6e 29 3b 72 65 74 75 72 6e 20 52 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6b 28 6e 29 7d 28 Data Ascii: encoding: "+t);const e=0\|_t(n,t);let r=F(e);const i=r.write(n,t);return i!==e&&(r=r.slice(0,i)),r}(n,t);if(ArrayBuffer.isView(n))return function T(n){if(o(n,Uint8Array)){const t=new Uint8Array(n);return R(t.buffer,t.byteOffset,t.byteLength)}return k(n)}(
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 6d 75 73 74 20 62 65 20 6f 66 20 74 79 70 65 20 6e 75 6d 62 65 72 27 29 3b 69 66 28 6e 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 27 54 68 65 20 76 61 6c 75 65 20 22 27 2b 6e 2b 27 22 20 69 73 20 69 6e 76 61 6c 69 64 20 66 6f 72 20 6f 70 74 69 6f 6e 20 22 73 69 7a 65 22 27 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 6e 29 7b 72 65 74 75 72 6e 20 63 74 28 6e 29 2c 46 28 6e 3c 30 3f 30 3a 30 7c 64 74 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 6e 29 7b 63 6f 6e 73 74 20 74 3d 6e 2e 6c 65 6e 67 74 68 3c 30 3f 30 3a 30 7c 64 74 28 6e 2e 6c 65 6e 67 74 68 29 2c 65 3d 46 28 74 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 74 3b 72 2b 3d 31 29 65 5b 72 5d 3d 32 35 35 26 6e 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f Data Ascii: must be of type number');if(n<0)throw new RangeError('The value "'+n+'" is invalid for option "size"')}function K(n){return ct(n),F(n<0?0:0\|dt(n))}function k(n){const t=n.length<0?0:0\|dt(n.length),e=F(t);for(let r=0;r<t;r+=1)e[r]=255&n[r];return e}functio
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 74 28 6e 2c 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 69 66 28 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3c 30 29 26 26 28 74 3d 30 29 2c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 28 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 65 3c 3d 30 29 7c 7c 28 65 3e 3e 3e 3d 30 29 3c 3d 28 74 3e 3e 3e 3d 30 29 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 6e 7c 7c 28 6e 3d 22 75 74 66 38 22 29 3b 3b 29 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 75 65 28 74 68 69 73 2c 74 2c 65 29 3b 63 61 73 65 22 75 74 66 38 22 3a 63 61 73 65 22 75 74 66 2d 38 22 3a 72 65 74 75 72 6e 20 62 74 28 74 68 69 73 2c 74 2c 65 29 3b 63 61 73 65 22 61 73 63 69 69 Data Ascii: t(n,t,e){let r=!1;if((void 0===t\|\|t<0)&&(t=0),t>this.length\|\|((void 0===e\|\|e>this.length)&&(e=this.length),e<=0)\|\|(e>>>=0)<=(t>>>=0))return"";for(n\|\|(n="utf8");;)switch(n){case"hex":return ue(this,t,e);case"utf8":case"utf-8":return bt(this,t,e);case"ascii
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 78 28 41 2c 4f 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 63 3f 41 5b 4f 5d 3a 41 2e 72 65 61 64 55 49 6e 74 31 36 42 45 28 4f 2a 63 29 7d 69 66 28 69 29 7b 6c 65 74 20 41 3d 2d 31 3b 66 6f 72 28 76 3d 65 3b 76 3c 6c 3b 76 2b 2b 29 69 66 28 78 28 6e 2c 76 29 3d 3d 3d 78 28 74 2c 2d 31 3d 3d 3d 41 3f 30 3a 76 2d 41 29 29 7b 69 66 28 2d 31 3d 3d 3d 41 26 26 28 41 3d 76 29 2c 76 2d 41 2b 31 3d 3d 3d 67 29 72 65 74 75 72 6e 20 41 2a 63 7d 65 6c 73 65 2d 31 21 3d 3d 41 26 26 28 76 2d 3d 76 2d 41 29 2c 41 3d 2d 31 7d 65 6c 73 65 20 66 6f 72 28 65 2b 67 3e 6c 26 26 28 65 3d 6c 2d 67 29 2c 76 3d 65 3b 76 3e 3d 30 3b 76 2d 2d 29 7b 6c 65 74 20 41 3d 21 30 3b 66 6f 72 28 6c 65 74 20 4f 3d 30 3b 4f 3c 67 3b 4f 2b 2b 29 69 66 28 78 28 6e 2c 76 2b 4f 29 Data Ascii: ction x(A,O){return 1===c?A[O]:A.readUInt16BE(Oc)}if(i){let A=-1;for(v=e;v<l;v++)if(x(n,v)===x(t,-1===A?0:v-A)){if(-1===A&&(A=v),v-A+1===g)return Ac}else-1!==A&&(v-=v-A),A=-1}else for(e+g>l&&(e=l-g),v=e;v>=0;v--){let A=!0;for(let O=0;O<g;O++)if(x(n,v+O)
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 34 33 29 26 26 28 6c 3d 4f 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 78 3d 6e 5b 69 2b 31 5d 2c 76 3d 6e 5b 69 2b 32 5d 2c 41 3d 6e 5b 69 2b 33 5d 2c 31 32 38 3d 3d 28 31 39 32 26 78 29 26 26 31 32 38 3d 3d 28 31 39 32 26 76 29 26 26 31 32 38 3d 3d 28 31 39 32 26 41 29 26 26 28 4f 3d 28 31 35 26 63 29 3c 3c 31 38 7c 28 36 33 26 78 29 3c 3c 31 32 7c 28 36 33 26 76 29 3c 3c 36 7c 36 33 26 41 2c 4f 3e 36 35 35 33 35 26 26 4f 3c 31 31 31 34 31 31 32 26 26 28 6c 3d 4f 29 29 7d 7d 6e 75 6c 6c 3d 3d 3d 6c 3f 28 6c 3d 36 35 35 33 33 2c 67 3d 31 29 3a 6c 3e 36 35 35 33 35 26 26 28 6c 2d 3d 36 35 35 33 36 2c 72 2e 70 75 73 68 28 6c 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 6c 3d 35 36 33 32 30 7c 31 30 32 33 26 6c 29 2c 72 2e 70 75 73 68 28 6c 29 Data Ascii: 43)&&(l=O));break;case 4:x=n[i+1],v=n[i+2],A=n[i+3],128==(192&x)&&128==(192&v)&&128==(192&A)&&(O=(15&c)<<18\|(63&x)<<12\|(63&v)<<6\|63&A,O>65535&&O<1114112&&(l=O))}}null===l?(l=65533,g=1):l>65535&&(l-=65536,r.push(l>>>10&1023\|55296),l=56320\|1023&l),r.push(l)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49781	216.239.32.181	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	1405	OUT	POST /g/collect?v=2&tid=G-EHZSQKTF1P&gtm=45je4bb0v9116426356z871480359za200zb71480359&_p=1731385163337&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&cid=752911800.1731385168&ecid=477598349&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1731385168&sct=1&seg=0&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&dt=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&en=page_view&_fv=1&_nsi=1&_ss=1&tfd=6993 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	874	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Date: Tue, 12 Nov 2024 04:19:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49782	172.66.40.81	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	709	OUT	POST /v1/account/10400/session HTTP/1.1 Host: api.trstplse.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Requested-With: TrustPulseApi sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	796	IN	HTTP/1.1 500 Internal Server Error Date: Tue, 12 Nov 2024 04:19:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-custom-error: true x-lb: 10.0.2.71 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZsxWQxcxK10zB9btxRyeaZ%2Fwgfx5rw%2BwAbjsZcS%2BecJ%2FiyeK3Em3PpHCz%2B8aAOuSKAxLGpml0V%2BQjMNY5IGzZGgaSlnU3bimGSQeIQNOGHktp04VroxhEuVOFsjYD6eHUu8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e13b95e8842476d-DFW server-timing: cfL4;desc="?proto=TCP&rtt=1101&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1287&delivery_rate=2649588&cwnd=32&unsent_bytes=0&cid=661947f8db718d3c&ts=200&x=0"
2024-11-12 04:19:29 UTC	59	IN	Data Raw: 33 35 0d 0a 3c 21 2d 2d 20 31 30 2e 30 2e 32 2e 37 31 20 2d 2d 3e 0a 3c 21 2d 2d 20 31 30 2e 30 2e 32 2e 37 31 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a Data Ascii: 35... 10.0.2.71 -->... 10.0.2.71 --><!DOCTYPE html>
2024-11-12 04:19:29 UTC	1369	IN	Data Raw: 39 38 63 0d 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 73 74 79 6c 65 3d 27 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 36 30 36 35 36 66 3b 27 3e 0a 09 3c 68 65 61 64 20 73 74 79 6c 65 3d 22 62 6f 78 Data Ascii: 98c<html lang="en-US" style='box-sizing:border-box;font-family:"proxima-nova", Helvetica, Arial, sans-serif;font-weight:400;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;margin:0;line-height:1.5;color:#60656f;'><head style="box
2024-11-12 04:19:29 UTC	1082	IN	Data Raw: 39 35 4a 76 41 7a 35 64 35 6a 59 75 66 6b 59 61 39 31 49 41 41 4d 33 61 61 74 6e 58 47 2f 58 4b 78 35 47 75 66 6d 6d 63 6b 50 6c 71 6e 34 56 53 52 79 45 69 41 72 55 68 6a 63 55 53 5a 33 44 4f 69 37 53 73 41 44 79 64 71 73 52 75 42 7a 68 48 57 75 79 6b 4e 41 41 41 41 55 33 52 53 54 6c 4d 41 45 44 59 46 2f 69 30 5a 2f 76 33 39 4d 53 49 54 42 2f 7a 36 31 4b 64 31 58 6b 39 4e 50 54 41 63 2f 76 6e 78 37 39 37 64 7a 63 53 6a 6f 4a 43 4c 68 58 35 35 59 45 74 43 4f 53 6f 6a 49 50 6e 30 38 76 48 78 38 65 6e 6f 34 2b 50 68 34 4e 62 4f 78 73 62 45 76 62 53 7a 73 61 2b 6b 6e 5a 75 5a 6b 6f 39 34 63 6d 4e 66 55 56 42 43 4b 2b 59 38 49 43 38 41 41 41 4a 72 53 55 52 42 56 44 6a 4c 59 71 41 37 38 46 63 77 79 58 4c 44 70 30 42 49 57 45 4c 54 32 6f 55 58 75 36 53 32 75 6f Data Ascii: 95JvAz5d5jYufkYa91IAAM3aatnXG/XKx5GufmmckPlqn4VSRyEiArUhjcUSZ3DOi7SsADydqsRuBzhHWuykNAAAAU3RSTlMAEDYF/i0Z/v39MSITB/z61Kd1Xk9NPTAc/vnx797dzcSjoJCLhX55YEtCOSojIPn08vHx8eno4+Ph4NbOxsbEvbSzsa+knZuZko94cmNfUVBCK+Y8IC8AAAJrSURBVDjLYqA78FcwyXLDp0BIWELT2oUXu6S2uo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49795	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:29 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49777	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	857	OUT	GET /static/media/OpenSans-Regular.9a6cfa5890d7f3eef585.ttf HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure_sharing0documentpreview.wesendit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt
2024-11-12 04:19:30 UTC	1980	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: binary/octet-stream Content-Length: 130836 Connection: close Date: Tue, 12 Nov 2024 04:19:30 GMT Last-Modified: Tue, 15 Oct 2024 09:39:36 GMT Etag: "7df68ccfcb8ffe00669871052a4929c9" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 ac0e9b19969df989a920e6d1b834d008.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Access-Control-Allow-Origin: Access-Control-Expose-Headers: * Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:33803 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: aDjmygdYLlOkok_rEJiMQQk0A7ZtQBbJPg_9jx7Fa1bhVat6_uxuIg==
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 44 45 46 af b3 b5 55 00 00 03 74 00 00 01 c2 47 50 4f 53 55 0f d6 98 00 00 76 6c 00 00 39 7c 47 53 55 42 13 63 1f 65 00 00 1e 94 00 00 0f 06 4f 53 2f 32 96 40 83 2c 00 00 02 18 00 00 00 60 53 54 41 54 5e ff 43 39 00 00 01 b8 00 00 00 5e 63 6d 61 70 c3 38 1f 80 00 00 07 d8 00 00 03 f6 63 76 74 20 3d 3f 2c c8 00 00 02 78 00 00 00 fc 66 70 67 6d e2 19 9e 5a 00 00 2d 9c 00 00 0f 94 67 61 73 70 00 15 00 23 00 00 01 2c 00 00 00 10 67 6c 79 66 1b 56 d3 41 00 00 af e8 00 01 4f 2a 68 65 61 64 1b 9d 34 ba 00 00 01 80 00 00 00 36 68 68 65 61 0d c8 08 f6 00 00 01 5c 00 00 00 24 68 6d 74 78 53 ec 43 57 00 00 3d 30 00 00 11 ce 6c 6f 63 61 8a 85 38 bd 00 00 0b d0 00 00 08 ea 6d 61 78 70 07 fb 10 a5 00 00 01 3c 00 00 00 20 6e 61 6d Data Ascii: GDEFUtGPOSUvl9\|GSUBceOS/2@,`STAT^C9^cmap8cvt =?,xfpgmZ-gasp#,glyfVAO*head46hhea\$hmtxSCW=0loca8maxp< nam
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 04 d0 00 72 04 d0 00 72 04 d0 00 72 04 d0 00 72 04 d0 00 72 04 93 00 67 04 d0 00 72 04 e8 00 a3 04 e8 00 a3 04 e8 00 a3 04 e8 00 a3 04 02 00 02 04 e5 00 af 04 02 00 02 05 0f 00 00 04 72 00 5e 05 0f 00 00 04 72 00 5e 05 0f 00 00 04 72 00 5e 05 0a 00 7d 03 d5 00 72 05 0a 00 7d 03 d5 00 72 05 0a 00 7d 03 d5 00 72 05 0a 00 7d 03 d5 00 72 05 ce 00 c8 04 e5 00 72 05 ce 00 3a 04 e8 00 72 04 72 00 c8 04 7e 00 72 04 72 00 c8 04 7e 00 72 04 72 00 c8 04 7e 00 72 04 72 00 c8 04 7e 00 72 04 72 00 c8 04 7e 00 72 05 d1 00 7d 04 58 00 1f 05 d1 00 7d 04 58 00 1f 05 d1 00 7d 04 58 00 1f 05 d1 00 7d 04 58 00 1f 05 e6 00 c8 04 e8 ff b7 05 e6 00 00 04 e8 00 14 02 3c ff ad 02 05 ff 89 02 3c ff f3 02 05 ff d6 02 3c ff e7 02 05 ff d3 02 3c 00 58 02 05 00 31 02 3c 00 bd 04 62 00 Data Ascii: rrrrrgrr^r^r^}r}r}r}rr:rr~rr~rr~rr~rr~r}X}X}X}X<<<<X1<b
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 00 00 2c ea 32 1e 00 00 00 00 00 00 2c e4 30 44 00 00 00 00 00 00 32 24 2c de 00 00 00 00 00 00 2c d8 2f de 00 00 00 00 00 00 2c d2 2d fe 00 00 00 00 00 00 2c cc 2d fe 00 00 00 00 00 00 2c c6 2d fe 00 00 00 00 00 00 30 32 2c c0 00 00 00 00 00 00 2c ba 2c b4 00 00 00 00 00 00 2c ae 31 f4 00 00 00 00 00 00 2d f8 30 20 00 00 00 00 00 00 31 e8 2c a8 00 00 00 00 00 00 30 1a 2c a2 00 00 00 00 00 00 2c 9c 30 14 00 00 00 00 00 00 2c 96 31 d0 00 00 00 00 00 00 2c 90 30 08 00 00 00 00 00 00 31 d6 2c 8a 00 00 00 00 00 00 30 1a 2c 84 00 00 00 00 00 00 31 d6 31 d0 00 00 00 00 00 00 30 1a 30 08 00 00 00 00 00 00 31 d6 31 d0 00 00 00 00 00 00 30 1a 30 08 00 00 00 00 00 00 31 d6 31 d0 00 00 00 00 00 00 30 1a 30 08 00 00 00 00 00 00 2c 7e 31 a6 00 00 00 00 00 00 2d bc 2f Data Ascii: ,2,0D2$,,/,-,-,-02,,,,1-0 1,0,,0,1,01,0,110011001100,~1-/
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 6d 01 2a 00 00 01 00 c8 00 00 03 f6 05 b6 00 0b 00 19 40 0c 06 09 09 01 05 02 02 72 0a 01 08 72 00 2b 32 2b 32 11 39 2f 33 30 31 61 21 11 21 15 21 11 21 15 21 11 21 03 f6 fc d2 03 2e fd 7c 02 5f fd a1 02 84 05 b6 96 fe 27 94 fd e3 00 00 01 00 c8 00 00 03 f6 05 b6 00 09 00 17 40 0b 06 09 09 01 05 02 02 72 01 08 72 00 2b 2b 32 11 39 2f 33 30 31 61 23 11 21 15 21 11 21 15 21 01 72 aa 03 2e fd 7c 02 5d fd a3 05 b6 96 fd e8 95 00 01 00 7d ff ec 05 38 05 cb 00 21 00 19 40 0c 21 00 00 05 14 0d 03 72 1c 05 09 72 00 2b 32 2b 32 11 39 2f 33 30 31 41 21 11 06 06 23 22 24 02 35 34 12 24 33 32 16 17 07 26 26 23 22 06 02 15 14 12 16 33 32 36 37 11 21 03 39 01 ff 73 f3 96 e4 fe c7 a2 b3 01 53 ee 7a db 5e 41 51 c3 68 b3 ff 87 76 fa c5 63 8e 3a fe ab 02 fe fd 3b 27 26 b6 Data Ascii: m*@rr+2+29/301a!!!!!!.\|_'@rr++29/301a#!!!!r.\|]}8!@!rr+2+29/301A!#"$54$32&&#"3267!9sSz^AQhvc:;'&
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 02 3e 01 6f 00 0a b3 1a 0a 02 72 00 2b ce 30 31 ff ff 00 af 00 00 04 41 06 21 06 26 00 51 00 00 01 07 00 76 01 b2 00 00 00 0a b3 1d 00 07 72 00 2b ce 30 31 ff ff 00 c8 fe 3b 05 3f 05 b6 06 26 00 31 00 00 00 07 04 71 01 10 00 00 ff ff 00 af fe 3b 04 41 04 5c 06 26 00 51 00 00 00 07 04 71 00 81 00 00 ff ff 00 c8 00 00 05 3f 07 8f 06 26 00 31 00 00 01 07 01 4b 01 61 01 6f 00 0a b3 14 0a 02 72 00 2b ce 30 31 ff ff 00 af 00 00 04 41 06 20 06 26 00 51 00 00 01 07 01 4b 00 d5 00 00 00 0a b3 16 00 07 72 00 2b ce 30 31 ff ff 00 02 00 00 04 c2 05 b6 04 27 00 51 00 81 00 00 00 06 02 06 e8 00 00 01 00 c8 fe 7f 05 3f 05 b6 00 21 00 1b 40 0e 0b 16 0c 03 13 1d 15 02 72 13 08 72 07 00 00 2f 32 2b 2b 32 12 17 39 30 31 41 22 26 27 35 16 16 33 32 36 36 35 01 23 1e 02 15 11 Data Ascii: >or+01A!&Qvr+01;?&1q;A\&Qq?&1Kaor+01A &QKr+01'Q?!@rr/2++2901A"&'532665#
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 33 30 31 41 11 21 32 16 16 15 14 06 06 23 21 11 21 11 23 11 33 11 21 11 01 23 11 33 32 36 35 34 26 04 05 01 06 90 b8 59 57 be 9a fe 5c fe 00 aa aa 02 04 01 97 f3 f3 7e 95 8b 04 48 fe 3a 45 89 66 66 96 52 01 f2 fe 0e 04 48 fe 36 01 ca fd b0 fe 8f 59 66 64 4e ff ff 00 14 00 00 04 41 06 14 06 06 00 e9 00 00 ff ff 00 af 00 00 04 0b 06 21 06 26 01 d3 00 00 01 07 00 76 01 6c 00 00 00 0a b3 12 08 06 72 00 2b ce 30 31 ff ff 00 02 fe 13 04 02 06 0b 06 26 00 5c 00 00 01 06 02 33 b9 00 00 0a b3 22 00 06 72 00 2b ce 30 31 00 01 00 af fe 87 04 48 04 48 00 0b 00 15 40 0a 07 02 06 72 0a 09 04 01 0a 72 00 2b 32 32 cc 2b 32 30 31 61 21 11 33 11 21 11 33 11 21 11 23 02 2f fe 80 a7 02 4c a6 fe 89 a2 04 48 fc 45 03 bb fb b8 fe 87 00 01 00 c8 00 00 04 0c 06 e3 00 07 00 10 b7 Data Ascii: 301A!2#!!#3!#32654&YW\~H:EffRH6YfdNA!&vlr+01&\3"r+01HH@rr+22+201a!3!3!#/LHE
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 01 33 01 11 33 11 01 05 b3 fe 38 01 73 bf a1 60 fe 20 9b fe 21 be 01 ef fe 37 b7 01 c0 9b 01 c2 04 48 fd eb fe 58 fd fc 01 79 02 2c fd d4 02 2c fd d4 02 33 02 15 fd ec 02 14 fd ec 02 14 ff ff 00 4f fe 3e 04 3b 05 cb 06 26 01 b0 00 00 00 07 03 6b 01 5c 00 00 ff ff 00 43 fe 3e 03 80 04 5c 06 26 01 d0 00 00 00 07 03 6b 01 07 00 00 00 01 00 c8 fe 82 05 2a 05 b6 00 0e 00 21 40 11 08 0d 01 03 0a 0e 0b 02 72 04 07 02 07 07 0a 08 72 00 2b 32 11 33 10 cc 2b 32 12 17 39 30 31 49 02 33 11 23 11 23 01 11 23 11 33 11 01 04 c4 fd 79 02 1b d2 a3 75 fd 60 aa aa 02 8f 05 b6 fd 3a fd a8 fd ea 01 7e 02 e6 fd 1a 05 b6 fd 3c 02 c4 00 01 00 af fe 86 04 3f 04 48 00 0e 00 1f 40 10 03 08 0b 03 05 0a 06 06 72 0c 02 02 00 05 0a 72 00 2b ce 33 11 33 2b 32 12 17 39 30 31 41 11 23 01 Data Ascii: 338s` !7HXy,,3O>;&k\C>\&k*!@rr+23+2901I3###3yu`:~<?H@rr+33+2901A#
2024-11-12 04:19:30 UTC	16148	IN	Data Raw: 14 0e 02 23 22 26 27 35 16 16 33 32 36 36 37 23 06 06 23 22 26 35 34 36 17 22 06 15 14 16 33 32 36 36 35 34 26 26 01 55 5c 94 57 27 5f a8 82 23 48 17 16 42 31 70 7e 39 05 0a 1c 6a 53 82 97 a7 8b 4c 64 54 58 3a 59 32 2a 55 06 d5 53 ab 86 67 bd 94 55 08 06 74 09 0c 5b 96 58 28 41 92 85 85 a8 6e 5e 5c 51 61 2b 45 27 3d 60 38 ff ff ff da ff ec 02 93 07 8d 06 26 01 85 00 00 01 07 03 88 ff 6f 00 00 00 12 40 0a 04 03 02 01 21 10 01 01 8d 56 00 2b 34 34 34 34 ff ff ff da ff ec 02 93 07 8d 06 26 01 85 00 00 01 07 03 87 ff 6f 00 00 00 12 40 0a 04 03 02 01 1b 10 01 01 8d 56 00 2b 34 34 34 34 ff ff ff cc ff ec 02 93 07 8d 06 26 01 85 00 00 01 07 03 86 ff 6d 00 00 00 12 40 0a 04 03 02 01 25 10 01 01 8d 56 00 2b 34 34 34 34 ff ff ff ce ff ec 02 93 07 8d 06 26 01 85 00 Data Ascii: #"&'532667##"&546"326654&&U\W'_#HB1p~9jSLdTX:Y2*USgUt[X(An^\Qa+E'=`8&o@!V+4444&o@V+4444&m@%V+4444&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49783	142.250.185.226	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	981	OUT	GET /td/ga/rul?tid=G-EHZSQKTF1P&gacid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=326597971 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 12-Nov-2024 04:34:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-12 04:19:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-11-12 04:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49780	193.16.220.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	382	OUT	GET /upp/payment/js/secure-fields-2.0.0.min.js HTTP/1.1 Host: pay.datatrans.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	895	IN	HTTP/1.1 200 Server: nginx Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" X-XSS-Protection: 1; mode=block Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; child-src 'self'; frame-src 'self' https://pay.google.com https://3d.sandbox.datatrans.com https://3d.datatrans.com; object-src 'self'; report-uri /upp/csp-report Cache-Control: public, max-age=300 Expires: Tue, 12 Nov 2024 04:24:30 GMT ETag: 1729759548333
2024-11-12 04:19:30 UTC	7596	IN	Data Raw: 31 64 33 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 5d 2c 62 29 7d 65 6c 73 65 7b 69 66 28 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 7d 65 6c 73 65 7b 61 2e 53 65 63 75 72 65 46 69 65 6c 64 73 3d 62 28 29 7d 7d 7d 28 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 45 29 7b 76 61 72 20 43 3d 7b 7d 3b 76 61 72 20 42 3d 68 Data Ascii: 1d3e(function(a,b){if(typeof define==="function"&&define.amd){define([],b)}else{if(typeof module==="object"&&module.exports){module.exports=b()}else{a.SecureFields=b()}}}(typeof self!=="undefined"?self:this,function(){return function(E){var C={};var B=h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49779	193.16.220.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	378	OUT	GET /upp/payment/js/paypal-button-1.0.0.js HTTP/1.1 Host: pay.datatrans.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	895	IN	HTTP/1.1 200 Server: nginx Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubdomains P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" X-XSS-Protection: 1; mode=block Content-Security-Policy-Report-Only: default-src 'self'; script-src 'self' 'unsafe-inline' https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; child-src 'self'; frame-src 'self' https://pay.google.com https://3d.sandbox.datatrans.com https://3d.datatrans.com; object-src 'self'; report-uri /upp/csp-report Cache-Control: public, max-age=300 Expires: Tue, 12 Nov 2024 04:24:30 GMT ETag: 1729759548333
2024-11-12 04:19:30 UTC	15489	IN	Data Raw: 33 63 38 61 0d 0a 70 61 72 63 65 6c 52 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 61 72 63 65 6c 52 65 71 75 69 72 65 26 26 70 61 72 63 65 6c 52 65 71 75 69 72 65 2c 75 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 6e 29 7b 69 66 28 21 72 5b 74 5d 29 7b 69 66 28 21 65 5b 74 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 70 61 72 63 65 6c 52 65 71 75 69 72 65 26 26 70 61 72 63 65 6c 52 65 71 75 69 72 65 3b 69 66 28 21 6e 26 26 69 29 72 65 74 75 72 6e 20 69 28 74 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 Data Ascii: 3c8aparcelRequire=function(e,r,t,n){var i,o="function"==typeof parcelRequire&&parcelRequire,u="function"==typeof require&&require;function f(t,n){if(!r[t]){if(!e[t]){var i="function"==typeof parcelRequire&&parcelRequire;if(!n&&i)return i(t,!0);if(o)retu
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 75 6c 65 2c 65 78 70 6f 72 74 73 29 20 7b 0a 0d 0a 33 66 66 30 0d 0a 76 61 72 20 72 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 68 61 73 22 29 2c 65 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 74 6f 2d 69 6f 62 6a 65 63 74 22 29 2c 75 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 61 72 72 61 79 2d 69 6e 63 6c 75 64 65 73 22 29 28 21 31 29 2c 69 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 68 61 72 65 64 2d 6b 65 79 22 29 28 22 49 45 5f 50 52 4f 54 4f 22 29 3b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 29 7b 76 61 72 20 6e 2c 73 3d 65 28 6f 29 2c 74 3d 30 2c 68 3d 5b 5d 3b 66 6f 72 28 6e 20 69 6e 20 73 29 6e 21 3d 69 26 26 72 28 73 2c 6e 29 26 26 68 2e 70 75 73 68 28 6e 29 3b 66 6f 72 28 3b 61 2e 6c 65 6e 67 74 68 3e 74 3b 29 72 28 73 2c Data Ascii: ule,exports) {3ff0var r=require("./_has"),e=require("./_to-iobject"),u=require("./_array-includes")(!1),i=require("./_shared-key")("IE_PROTO");module.exports=function(o,a){var n,s=e(o),t=0,h=[];for(n in s)n!=i&&r(s,n)&&h.push(n);for(;a.length>t;)r(s,
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 7d 29 2c 75 28 75 2e 0d 0a 66 66 38 0d 0a 47 2b 75 2e 57 2b 75 2e 46 2a 21 45 2c 7b 50 72 6f 6d 69 73 65 3a 6b 7d 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 65 74 2d 74 6f 2d 73 74 72 69 6e 67 2d 74 61 67 22 29 28 6b 2c 6a 29 2c 72 65 71 75 69 72 65 28 22 2e 2f 5f 73 65 74 2d 73 70 65 63 69 65 73 22 29 28 6a 29 2c 69 3d 72 65 71 75 69 72 65 28 22 2e 2f 5f 63 6f 72 65 22 29 5b 6a 5d 2c 75 28 75 2e 53 2b 75 2e 46 2a 21 45 2c 6a 2c 7b 72 65 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 53 28 74 68 69 73 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 72 65 6a 65 63 74 29 28 65 29 2c 72 2e 70 72 6f 6d 69 73 65 7d 7d 29 2c 75 28 75 2e 53 2b 75 2e 46 2a 28 6e 7c 7c 21 45 29 2c 6a 2c 7b 72 65 73 6f 6c 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: }),u(u.ff8G+u.W+u.F!E,{Promise:k}),require("./_set-to-string-tag")(k,j),require("./_set-species")(j),i=require("./_core")[j],u(u.S+u.F!E,j,{reject:function(e){var r=S(this);return(0,r.reject)(e),r.promise}}),u(u.S+u.F*(n\|\|!E),j,{resolve:function(e){
2024-11-12 04:19:30 UTC	3736	IN	Data Raw: 6f 6e 2c 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 6e 7c 7c 78 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 22 63 6f 6e 74 61 69 6e 65 72 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 22 29 2c 76 6f 69 64 20 30 21 3d 3d 66 2e 72 65 66 6e 6f 26 26 6e 75 6c 6c 21 3d 66 2e 72 65 66 6e 6f 7c 7c 78 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 22 72 65 66 6e 6f 20 69 73 20 61 20 6d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 22 29 2c 6c 3d 66 2e 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 4f 6e 6c 79 2c 64 3d 66 2e 72 65 74 75 72 6e 41 64 64 72 65 73 73 2c 63 3d 66 2e 72 65 66 6e 6f 2c 6d 3d 6e 2c 76 3d 7b 6d 65 72 63 68 61 6e 74 49 64 3a 68 2e 6d 65 72 63 68 61 6e 74 49 64 2c 72 65 66 6e 6f 3a 63 2c 61 6d 6f 75 6e 74 Data Ascii: on,void 0!==n&&null!=n\|\|x.emit("error","container is a mandatory parameter"),void 0!==f.refno&&null!=f.refno\|\|x.emit("error","refno is a mandatory parameter"),l=f.authenticationOnly,d=f.returnAddress,c=f.refno,m=n,v={merchantId:h.merchantId,refno:c,amount

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49785	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	715	OUT	POST /sessions HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:29 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2024-11-12 04:19:30 UTC	268	IN	HTTP/1.1 201 Created x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 151 etag: W/"97-jc2zquIyijGef4aVSjfg0nURwJk" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:30 GMT connection: close
2024-11-12 04:19:30 UTC	151	IN	Data Raw: 7b 22 67 6c 65 61 70 49 64 22 3a 22 62 39 65 38 33 65 30 36 2d 33 31 61 64 2d 34 63 63 35 2d 38 30 31 64 2d 32 33 66 38 66 64 66 39 64 34 33 30 22 2c 22 67 6c 65 61 70 48 61 73 68 22 3a 22 37 37 62 62 65 34 65 37 31 34 37 63 64 61 31 65 61 62 66 34 61 39 38 35 32 34 35 34 32 35 39 35 62 31 39 30 35 61 31 61 66 62 63 61 39 64 37 37 39 64 32 34 37 65 63 66 63 36 35 38 64 66 31 35 22 2c 22 76 61 6c 75 65 22 3a 30 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 7d Data Ascii: {"gleapId":"b9e83e06-31ad-4cc5-801d-23f8fdf9d430","gleapHash":"77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15","value":0,"lang":"en"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49784	142.250.185.226	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	1453	OUT	GET /td/rul/957027334?random=1731385168509&cv=11&fst=1731385168509&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 12-Nov-2024 04:34:30 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-12 04:19:30 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-11-12 04:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49789	169.150.247.37	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	355	OUT	GET /app/js/api.min.js HTTP/1.1 Host: a.trstplse.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	1048	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/javascript Content-Length: 104548 Connection: close Vary: Accept-Encoding Server: BunnyCDN-DE1-1080 CDN-PullZone: 293676 CDN-Uid: efcab737-66db-4b75-ab55-ed485d5a01dd CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Access-Control-Expose-Headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match Cache-Control: public, max-age=31919000 ETag: "6723b8bf-19864" Last-Modified: Thu, 31 Oct 2024 17:05:03 GMT CDN-StorageServer: DE-677 CDN-RequestPullSuccess: True CDN-FileServer: 887 Perma-Cache: HIT CDN-ProxyVer: 1.06 CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2024 17:26:03 CDN-EdgeStorageId: 1079 CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 50f85fdd062a1441b9df1556e66711c8 CDN-Cache: HIT Accept-Ranges: bytes
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 2f 2a 21 20 21 20 62 75 69 6c 74 20 6f 6e 20 54 68 75 72 73 64 61 79 2c 20 4f 63 74 6f 62 65 72 20 33 31 73 74 20 32 30 32 34 2c 20 31 37 3a 30 33 3a 35 33 20 55 54 43 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 65 5b 69 5d 29 72 65 74 75 72 6e 20 65 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 65 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 74 2c 6e 2e 63 3d 65 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 6e 2e 6f 28 74 2c 65 Data Ascii: /! ! built on Thursday, October 31st 2024, 17:03:53 UTC /!function(t){var e={};function n(i){if(e[i])return e[i].exports;var r=e[i]={i:i,l:!1,exports:{}};return t[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}n.m=t,n.c=e,n.d=function(t,e,i){n.o(t,e
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 66 6f 72 28 61 3d 30 3b 61 3c 72 2e 70 61 72 74 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 73 2e 70 75 73 68 28 67 28 72 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 3b 69 5b 72 2e 69 64 5d 3d 7b 69 64 3a 72 2e 69 64 2c 72 65 66 73 3a 31 2c 70 61 72 74 73 3a 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 69 3d 7b 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 61 3d 65 2e 62 61 73 65 3f 6f 5b 30 5d 2b 65 2e 62 61 73 65 3a 6f 5b 30 5d 2c 73 3d 7b 63 73 73 3a 6f 5b 31 5d 2c 6d 65 64 69 61 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 4d 61 70 3a 6f 5b 33 5d 7d 3b 69 5b 61 5d 3f 69 5b 61 5d 2e 70 61 72 74 73 2e 70 75 73 68 28 73 29 Data Ascii: else{var s=[];for(a=0;a<r.parts.length;a++)s.push(g(r.parts[a],e));i[r.id]={id:r.id,refs:1,parts:s}}}}function f(t,e){for(var n=[],i={},r=0;r<t.length;r++){var o=t[r],a=e.base?o[0]+e.base:o[0],s={css:o[1],media:o[2],sourceMap:o[3]};i[a]?i[a].parts.push(s)
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 65 2e 73 75 62 73 74 72 28 31 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 24 2f 2c 22 22 29 3b 72 65 74 75 72 6e 20 65 26 26 28 6e 2b 3d 74 2e 73 65 61 72 63 68 29 2c 74 2e 68 61 73 68 26 26 28 6e 2b 3d 74 2e 68 61 73 68 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 2c 45 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 29 3b 76 61 72 20 65 3d 74 2e 68 72 65 66 2e 73 70 6c 69 74 28 74 2e 68 6f 73 74 29 3b 72 65 74 75 72 6e 20 65 5b 31 5d 3f 65 5b 31 5d 2e 73 75 62 73 74 72 28 31 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 29 7b 76 Data Ascii: e.substr(1).replace(/\/$/,"");return e&&(n+=t.search),t.hash&&(n+=t.hash),n}function P(t){return void 0===t&&(t=!1),E(window.location,t)}function j(t){void 0===t&&(t=window.location);var e=t.href.split(t.host);return e[1]?e[1].substr(1):""}function I(t){v
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 2b 74 29 26 26 6e 75 6c 6c 3d 3d 3d 59 65 2e 67 65 74 28 22 74 70 53 75 63 63 65 73 73 2d 22 2b 74 29 26 26 6e 75 6c 6c 3d 3d 3d 59 65 2e 67 65 74 28 22 74 70 2d 73 75 63 63 65 73 73 2d 22 2b 74 29 7d 73 3d 6f 65 2c 6f 65 2e 74 69 74 6c 65 3d 22 5b 54 72 75 73 74 50 75 6c 73 65 5d 22 2c 6f 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 6e 3c 74 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 73 2e 74 69 74 6c 65 5d 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: +t)&&null===Ye.get("tpSuccess-"+t)&&null===Ye.get("tp-success-"+t)}s=oe,oe.title="[TrustPulse]",oe.log=function(){for(var t=arguments.length,e=new Array(t),n=0;n<t;n++)e[n]=arguments[n];"object"==typeof console&&console.log.apply(null,[s.title].concat(e))
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 76 61 72 20 69 3d 22 47 45 54 22 3d 3d 3d 74 2e 6d 65 74 68 6f 64 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 61 74 61 3f 74 2e 64 61 74 61 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2e 64 61 74 61 29 3b 74 2e 78 68 72 2e 6f 70 65 6e 28 74 2e 6d 65 74 68 6f 64 2c 74 2e 75 72 6c 2c 21 30 29 2c 74 2e 78 68 72 2e 74 69 6d 65 6f 75 74 3d 74 2e 74 69 6d 65 6f 75 74 2c 22 47 45 54 22 21 3d 3d 74 2e 6d 65 74 68 6f 64 26 26 28 74 2e 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 29 2c 74 2e 78 68 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 2c Data Ascii: var i="GET"===t.method?null:"string"==typeof t.data?t.data:JSON.stringify(t.data);t.xhr.open(t.method,t.url,!0),t.xhr.timeout=t.timeout,"GET"!==t.method&&(t.xhr.setRequestHeader("Content-Type","application/json"),t.xhr.setRequestHeader("X-Requested-With",
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 2e 69 6e 69 74 22 2c 7b 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 3a 74 68 69 73 7d 29 7d 2c 65 2e 6d 61 74 63 68 65 73 43 75 72 72 65 6e 74 57 69 6e 64 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 72 75 6c 65 4d 61 74 63 68 65 73 43 75 72 72 65 6e 74 57 69 6e 64 6f 77 28 74 68 69 73 29 7d 2c 65 2e 69 6e 69 74 57 61 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 73 77 69 74 63 68 28 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 46 6f 72 6d 43 61 70 74 75 72 65 52 75 6c 65 2e 69 6e 69 74 57 61 74 63 68 65 72 22 2c 7b 46 6f 72 6d 43 61 70 74 Data Ascii: =function(){a.trigger(document,"FormCaptureRule.init",{FormCaptureRule:this})},e.matchesCurrentWindow=function(){return r.ruleMatchesCurrentWindow(this)},e.initWatcher=function(){var t=this;switch(a.trigger(document,"FormCaptureRule.initWatcher",{FormCapt
2024-11-12 04:19:30 UTC	6244	IN	Data Raw: 65 74 28 22 70 65 6e 64 69 6e 67 53 75 62 6d 69 73 73 69 6f 6e 73 22 2c 61 29 2c 74 2e 46 6f 72 6d 53 75 62 6d 69 74 74 6f 72 2e 70 72 6f 63 65 73 73 28 29 7d 7d 29 29 2c 61 2e 74 72 69 67 67 65 72 28 64 6f 63 75 6d 65 6e 74 2c 22 4d 61 69 6e 2e 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2e 52 65 61 64 79 22 2c 7b 4d 61 69 6e 3a 74 7d 29 2c 65 28 29 7d 29 29 7d 2c 65 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 46 6f 72 6d 53 75 62 6d 69 74 74 6f 72 2e 70 72 6f 63 65 73 73 28 29 7d 2c 65 2e 70 65 6e 64 69 6e 67 57 61 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: et("pendingSubmissions",a),t.FormSubmittor.process()}})),a.trigger(document,"Main.EventListener.Ready",{Main:t}),e()}))},e.process=function(){this.FormSubmittor.process()},e.pendingWatcher=function(){var t=this,e=location.href;document.body.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49791	157.240.0.6	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-uUCOW3mu' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-12 04:19:30 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-12 04:19:30 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-11-12 04:19:30 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 Data Ascii: &c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="obje
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 Data Ascii: r k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})(
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 Data Ascii: es("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"und
2024-11-12 04:19:30 UTC	1703	IN	Data Raw: 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f Data Ascii: l}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.pro
2024-11-12 04:19:30 UTC	14681	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 Data Ascii: dules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){v
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ay(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){if(typeof a!=="function"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49790	18.66.102.51	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:29 UTC	365	OUT	GET /c/hotjar-3708882.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Tue, 12 Nov 2024 04:19:27 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/088981ea3715387925431207550a1e56 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b9d2ce196c8a711fb15d92175d58476e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: CxcmV3AoTThL3Mzdqaoq8Do9o0oV9ZqnTXi7RNV2x8-6ukHhGVEPTA== Age: 3
2024-11-12 04:19:30 UTC	12786	IN	Data Raw: 33 31 65 61 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 33 37 30 38 38 38 32 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 74 72 75 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 61 6e Data Ascii: 31eawindow.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":3708882,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":true,"session_capture_console_consent":true,"an
2024-11-12 04:19:30 UTC	360	IN	Data Raw: 31 36 31 0d 0a 5d 3b 68 6a 2e 73 63 72 69 70 74 44 6f 6d 61 69 6e 3d 65 3b 76 61 72 20 64 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 64 2e 61 73 79 6e 63 3d 31 2c 64 2e 73 72 63 3d 68 6a 2e 73 63 72 69 70 74 44 6f 6d 61 69 6e 2b 74 2c 64 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 63 2e 72 65 76 69 73 69 6f 6e 3d 22 34 35 65 30 32 32 38 22 2c 77 69 6e 64 6f 77 2e 68 6a 42 6f 6f 74 73 74 72 61 70 3d 63 7d 2c 77 69 6e 64 6f 77 2e 68 6a 42 6f 6f 74 73 74 72 61 70 28 22 68 74 74 70 73 3a 2f 2f 73 63 72 69 70 74 2e 68 6f 74 6a 61 72 2e 63 6f 6d 2f 22 2c 22 6d 6f 64 75 6c 65 73 2e 36 66 36 30 65 35 37 35 63 66 38 61 64 37 63 62 31 30 66 37 2e 6a 73 22 2c 22 33 37 30 Data Ascii: 161];hj.scriptDomain=e;var d=l.createElement("script");d.async=1,d.src=hj.scriptDomain+t,d.charset="utf-8",u.appendChild(d),c.revision="45e0228",window.hjBootstrap=c},window.hjBootstrap("https://script.hotjar.com/","modules.6f60e575cf8ad7cb10f7.js","370
2024-11-12 04:19:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49794	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	636	OUT	GET /static/js/main.fa247412.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1932	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 4280073 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:35 GMT Etag: "c4efb6b0e90fb24a12c73f569d253019" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 6fa33d47af6f4da7007689083cfe9b9c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:53435 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 1zda2m_-1183hmDn8UmK9yV-lJTkDF7FfDEf49PzNdbf0_-3EIH6ig==
2024-11-12 04:19:30 UTC	8192	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 66 61 32 34 37 34 31 32 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 38 38 31 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 76 61 72 20 72 2c 69 2c 61 3d 6e 28 34 37 33 31 33 29 2c 6f 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a Data Ascii: /! For license information please see main.fa247412.js.LICENSE.txt /(function(){var __webpack_modules__={88142:function(e,t,n){"use strict";n.d(t,{r:function(){return l}});var r,i,a=n(47313),o=["title","titleId"];function s(){return s=Object.assign?Obj
2024-11-12 04:19:30 UTC	8192	IN	Data Raw: 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 74 69 74 6c 65 2c 63 3d 65 2e 74 69 74 6c 65 49 64 2c 75 3d 73 28 65 2c 61 29 3b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 6f 28 7b 77 69 64 74 68 3a 32 32 2c 68 65 69 67 68 74 3a 32 35 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 32 32 20 32 35 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 72 65 66 3a 74 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 63 7d Data Ascii: totype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}function c(e,t){var n=e.title,c=e.titleId,u=s(e,a);return i.createElement("svg",o({width:22,height:25,viewBox:"0 0 22 25",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":c}
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 28 72 3d 30 3b 72 3c 61 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 3d 61 5b 72 5d 2c 74 2e 69 6e 64 65 78 4f 66 28 6e 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 28 69 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 74 69 74 6c 65 2c 75 3d 65 2e 74 69 74 6c 65 49 64 2c 6c 3d 63 28 65 2c 6f 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 73 28 7b 77 69 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 Data Ascii: (r=0;r<a.length;r++)n=a[r],t.indexOf(n)>=0\|\|Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}function u(e,t){var n=e.title,u=e.titleId,l=c(e,o);return a.createElement("svg",s({width:16,height:16,viewBox:"0 0 16 16",fill:"none",xmlns:"
2024-11-12 04:19:30 UTC	1581	IN	Data Raw: 31 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 72 65 66 3a 74 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6c 7d 2c 64 29 2c 6e 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 6c 7d 2c 6e 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 33 39 2c 68 65 69 67 68 74 3a 32 30 2c 66 69 6c 6c 3a 22 23 31 44 37 33 42 42 22 7d 29 29 2c 69 7c 7c 28 69 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 38 2e 31 33 34 37 37 20 31 32 2e 36 32 31 31 43 38 2e 31 33 34 37 37 20 31 33 2e 31 32 38 39 20 38 Data Ascii: 1",fill:"none",xmlns:"http://www.w3.org/2000/svg",ref:t,"aria-labelledby":l},d),n?o.createElement("title",{id:l},n):null,r\|\|(r=o.createElement("rect",{width:39,height:20,fill:"#1D73BB"})),i\|\|(i=o.createElement("path",{d:"M8.13477 12.6211C8.13477 13.1289 8
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 32 35 37 38 20 38 2e 36 38 39 34 35 43 34 2e 34 32 35 37 38 20 38 2e 38 39 32 35 38 20 34 2e 34 38 34 33 38 20 39 2e 30 36 34 34 35 20 34 2e 36 30 31 35 36 20 39 2e 32 30 35 30 38 43 34 2e 37 32 32 36 36 20 39 2e 33 34 31 38 20 34 2e 39 30 32 33 34 20 39 2e 34 37 34 36 31 20 35 2e 31 34 30 36 32 20 39 2e 36 30 33 35 32 43 35 2e 33 38 32 38 31 20 39 2e 37 33 32 34 32 20 35 2e 36 38 33 35 39 20 39 2e 38 38 32 38 31 20 36 2e 30 34 32 39 37 20 31 30 2e 30 35 34 37 43 36 2e 34 38 30 34 37 20 31 30 2e 32 36 31 37 20 36 2e 38 35 33 35 32 20 31 30 2e 34 37 38 35 20 37 2e 31 36 32 31 31 20 31 30 2e 37 30 35 31 43 37 2e 34 37 34 36 31 20 31 30 2e 39 32 37 37 20 37 2e 37 31 34 38 34 20 31 31 2e 31 39 31 34 20 37 2e 38 38 32 38 31 20 31 31 2e 34 39 36 31 43 38 2e 30 Data Ascii: 2578 8.68945C4.42578 8.89258 4.48438 9.06445 4.60156 9.20508C4.72266 9.3418 4.90234 9.47461 5.14062 9.60352C5.38281 9.73242 5.68359 9.88281 6.04297 10.0547C6.48047 10.2617 6.85352 10.4785 7.16211 10.7051C7.47461 10.9277 7.71484 11.1914 7.88281 11.4961C8.0
2024-11-12 04:19:30 UTC	2452	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 66 7d 2c 6e 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 34 2e 32 32 32 36 38 20 31 38 2e 32 34 39 38 43 34 2e 32 32 30 38 35 20 31 38 2e 34 39 30 37 20 34 2e 33 31 34 36 33 20 31 38 2e 37 32 32 35 20 34 2e 34 38 33 34 36 20 31 38 2e 38 39 34 33 43 34 2e 36 35 32 32 39 20 31 39 2e 30 36 36 32 20 34 2e 38 38 32 33 38 20 31 39 2e 31 36 34 20 35 2e 31 32 33 32 37 20 31 39 2e 31 36 36 35 48 31 35 2e 35 34 34 33 43 31 35 2e 37 38 35 32 20 31 39 2e 31 36 34 20 31 36 2e 30 31 35 33 20 31 39 2e 30 36 36 32 20 31 36 2e 31 38 34 31 20 31 38 2e 38 39 34 33 43 31 36 2e 33 35 33 20 31 38 2e 37 32 32 35 20 31 36 2e Data Ascii: createElement("title",{id:f},n):null,r\|\|(r=c.createElement("path",{d:"M4.22268 18.2498C4.22085 18.4907 4.31463 18.7225 4.48346 18.8943C4.65229 19.0662 4.88238 19.164 5.12327 19.1665H15.5443C15.7852 19.164 16.0153 19.0662 16.1841 18.8943C16.353 18.7225 16.
2024-11-12 04:19:30 UTC	302	IN	Data Raw: 31 2e 38 33 38 37 43 38 32 2e 32 39 36 34 20 32 31 2e 36 34 33 32 20 38 34 2e 30 39 30 32 20 32 33 2e 30 35 20 38 36 2e 37 36 38 37 20 32 33 2e 30 35 43 38 38 2e 35 39 39 35 20 32 33 2e 30 35 20 38 39 2e 39 30 31 38 20 32 32 2e 33 38 30 34 20 39 31 2e 32 30 34 32 20 32 30 2e 38 33 32 33 4c 39 34 2e 39 30 32 35 20 32 33 2e 35 37 38 34 43 39 33 2e 30 36 38 38 20 32 35 2e 39 33 34 33 20 39 30 2e 32 31 38 32 20 32 37 2e 32 33 39 38 20 38 36 2e 38 37 33 32 20 32 37 2e 32 33 39 38 5a 4d 39 30 2e 35 33 34 36 20 31 35 2e 37 36 30 39 43 39 30 2e 32 35 32 20 31 33 2e 37 31 38 32 20 38 38 2e 36 33 33 32 20 31 32 2e 33 34 35 32 20 38 36 2e 33 34 34 38 20 31 32 2e 33 34 35 32 43 38 34 2e 30 35 36 34 20 31 32 2e 33 34 35 32 20 38 32 2e 35 34 32 31 20 31 33 2e 37 38 38 Data Ascii: 1.8387C82.2964 21.6432 84.0902 23.05 86.7687 23.05C88.5995 23.05 89.9018 22.3804 91.2042 20.8323L94.9025 23.5784C93.0688 25.9343 90.2182 27.2398 86.8732 27.2398ZM90.5346 15.7609C90.252 13.7182 88.6332 12.3452 86.3448 12.3452C84.0564 12.3452 82.5421 13.788
2024-11-12 04:19:30 UTC	14280	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 39 38 2e 31 34 38 34 20 38 2e 37 35 34 33 39 48 31 30 32 2e 34 38 56 31 30 2e 30 31 39 39 43 31 30 33 2e 35 37 20 38 2e 38 32 31 39 37 20 31 30 35 2e 32 39 36 20 38 2e 31 35 32 33 34 20 31 30 37 2e 33 33 39 20 38 2e 31 35 32 33 34 43 31 31 31 2e 35 32 39 20 38 2e 31 35 32 33 34 20 31 31 34 2e 34 35 33 20 31 31 2e 31 31 30 34 20 31 31 34 2e 34 35 33 20 31 35 2e 33 37 30 38 56 32 36 2e 37 30 38 34 48 31 30 39 2e 38 30 35 56 31 36 2e 31 34 34 39 43 31 30 39 2e 38 30 35 20 31 34 2e 30 33 31 35 20 31 30 38 2e 33 39 36 20 31 32 2e 34 34 36 36 20 31 30 36 2e 33 39 20 31 32 2e 34 34 36 36 43 31 30 34 2e 33 38 34 20 31 32 2e 34 34 36 36 20 31 30 32 2e 37 39 39 20 31 34 2e 30 33 31 35 20 31 30 32 2e Data Ascii: teElement("path",{d:"M98.1484 8.75439H102.48V10.0199C103.57 8.82197 105.296 8.15234 107.339 8.15234C111.529 8.15234 114.453 11.1104 114.453 15.3708V26.7084H109.805V16.1449C109.805 14.0315 108.396 12.4466 106.39 12.4466C104.384 12.4466 102.799 14.0315 102.
2024-11-12 04:19:30 UTC	1398	IN	Data Raw: 65 61 64 65 72 73 3a 28 30 2c 69 2e 5a 29 28 7b 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 6f 29 7d 29 29 7d 2c 67 65 74 54 72 61 6e 73 66 65 72 48 69 73 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 29 7b 76 61 72 20 75 3d 28 30 2c 64 2e 42 29 28 29 2c 6c 3d 75 2e 74 6f 6b 65 6e 2c 70 3d 75 2e 75 73 65 72 6e 61 6d 65 3b 72 65 74 75 72 6e 20 65 2e 70 6f 73 74 28 22 22 2e 63 6f 6e 63 61 74 28 66 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 68 2c 22 2f 73 65 61 72 63 68 3f 73 69 7a 65 3d 22 29 2e 63 6f 6e 63 61 74 28 28 6e 75 6c 6c 21 3d 3d 63 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 31 30 29 2a 74 2c 22 26 70 61 67 65 3d Data Ascii: eaders:(0,i.Z)({Authorization:"Bearer ".concat(r)},"".concat(s.mY),o)}))},getTransferHistory:function(e,t,n,r,o,c){var u=(0,d.B)(),l=u.token,p=u.username;return e.post("".concat(f,"/").concat(h,"/search?size=").concat((null!==c&&void 0!==c?c:10)*t,"&page=
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 63 61 74 28 73 2e 6d 59 29 2c 6f 29 7d 29 29 7d 2c 63 6f 6d 70 6c 65 74 65 46 69 6c 65 4d 61 6e 61 67 65 6d 65 6e 74 55 70 6c 6f 61 64 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 30 2c 64 2e 42 29 28 29 2c 72 3d 6e 2e 74 6f 6b 65 6e 2c 6f 3d 6e 2e 75 73 65 72 6e 61 6d 65 3b 72 65 74 75 72 6e 20 65 2e 70 6f 73 74 28 22 22 2e 63 6f 6e 63 61 74 28 66 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 2f 63 6f 6d 70 6c 65 74 65 22 29 2c 74 2c 28 30 2c 61 2e 5a 29 28 7b 7d 2c 72 26 26 6f 26 26 7b 68 65 61 64 65 72 73 3a 28 30 2c 69 2e 5a 29 28 7b 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2e 63 6f 6e 63 61 74 28 72 29 7d 2c 22 22 2e 63 6f 6e 63 61 74 28 73 2e 6d 59 29 2c 6f 29 7d 29 29 7d 2c 67 65 74 4d 79 Data Ascii: cat(s.mY),o)}))},completeFileManagementUploading:function(e,t){var n=(0,d.B)(),r=n.token,o=n.username;return e.post("".concat(f,"/").concat(p,"/complete"),t,(0,a.Z)({},r&&o&&{headers:(0,i.Z)({Authorization:"Bearer ".concat(r)},"".concat(s.mY),o)}))},getMy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49793	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	642	OUT	GET /static/js/5883.38419619.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1928	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 108 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "ce59d1ddefa88c64e2391b1669f984a4" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:54597 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: LZxzoyceymXYSAXNGRfin5De7BCN56yfqmxq_kZ3W1DR74Qrntej3g==
2024-11-12 04:19:30 UTC	108	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 38 33 5d 2c 7b 33 35 38 38 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 5d 29 3b Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[5883],{35883:function(){}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	642	OUT	GET /static/js/3020.18ed824f.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 38935 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "df0589890bffff6422577e53d586f690" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:59841 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 4hx7F8OF3G6MzO2dpsBK4dwYEngUcKdpv9q96_xhaOcLdYvaMJIYCQ==
2024-11-12 04:19:30 UTC	8192	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 33 30 32 30 2e 31 38 65 64 38 32 34 66 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 32 30 5d 2c 7b 33 32 37 36 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 6e 2e 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 2e 67 3f 76 6f 69 64 20 30 3a 6e 2e 67 2e 63 Data Ascii: /! For license information please see 3020.18ed824f.chunk.js.LICENSE.txt /(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3020],{32760:function(t,e,n){"use strict";function r(){return(null===n.g\|\|void 0===n.g?void 0:n.g.c
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 79 3a 22 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 2e 6f 6e 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 6e 63 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 2e 6f 6e 63 65 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 2e 6f 66 66 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 2c 65 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 70 65 6e 22 2c 76 61 6c 75 65 3a 66 75 Data Ascii: y:"on",value:function(t,e){this.events.on(t,e)}},{key:"once",value:function(t,e){this.events.once(t,e)}},{key:"off",value:function(t,e){this.events.off(t,e)}},{key:"removeListener",value:function(t,e){this.events.removeListener(t,e)}},{key:"open",value:fu
2024-11-12 04:19:30 UTC	1933	IN	Data Raw: 74 22 29 26 26 6e 2e 64 28 65 2c 7b 69 73 4a 73 6f 6e 52 70 63 52 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 4a 73 6f 6e 52 70 63 52 65 71 75 65 73 74 7d 7d 29 2c 6e 2e 6f 28 72 2c 22 69 73 4a 73 6f 6e 52 70 63 52 65 73 70 6f 6e 73 65 22 29 26 26 6e 2e 64 28 65 2c 7b 69 73 4a 73 6f 6e 52 70 63 52 65 73 70 6f 6e 73 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 4a 73 6f 6e 52 70 63 52 65 73 70 6f 6e 73 65 7d 7d 29 2c 6e 2e 6f 28 72 2c 22 69 73 4a 73 6f 6e 52 70 63 52 65 73 75 6c 74 22 29 26 26 6e 2e 64 28 65 2c 7b 69 73 4a 73 6f 6e 52 70 63 52 65 73 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 69 73 4a 73 6f 6e 52 70 63 52 65 73 75 6c 74 7d 7d 29 2c 6e 2e 6f 28 Data Ascii: t")&&n.d(e,{isJsonRpcRequest:function(){return r.isJsonRpcRequest}}),n.o(r,"isJsonRpcResponse")&&n.d(e,{isJsonRpcResponse:function(){return r.isJsonRpcResponse}}),n.o(r,"isJsonRpcResult")&&n.d(e,{isJsonRpcResult:function(){return r.isJsonRpcResult}}),n.o(
2024-11-12 04:19:30 UTC	12426	IN	Data Raw: 20 6f 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 28 65 3d 74 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 62 69 67 69 6e 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 2b 22 6e 22 3a 65 7d 29 29 7c 7c 22 22 29 3b 76 61 72 20 65 7d 7d 2c 33 38 37 38 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5b Data Ascii: o(t){return"string"===typeof t?t:(e=t,JSON.stringify(e,(function(t,e){return"bigint"===typeof e?e.toString()+"n":e}))\|\|"");var e}},38783:function(t,e){"use strict";function n(t){var e=void 0;return"undefined"!==typeof window&&"undefined"!==typeof window[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49796	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	925	OUT	GET /static/css/8839.7758b54f.chunk.css HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1916	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/css Content-Length: 14157 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:32 GMT Etag: "5f1f26e8f3b86902f37c4105320ee9d7" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 f99b5b46e77cfe9c3413f99dc8a4088c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:54713 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: Xc26w1qu1bVp9om7L1CeKXGIiPRp4o0sBRU5dhrmQrZPaQ33Ug4XtQ==
2024-11-12 04:19:30 UTC	14157	IN	Data Raw: 2e 44 6f 77 6e 6c 6f 61 64 53 74 61 72 74 65 64 5f 64 6f 77 6e 6c 6f 61 64 53 74 61 72 74 65 64 57 72 61 70 70 65 72 5f 5f 65 64 71 6c 6a 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 34 30 38 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 38 70 78 3b 70 61 64 64 69 6e 67 3a 32 30 70 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a Data Ascii: .DownloadStarted_downloadStartedWrapper__edqlj{align-items:center;background-color:#f5f5f5;border-radius:15px;box-sizing:border-box;display:flex;flex-direction:column;height:408px;justify-content:space-between;margin-top:168px;padding:20px;pointer-events:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49797	13.225.78.37	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	502	OUT	GET /?timestamp=1731385167183 HTTP/1.1 Host: www.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1910	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html Content-Length: 2938 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "6bc66faf4ef04baa93a407a9eae17cde" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 58b222ebbb6cc6c8c8c9a46127ae3a3e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=0, must-revalidate Clear-Site-Data: cache Vary: Origin Cloudfront-Viewer-Address: 173.254.250.68:58803 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 5HdB1fRmBzVfIKTi9Ybh5J3WCXGOpbv2SXmZZwBAWoyYBU3zvYLt3w==
2024-11-12 04:19:30 UTC	2938	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 64 65 70 72 65 63 61 74 65 64 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49798	3.69.70.211	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	521	OUT	GET /web2/api/admins/actuator/togglz-status HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	479	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/vnd.spring-boot.actuator.v3+json Content-Length: 3491 Connection: close apigw-requestid: BHaU7i67FiAEPww= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2
2024-11-12 04:19:30 UTC	3491	IN	Data Raw: 5b 7b 22 6e 61 6d 65 22 3a 22 41 44 44 4f 4e 53 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 72 61 74 65 67 79 22 3a 6e 75 6c 6c 2c 22 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 41 64 64 6f 6e 73 22 2c 22 67 72 6f 75 70 73 22 3a 5b 5d 2c 22 65 6e 61 62 6c 65 64 42 79 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 7d 7d 2c 22 65 6e 61 62 6c 65 64 41 74 22 3a 6e 75 6c 6c 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 44 52 45 53 53 5f 42 4f 4f 4b 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 74 72 61 74 65 67 79 22 3a 6e 75 6c 6c 2c 22 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 6c 61 62 65 6c 22 3a 22 41 64 64 72 65 73 Data Ascii: [{"name":"ADDONS","enabled":true,"strategy":null,"params":{},"metadata":{"label":"Addons","groups":[],"enabledByDefault":false,"attributes":{}},"enabledAt":null},{"name":"ADDRESS_BOOK","enabled":true,"strategy":null,"params":{},"metadata":{"label":"Addres

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49800	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	641	OUT	GET /static/js/406.ce8fba17.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349
2024-11-12 04:19:30 UTC	1931	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 324694 Connection: close Date: Tue, 12 Nov 2024 04:19:31 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "174f6b78e03d25c43ae6da89889358f3" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e5b747ffd1713cb17ddd7d55234a3300.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:53171 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: TDIzN65KXxXUdfQR1censKr6tmYRIqgjdEc73KmKJmfbNDsV2C7gsw==
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 30 36 2e 63 65 38 66 62 61 31 37 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 36 5d 2c 7b 37 39 37 33 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 72 28 34 34 Data Ascii: /! For license information please see 406.ce8fba17.chunk.js.LICENSE.txt /(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[406],{79734:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(44
2024-11-12 04:19:30 UTC	16384	IN	Data Raw: 61 79 28 5b 32 33 37 2c 32 31 31 2c 32 34 35 2c 39 32 2c 32 36 2c 39 39 2c 31 38 2c 38 38 2c 32 31 34 2c 31 35 36 2c 32 34 37 2c 31 36 32 2c 32 32 32 2c 32 34 39 2c 32 32 32 2c 32 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 36 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 69 2c 6f 3b 66 6f 72 28 6e 3d 36 33 3b 6e 3e 3d 33 32 3b 2d 2d 6e 29 7b 66 6f 72 28 72 3d 30 2c 69 3d 6e 2d 33 32 2c 6f 3d 6e 2d 31 32 3b 69 3c 6f 3b 2b 2b 69 29 74 5b 69 5d 2b 3d 72 2d 31 36 2a 74 5b 6e 5d 2a 41 5b 69 2d 28 6e 2d 33 32 29 5d 2c 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 74 5b 69 5d 2b 31 32 38 29 2f 32 35 36 29 2c 74 5b 69 5d 2d 3d 32 35 36 2a 72 3b 74 5b 69 5d 2b 3d 72 2c 74 5b 6e Data Ascii: ay([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function T(e,t){var r,n,i,o;for(n=63;n>=32;--n){for(r=0,i=n-32,o=n-12;i<o;++i)t[i]+=r-16t[n]A[i-(n-32)],r=Math.floor((t[i]+128)/256),t[i]-=256*r;t[i]+=r,t[n
2024-11-12 04:19:30 UTC	1602	IN	Data Raw: 74 65 55 69 6e 74 33 32 42 45 28 6f 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 2c 61 2d 34 29 2c 73 28 74 68 69 73 2e 5f 74 65 6d 70 2c 74 68 69 73 2e 5f 73 74 61 74 65 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 2c 30 2c 61 29 2c 74 68 69 73 2e 5f 66 69 6e 69 73 68 65 64 3d 21 30 7d 66 6f 72 28 63 3d 30 3b 63 3c 74 68 69 73 2e 64 69 67 65 73 74 4c 65 6e 67 74 68 2f 34 3b 63 2b 2b 29 6e 2e 77 72 69 74 65 55 69 6e 74 33 32 42 45 28 74 68 69 73 2e 5f 73 74 61 74 65 5b 63 5d 2c 65 2c 34 2a 63 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 68 69 73 2e 64 69 67 65 73 74 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 Data Ascii: teUint32BE(o,this._buffer,a-4),s(this._temp,this._state,this._buffer,0,a),this._finished=!0}for(c=0;c<this.digestLength/4;c++)n.writeUint32BE(this._state[c],e,4*c);return this},e.prototype.digest=function(){var e=new Uint8Array(this.digestLength);return t
2024-11-12 04:19:30 UTC	2856	IN	Data Raw: 6f 29 7b 66 6f 72 28 3b 6f 3e 3d 36 34 3b 29 7b 66 6f 72 28 76 61 72 20 73 3d 74 5b 30 5d 2c 63 3d 74 5b 31 5d 2c 75 3d 74 5b 32 5d 2c 66 3d 74 5b 33 5d 2c 6c 3d 74 5b 34 5d 2c 70 3d 74 5b 35 5d 2c 68 3d 74 5b 36 5d 2c 64 3d 74 5b 37 5d 2c 76 3d 30 3b 76 3c 31 36 3b 76 2b 2b 29 7b 76 61 72 20 67 3d 69 2b 34 2a 76 3b 65 5b 76 5d 3d 6e 2e 72 65 61 64 55 69 6e 74 33 32 42 45 28 72 2c 67 29 7d 66 6f 72 28 76 3d 31 36 3b 76 3c 36 34 3b 76 2b 2b 29 7b 76 61 72 20 79 3d 65 5b 76 2d 32 5d 2c 62 3d 28 79 3e 3e 3e 31 37 7c 79 3c 3c 31 35 29 5e 28 79 3e 3e 3e 31 39 7c 79 3c 3c 31 33 29 5e 79 3e 3e 3e 31 30 2c 6d 3d 28 28 79 3d 65 5b 76 2d 31 35 5d 29 3e 3e 3e 37 7c 79 3c 3c 32 35 29 5e 28 79 3e 3e 3e 31 38 7c 79 3c 3c 31 34 29 5e 79 3e 3e 3e 33 3b 65 5b 76 5d 3d 28 Data Ascii: o){for(;o>=64;){for(var s=t[0],c=t[1],u=t[2],f=t[3],l=t[4],p=t[5],h=t[6],d=t[7],v=0;v<16;v++){var g=i+4*v;e[v]=n.readUint32BE(r,g)}for(v=16;v<64;v++){var y=e[v-2],b=(y>>>17\|y<<15)^(y>>>19\|y<<13)^y>>>10,m=((y=e[v-15])>>>7\|y<<25)^(y>>>18\|y<<14)^y>>>3;e[v]=(
2024-11-12 04:19:30 UTC	5712	IN	Data Raw: 69 73 2e 5f 73 74 61 74 65 48 69 5b 63 5d 2c 65 2c 38 2a 63 29 2c 6e 2e 77 72 69 74 65 55 69 6e 74 33 32 42 45 28 74 68 69 73 2e 5f 73 74 61 74 65 4c 6f 5b 63 5d 2c 65 2c 38 2a 63 2b 34 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 67 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 74 68 69 73 2e 64 69 67 65 73 74 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 69 73 68 28 65 29 2c 65 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 61 76 65 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 66 69 6e 69 73 68 65 64 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 48 41 32 35 36 3a 20 63 61 6e 6e 6f 74 20 Data Ascii: is._stateHi[c],e,8c),n.writeUint32BE(this._stateLo[c],e,8c+4);return this},e.prototype.digest=function(){var e=new Uint8Array(this.digestLength);return this.finish(e),e},e.prototype.saveState=function(){if(this._finished)throw new Error("SHA256: cannot
2024-11-12 04:19:30 UTC	5712	IN	Data Raw: 29 3e 3e 3e 31 36 2c 76 2b 3d 36 35 35 33 35 26 75 2c 67 2b 3d 75 3e 3e 3e 31 36 2c 67 2b 3d 28 76 2b 3d 28 64 2b 3d 28 68 2b 3d 36 35 35 33 35 26 66 29 3e 3e 3e 31 36 29 3e 3e 3e 31 36 29 3e 3e 3e 31 36 2c 72 5b 37 5d 3d 6b 3d 36 35 35 33 35 26 76 7c 67 3c 3c 31 36 2c 69 5b 37 5d 3d 41 3d 36 35 35 33 35 26 68 7c 64 3c 3c 31 36 2c 73 2b 3d 31 32 38 2c 63 2d 3d 31 32 38 7d 72 65 74 75 72 6e 20 73 7d 74 2e 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 6f 3b 74 2e 75 70 64 61 74 65 28 65 29 3b 76 61 72 20 72 3d 74 2e 64 69 67 65 73 74 28 29 3b 72 65 74 75 72 6e 20 74 2e 63 6c 65 61 6e 28 29 2c 72 7d 7d 2c 36 33 32 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e Data Ascii: )>>>16,v+=65535&u,g+=u>>>16,g+=(v+=(d+=(h+=65535&f)>>>16)>>>16)>>>16,r[7]=k=65535&v\|g<<16,i[7]=A=65535&h\|d<<16,s+=128,c-=128}return s}t.hash=function(e){var t=new o;t.update(e);var r=t.digest();return t.clean(),r}},63227:function(e,t){"use strict";Object.
2024-11-12 04:19:30 UTC	5712	IN	Data Raw: 6f 28 29 2c 69 3d 30 3b 69 3c 31 36 3b 69 2b 2b 29 6e 5b 69 5d 3d 74 5b 69 5d 3b 63 28 6e 29 2c 63 28 6e 29 2c 63 28 6e 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 32 3b 61 2b 2b 29 7b 72 5b 30 5d 3d 6e 5b 30 5d 2d 36 35 35 31 37 3b 66 6f 72 28 76 61 72 20 73 3d 31 3b 73 3c 31 35 3b 73 2b 2b 29 72 5b 73 5d 3d 6e 5b 73 5d 2d 36 35 35 33 35 2d 28 72 5b 73 2d 31 5d 3e 3e 31 36 26 31 29 2c 72 5b 73 2d 31 5d 26 3d 36 35 35 33 35 3b 72 5b 31 35 5d 3d 6e 5b 31 35 5d 2d 33 32 37 36 37 2d 28 72 5b 31 34 5d 3e 3e 31 36 26 31 29 3b 76 61 72 20 66 3d 72 5b 31 35 5d 3e 3e 31 36 26 31 3b 72 5b 31 34 5d 26 3d 36 35 35 33 35 2c 75 28 6e 2c 72 2c 31 2d 66 29 7d 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 31 36 3b 6c 2b 2b 29 65 5b 32 2a 6c 5d 3d 32 35 35 26 6e 5b 6c 5d Data Ascii: o(),i=0;i<16;i++)n[i]=t[i];c(n),c(n),c(n);for(var a=0;a<2;a++){r[0]=n[0]-65517;for(var s=1;s<15;s++)r[s]=n[s]-65535-(r[s-1]>>16&1),r[s-1]&=65535;r[15]=n[15]-32767-(r[14]>>16&1);var f=r[15]>>16&1;r[14]&=65535,u(n,r,1-f)}for(var l=0;l<16;l++)e[2*l]=255&n[l]
2024-11-12 04:19:30 UTC	2856	IN	Data Raw: 6f 6e 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 65 2e 63 6f 64 65 50 6f 69 6e 74 41 74 28 30 29 21 3d 3d 74 68 69 73 2e 70 72 65 66 69 78 43 6f 64 65 50 6f 69 6e 74 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 6d 75 6c 74 69 62 61 73 65 20 73 74 72 69 6e 67 20 22 2e 63 6f 6e 63 61 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 2c 22 2c 20 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6e 61 6d 65 2c 22 20 64 65 63 6f 64 65 72 20 6f 6e 6c 79 20 73 75 70 70 6f 72 74 73 20 69 6e 70 75 74 73 20 70 72 65 66 69 78 65 64 20 77 69 74 68 20 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 65 66 69 78 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 61 73 65 Data Ascii: on(e){if("string"===typeof e){if(e.codePointAt(0)!==this.prefixCodePoint)throw Error("Unable to decode multibase string ".concat(JSON.stringify(e),", ").concat(this.name," decoder only supports inputs prefixed with ").concat(this.prefix));return this.base
2024-11-12 04:19:30 UTC	2856	IN	Data Raw: 35 36 37 22 2c 62 69 74 73 50 65 72 43 68 61 72 3a 35 7d 29 2c 74 65 3d 46 28 7b 70 72 65 66 69 78 3a 22 63 22 2c 6e 61 6d 65 3a 22 62 61 73 65 33 32 70 61 64 22 2c 61 6c 70 68 61 62 65 74 3a 22 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 32 33 34 35 36 37 3d 22 2c 62 69 74 73 50 65 72 43 68 61 72 3a 35 7d 29 2c 72 65 3d 46 28 7b 70 72 65 66 69 78 3a 22 43 22 2c 6e 61 6d 65 3a 22 62 61 73 65 33 32 70 61 64 75 70 70 65 72 22 2c 61 6c 70 68 61 62 65 74 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 32 33 34 35 36 37 3d 22 2c 62 69 74 73 50 65 72 43 68 61 72 3a 35 7d 29 2c 6e 65 3d 46 28 7b 70 72 65 66 69 78 3a 22 76 22 2c 6e 61 6d 65 3a 22 62 61 73 65 33 32 68 65 78 22 2c 61 6c 70 68 61 Data Ascii: 567",bitsPerChar:5}),te=F({prefix:"c",name:"base32pad",alphabet:"abcdefghijklmnopqrstuvwxyz234567=",bitsPerChar:5}),re=F({prefix:"C",name:"base32padupper",alphabet:"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567=",bitsPerChar:5}),ne=F({prefix:"v",name:"base32hex",alpha
2024-11-12 04:19:30 UTC	2856	IN	Data Raw: 38 33 63 5c 75 64 66 34 30 5c 75 64 38 33 63 5c 75 64 66 33 37 5c 75 64 38 33 64 5c 75 64 65 33 62 5c 75 64 38 33 64 5c 75 64 65 31 33 5c 75 32 62 35 30 5c 75 32 37 30 35 5c 75 64 38 33 65 5c 75 64 64 37 61 5c 75 64 38 33 63 5c 75 64 66 30 38 5c 75 64 38 33 64 5c 75 64 65 30 38 5c 75 64 38 33 65 5c 75 64 64 31 38 5c 75 64 38 33 64 5c 75 64 63 61 36 5c 75 32 37 31 34 5c 75 64 38 33 64 5c 75 64 65 32 33 5c 75 64 38 33 63 5c 75 64 66 63 33 5c 75 64 38 33 64 5c 75 64 63 39 30 5c 75 32 36 33 39 5c 75 64 38 33 63 5c 75 64 66 38 61 5c 75 64 38 33 64 5c 75 64 63 39 38 5c 75 64 38 33 64 5c 75 64 65 32 30 5c 75 32 36 31 64 5c 75 64 38 33 64 5c 75 64 65 31 35 5c 75 64 38 33 63 5c 75 64 66 33 61 5c 75 64 38 33 63 5c 75 64 66 38 32 5c 75 64 38 33 63 5c 75 64 66 33 62 Data Ascii: 83c\udf40\ud83c\udf37\ud83d\ude3b\ud83d\ude13\u2b50\u2705\ud83e\udd7a\ud83c\udf08\ud83d\ude08\ud83e\udd18\ud83d\udca6\u2714\ud83d\ude23\ud83c\udfc3\ud83d\udc90\u2639\ud83c\udf8a\ud83d\udc98\ud83d\ude20\u261d\ud83d\ude15\ud83c\udf3a\ud83c\udf82\ud83c\udf3b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49799	3.66.52.205	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	1108	OUT	GET /?auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJkaWQ6a2V5Ono2TWtwQndOWWlSUnpWN0tUWU1QTGFHUGhTNTU3elV4cFFkaGc3b2FhbnFYVmpwQiIsInN1YiI6IjM1NzI0NWMxOWJlY2RlMjdmMzE1NTQ2ZGU4ODBmZTYyMmM2MTcwYWU0ZTc3MDk1NGYwZDc2ZmU2YmRlMmM1NDMiLCJhdWQiOiJ3c3M6Ly9yZWxheS53YWxsZXRjb25uZWN0LmNvbSIsImlhdCI6MTczMTM4NTE2OCwiZXhwIjoxNzMxNDcxNTY4fQ.EKvPjWC2kiNxBWBTM8cMR6UO52bKKK-KQKfCZqAJriMu9tgtcp-gDrUy1WqqcsYrxLlzCDFXIJz5sngcc3-DBw&projectId=b7e27dea69b618cdbf49fbef3df26aae&ua=wc-2%2Fjs-2.6.2%2Fwindows10-chrome-117.0.0%2Fbrowser%3Asecure_sharing0documentpreview.wesendit.com&useOnCloseEvent=true HTTP/1.1 Host: relay.walletconnect.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://secure_sharing0documentpreview.wesendit.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: D/WqnX6gG2HrK/81TogOOw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-11-12 04:19:30 UTC	126	IN	HTTP/1.1 400 Bad Request content-type: text/plain; charset=utf-8 content-length: 43 date: Tue, 12 Nov 2024 04:19:30 GMT
2024-11-12 04:19:30 UTC	43	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 20 68 65 61 64 65 72 20 64 69 64 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 27 75 70 67 72 61 64 65 27 Data Ascii: Connection header did not include 'upgrade'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49801	104.21.30.157	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	355	OUT	GET /version.txt HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	1054	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 10 Connection: close Access-Control-Allow-Origin: * Cache-Control: no-store, max-age=0 ETag: "5e1e5feda711b086e56769d2791f3ce0" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DEtOIqQS4ORet4vdp%2F4CscdCWWE2m9YS638XuM7DLm3ojCRSe1qHuLw3ZKqDPbifrE96QrqjRXjb%2FZ7JrYFA28eUWdCfvn5a%2BNf0Wi9oKFBamuP9wk4ttrlu3z12fYbqaU03qzmAGA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b962e9db6be3-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1060&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2829&recv_bytes=933&delivery_rate=2750237&cwnd=237&unsent_bytes=0&cid=7e18f5481fa02941&ts=218&x=0"
2024-11-12 04:19:30 UTC	10	IN	Data Raw: 31 37 33 30 32 38 33 37 30 38 Data Ascii: 1730283708

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49802	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	818	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 456 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	456	OUT	Data Raw: 7b 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 39 2e 32 36 34 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 7d 0a 7b 22 74 79 70 65 22 3a 22 73 65 73 73 69 6f 6e 22 7d 0a 7b 22 73 69 64 22 3a 22 66 65 65 61 31 35 32 31 36 38 31 62 34 32 39 31 61 30 66 36 33 36 30 39 30 37 33 62 33 31 66 33 22 2c 22 69 6e 69 74 22 3a 66 61 6c 73 65 2c 22 73 74 61 72 74 65 64 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 36 2e 39 35 37 5a 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 39 2e 32 36 33 5a 22 2c 22 73 74 61 74 75 Data Ascii: {"sent_at":"2024-11-12T04:19:29.264Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"}}{"type":"session"}{"sid":"feea1521681b4291a0f63609073b31f3","init":false,"started":"2024-11-12T04:19:26.957Z","timestamp":"2024-11-12T04:19:29.263Z","statu
2024-11-12 04:19:30 UTC	521	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/json Content-Length: 2 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:30 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	35.190.80.1	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	543	OUT	OPTIONS /report/v4?s=ZsxWQxcxK10zB9btxRyeaZ%2Fwgfx5rw%2BwAbjsZcS%2BecJ%2FiyeK3Em3PpHCz%2B8aAOuSKAxLGpml0V%2BQjMNY5IGzZGgaSlnU3bimGSQeIQNOGHktp04VroxhEuVOFsjYD6eHUu8%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://api.trstplse.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 12 Nov 2024 04:19:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49803	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	819	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 3277 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	3277	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 31 66 38 63 39 35 30 30 31 39 61 34 66 61 32 38 31 65 31 30 65 63 62 61 37 62 37 65 31 36 31 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 39 2e 32 36 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 76 33 2e 31 2e 35 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 62 64 61 32 32 65 33 34 39 63 61 63 34 66 63 32 39 63 34 35 61 66 31 61 34 31 39 39 64 66 34 61 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 63 Data Ascii: {"event_id":"41f8c950019a4fa281e10ecba7b7e161","sent_at":"2024-11-12T04:19:29.265Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"},"trace":{"environment":"prod","release":"v3.1.5","public_key":"bda22e349cac4fc29c45af1a4199df4a","trace_id":"ac
2024-11-12 04:19:30 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: application/json Content-Length: 41 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:30 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 34 31 66 38 63 39 35 30 30 31 39 61 34 66 61 32 38 31 65 31 30 65 63 62 61 37 62 37 65 31 36 31 22 7d Data Ascii: {"id":"41f8c950019a4fa281e10ecba7b7e161"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49776	172.67.173.54	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:30 UTC	635	OUT	GET /crowdswap-widget.css?1730283708 HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:30 UTC	1079	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:30 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"6a832e9c1bef16c04641299359542269" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FoS5alSBOugQ31P0o06OWRfqgLG0gmHUxH2exHsxpdbM6vAm5Mo9Gcdrdysw%2F9G3CDPdmnHLQkH87G5ghtcCLUokuWz%2FuWHnjWF7fLBc9wPwTj2nnuOpSvDbCjeV5Izb6WkeWGamPQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b96599b1460b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1395&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1213&delivery_rate=2961145&cwnd=247&unsent_bytes=0&cid=7fe50111a1f0eddd&ts=420&x=0"
2024-11-12 04:19:30 UTC	290	IN	Data Raw: 37 63 32 37 0d 0a 2e 66 6f 6e 74 2d 32 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 33 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 34 7b 66 6f Data Ascii: 7c27.font-28{font-size:28px!important}.font-24{font-size:24px!important}.font-32{font-size:32px!important}.font-22{font-size:22px!important}.font-20{font-size:20px!important}.font-18{font-size:18px!important}.font-16{font-size:16px!important}.font-14{fo
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 74 2d 73 69 7a 65 3a 31 33 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 39 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 38 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 30 70 78 7b 6c 69 6e 65 2d 68 Data Ascii: t-size:13px!important}.font-12{font-size:12px!important}.font-11{font-size:11px!important}.font-10{font-size:10px!important}.font-9{font-size:9px!important}.font-8{font-size:8px!important}.line-height-18{line-height:18px!important}.line-height-10px{line-h
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 31 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 31 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 32 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 32 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d Data Ascii: rtant}.font-xs-14{font-size:14px!important}.font-xs-16{font-size:16px!important}.font-xs-20{font-size:20px!important}.font-xs-28{font-size:28px!important}}@charset "UTF-8";@font-face{font-family:swiper-icons;src:url(data:application/font-woff;charset=utf-
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 6e 65 59 59 67 6d 34 4d 4a 62 68 4b 46 61 45 78 49 4f 41 56 58 38 41 70 65 77 53 74 34 42 69 63 34 41 66 65 41 69 64 33 56 4f 42 69 78 44 78 66 50 59 45 7a 61 35 4f 2b 58 66 69 30 34 59 41 44 67 67 69 55 49 55 4c 43 75 45 4a 4b 38 56 68 4f 34 62 53 76 70 64 6e 6b 74 48 49 35 51 43 59 74 64 69 32 73 6c 38 5a 6e 58 61 48 6c 71 55 72 4e 4b 7a 64 4b 63 54 38 63 6a 6c 71 2b 72 77 5a 53 76 49 56 63 7a 4e 69 65 7a 73 66 6e 50 2f 75 7a 6e 6d 66 50 46 42 4e 4f 44 4d 32 4b 37 4d 54 51 34 35 59 45 41 5a 71 47 50 38 31 41 6d 47 47 63 46 33 69 50 71 4f 6f 70 30 72 31 53 50 54 61 54 62 56 6b 66 55 65 34 48 58 6a 39 37 77 59 45 2b 79 4e 77 57 59 78 77 57 75 34 76 31 75 67 57 48 67 6f 33 53 31 58 64 5a 45 56 71 57 4d 37 45 54 30 63 66 6e 4c 47 78 57 66 6b 67 52 34 32 6f Data Ascii: neYYgm4MJbhKFaExIOAVX8ApewSt4Bic4AfeAid3VOBixDxfPYEza5O+Xfi04YADggiUIULCuEJK8VhO4bSvpdnktHI5QCYtdi2sl8ZnXaHlqUrNKzdKcT8cjlq+rwZSvIVczNiezsfnP/uznmfPFBNODM2K7MTQ45YEAZqGP81AmGGcF3iPqOop0r1SPTaTbVkfUe4HXj97wYE+yNwWYxwWu4v1ugWHgo3S1XdZEVqWM7ET0cfnLGxWfkgR42o
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 73 77 69 70 65 72 2d 61 6e 64 72 6f 69 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2c 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 73 77 69 70 65 72 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 7d 2e 73 77 69 70 65 72 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2e 73 77 69 70 65 72 2d 76 65 72 74 69 63 61 6c 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e Data Ascii: 00%;height:100%;z-index:1;display:flex;transition-property:transform;box-sizing:content-box}.swiper-android .swiper-slide,.swiper-wrapper{transform:translateZ(0)}.swiper-pointer-events{touch-action:pan-y}.swiper-pointer-events.swiper-vertical{touch-action
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 Data Ascii: lide-shadow-left{background-image:linear-gradient(to left,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-right{background-image:linear-gradient(to right,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-top{background-image:line
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 29 7d 2e 73 77 69 70 65 72 2d 63 65 6e 74 65 72 65 64 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 3e 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 6f 70 3a 61 6c 77 61 79 73 7d 3a 72 6f 6f 74 7b 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 3a 20 34 34 70 78 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 29 20 2f 20 34 34 20 2a Data Ascii: )}.swiper-centered>.swiper-wrapper>.swiper-slide{scroll-snap-align:center center;scroll-snap-stop:always}:root{--swiper-navigation-size: 44px}.swiper-button-prev,.swiper-button-next{position:absolute;top:50%;width:calc(var(--swiper-navigation-size) / 44 *
2024-11-12 04:19:30 UTC	1369	IN	Data Raw: 6e 65 78 74 22 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 69 64 64 65 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 64 69 73 61 62 6c 65 64 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2c 2e 73 Data Ascii: next"}.swiper-button-lock{display:none}.swiper-pagination{position:absolute;text-align:center;transition:.3s opacity;transform:translateZ(0);z-index:10}.swiper-pagination.swiper-pagination-hidden{opacity:0}.swiper-pagination-disabled>.swiper-pagination,.s
2024-11-12 04:19:31 UTC	1369	IN	Data Raw: 65 69 67 68 74 2c 20 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 73 69 7a 65 2c 20 38 70 78 29 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 69 6e 61 63 74 69 76 65 2d 63 6f 6c 6f 72 2c 20 23 30 30 30 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 69 6e 61 63 74 69 76 65 2d 6f 70 61 63 69 74 79 2c 20 2e 32 29 7d 62 75 74 74 6f 6e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 62 6f 72 64 65 72 3a 6e 6f Data Ascii: eight, var(--swiper-pagination-bullet-size, 8px));display:inline-block;border-radius:50%;background:var(--swiper-pagination-bullet-inactive-color, #000);opacity:var(--swiper-pagination-bullet-inactive-opacity, .2)}button.swiper-pagination-bullet{border:no
2024-11-12 04:19:31 UTC	1369	IN	Data Raw: 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 74 72 61 6e 73 66 6f 72 6d 2c 2e 32 73 20 74 6f 70 7d 2e 73 77 69 70 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2c 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 6d 61 72 67 69 6e 3a 30 20 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 Data Ascii: wiper-pagination-bullet{display:inline-block;transition:.2s transform,.2s top}.swiper-horizontal>.swiper-pagination-bullets .swiper-pagination-bullet,.swiper-pagination-horizontal.swiper-pagination-bullets .swiper-pagination-bullet{margin:0 var(--swiper-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49806	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:31 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:31 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:19:31 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49805	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:31 UTC	621	OUT	OPTIONS /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:31 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:19:31 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49809	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:31 UTC	819	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 9257 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:31 UTC	9257	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 66 31 36 35 36 34 39 34 33 65 66 30 34 32 66 65 38 35 65 34 65 66 62 66 39 63 62 35 65 63 37 34 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 33 30 2e 30 30 37 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 76 33 2e 31 2e 35 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 62 64 61 32 32 65 33 34 39 63 61 63 34 66 63 32 39 63 34 35 61 66 31 61 34 31 39 39 64 66 34 61 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 63 Data Ascii: {"event_id":"f16564943ef042fe85e4efbf9cb5ec74","sent_at":"2024-11-12T04:19:30.007Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"},"trace":{"environment":"prod","release":"v3.1.5","public_key":"bda22e349cac4fc29c45af1a4199df4a","trace_id":"ac
2024-11-12 04:19:31 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:31 GMT Content-Type: application/json Content-Length: 41 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:31 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 66 31 36 35 36 34 39 34 33 65 66 30 34 32 66 65 38 35 65 34 65 66 62 66 39 63 62 35 65 63 37 34 22 7d Data Ascii: {"id":"f16564943ef042fe85e4efbf9cb5ec74"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49810	35.190.80.1	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:31 UTC	484	OUT	POST /report/v4?s=ZsxWQxcxK10zB9btxRyeaZ%2Fwgfx5rw%2BwAbjsZcS%2BecJ%2FiyeK3Em3PpHCz%2B8aAOuSKAxLGpml0V%2BQjMNY5IGzZGgaSlnU3bimGSQeIQNOGHktp04VroxhEuVOFsjYD6eHUu8%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 462 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:31 UTC	462	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 5f 73 68 61 72 69 6e 67 30 64 6f 63 75 6d 65 6e 74 70 72 65 76 69 65 77 2e 77 65 73 65 6e 64 69 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 36 2e 34 30 2e 38 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 Data Ascii: [{"age":0,"body":{"elapsed_time":803,"method":"POST","phase":"application","protocol":"http/1.1","referrer":"https://secure_sharing0documentpreview.wesendit.com/","sampling_fraction":1.0,"server_ip":"172.66.40.81","status_code":500,"type":"http.error"},"t
2024-11-12 04:19:31 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 12 Nov 2024 04:19:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49811	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:32 UTC	848	OUT	POST /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 284 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:32 UTC	284	OUT	Data Raw: 7b 22 74 69 6d 65 22 3a 33 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 39 2e 36 39 37 5a 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 70 61 67 65 56 69 65 77 22 2c 22 64 61 74 65 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 32 39 2e 36 39 37 5a 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 5f 73 68 61 72 69 6e 67 30 64 6f 63 75 6d 65 6e 74 70 72 65 76 69 65 77 2e 77 65 73 65 6e 64 69 74 2e 63 6f 6d 2f 64 6c 2f 55 58 73 65 5a 36 4f 6a 38 57 54 38 63 57 78 48 71 2f 62 58 56 6f 59 57 31 68 5a 43 35 68 5a 47 6b 75 62 58 56 78 63 6d 6c 41 63 32 6c 74 5a 57 52 68 63 Data Ascii: {"time":3,"events":[{"name":"sessionStarted","date":"2024-11-12T04:19:29.697Z"},{"name":"pageView","date":"2024-11-12T04:19:29.697Z","data":{"page":"https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhc
2024-11-12 04:19:32 UTC	261	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 14 etag: W/"e-Fkkr+aQ8UxpFbTe0AOB6CrmW5fg" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:32 GMT connection: close
2024-11-12 04:19:32 UTC	14	IN	Data Raw: 7b 22 61 22 3a 5b 5d 2c 22 75 22 3a 30 7d Data Ascii: {"a":[],"u":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:32 UTC	852	OUT	GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO HTTP/1.1 Host: api.gleap.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:32 UTC	267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 50183 etag: W/"c407-tODthcPDtOiaQvcI9sgbbPWANbA" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:32 GMT connection: close
2024-11-12 04:19:32 UTC	14185	IN	Data Raw: 7b 22 66 6c 6f 77 43 6f 6e 66 69 67 22 3a 7b 22 6e 65 77 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 4e 65 77 73 22 2c 22 63 68 65 63 6b 6c 69 73 74 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 56 49 50 20 55 73 65 72 22 2c 22 66 65 61 74 75 72 65 52 65 71 75 65 73 74 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 52 6f 61 64 6d 61 70 22 2c 22 61 6c 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 4d 65 73 73 61 67 65 73 22 2c 22 6b 6e 6f 77 6c 65 64 67 65 42 61 73 65 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 48 65 6c 70 22 2c 22 77 65 6c 63 6f 6d 65 54 65 78 74 22 3a 22 48 6f 77 20 63 61 6e 20 77 65 20 68 65 6c 70 3f 22 2c 22 72 65 70 6c 79 54 69 6d 65 22 3a 22 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 22 2c 22 63 6f 6c 6f 72 22 3a 22 Data Ascii: {"flowConfig":{"newsMenuLabel":"News","checklistMenuLabel":"VIP User","featureRequestsMenuLabel":"Roadmap","allConversationsMenuLabel":"Messages","knowledgeBaseMenuLabel":"Help","welcomeText":"How can we help?","replyTime":"within a few minutes","color":"
2024-11-12 04:19:32 UTC	10136	IN	Data Raw: 74 20 62 65 74 74 65 72 3f 22 2c 22 54 79 70 65 20 79 6f 75 72 20 73 75 67 67 65 73 74 69 6f 6e 73 20 68 65 72 65 22 3a 22 54 79 70 65 20 79 6f 75 72 20 73 75 67 67 65 73 74 69 6f 6e 73 20 68 65 72 65 22 7d 2c 22 65 6e 22 3a 7b 22 53 75 62 6d 69 74 22 3a 22 53 75 62 6d 69 74 22 2c 22 48 69 22 3a 22 48 69 22 2c 22 53 68 6f 72 74 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 74 69 74 6c 65 22 3a 22 53 68 6f 72 74 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 74 69 74 6c 65 22 2c 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 68 6f 77 20 77 65 20 63 61 6e 20 64 6f 20 62 65 74 74 65 72 2e 22 3a 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 68 6f 77 20 77 65 20 63 61 6e 20 64 6f 20 62 65 74 74 65 72 2e 22 2c 22 52 65 70 6f 72 74 20 61 20 62 75 67 20 6f 72 20 73 68 61 72 65 20 79 6f Data Ascii: t better?","Type your suggestions here":"Type your suggestions here"},"en":{"Submit":"Submit","Hi":"Hi","Short, descriptive title":"Short, descriptive title","Let us know how we can do better.":"Let us know how we can do better.","Report a bug or share yo
2024-11-12 04:19:32 UTC	16384	IN	Data Raw: 72 61 73 20 68 61 63 65 72 20 63 6c 69 63 20 65 6e 20 65 6c 20 62 6f 74 c3 b3 6e 20 64 65 20 61 62 61 6a 6f 20 70 61 72 61 20 69 6e 66 6f 72 6d 61 72 6c 6f 20 61 20 6e 75 65 73 74 72 6f 20 65 71 75 69 70 6f 2e 22 2c 22 46 6f 75 6e 64 20 61 20 62 75 67 3f 20 4c 65 74 20 75 73 20 6b 6e 6f 77 22 3a 22 46 6f 75 6e 64 20 61 20 62 75 67 3f 20 4c 65 74 20 75 73 20 6b 6e 6f 77 22 2c 22 47 65 74 20 32 35 30 20 24 57 53 49 20 66 6f 72 20 61 20 76 65 72 69 66 69 65 64 20 62 75 67 2e 22 3a 22 47 65 74 20 32 35 30 20 24 57 53 49 20 66 6f 72 20 61 20 76 65 72 69 66 69 65 64 20 62 75 67 2e 22 2c 22 57 68 61 74 20 6f 6e 20 65 61 72 74 68 20 69 73 20 61 6e 20 4d 56 50 3f 22 3a 22 57 68 61 74 20 6f 6e 20 65 61 72 74 68 20 69 73 20 61 6e 20 4d 56 50 3f 22 2c 22 4c 65 61 72 Data Ascii: ras hacer clic en el botn de abajo para informarlo a nuestro equipo.","Found a bug? Let us know":"Found a bug? Let us know","Get 250 $WSI for a verified bug.":"Get 250 $WSI for a verified bug.","What on earth is an MVP?":"What on earth is an MVP?","Lear
2024-11-12 04:19:33 UTC	2440	IN	Data Raw: 20 69 64 65 61 2e 22 3a 22 57 65 20 68 65 62 62 65 6e 20 62 65 73 74 61 61 6e 64 65 20 66 75 6e 63 74 69 65 76 65 72 7a 6f 65 6b 65 6e 20 67 65 76 6f 6e 64 65 6e 20 64 69 65 20 6d 6f 67 65 6c 69 6a 6b 20 6f 76 65 72 65 65 6e 6b 6f 6d 65 6e 20 6d 65 74 20 75 77 20 69 64 65 65 2e 20 53 74 65 6d 20 6f 70 20 64 65 67 65 6e 65 6e 20 64 69 65 20 6a 65 20 6c 65 75 6b 20 76 69 6e 64 74 20 6f 66 20 67 61 20 76 65 72 64 65 72 20 65 6e 20 64 69 65 6e 20 6a 65 20 65 69 67 65 6e 20 69 64 65 65 20 69 6e 2e 22 2c 22 53 75 62 6d 69 74 20 6d 79 20 69 64 65 61 22 3a 22 4d 69 6a 6e 20 69 64 65 65 20 69 6e 64 69 65 6e 65 6e 22 2c 22 47 72 65 61 74 21 20 41 6e 79 20 64 65 74 61 69 6c 73 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 61 64 64 20 74 6f 20 79 6f 75 72 20 66 65 61 74 75 Data Ascii: idea.":"We hebben bestaande functieverzoeken gevonden die mogelijk overeenkomen met uw idee. Stem op degenen die je leuk vindt of ga verder en dien je eigen idee in.","Submit my idea":"Mijn idee indienen","Great! Any details you want to add to your featu
2024-11-12 04:19:33 UTC	7038	IN	Data Raw: 65 74 20 74 68 65 20 66 69 6c 74 65 72 73 20 74 6f 20 73 65 65 20 6d 6f 72 65 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 2e 22 2c 22 6e 6f 74 68 69 6e 67 55 6e 73 65 65 6e 54 69 74 6c 65 22 3a 22 4e 6f 74 68 69 6e 67 20 75 6e 72 65 61 64 2c 20 67 6f 6f 64 20 6a 6f 62 20 f0 9f 92 aa 22 2c 22 6e 6f 74 68 69 6e 67 55 6e 73 65 65 6e 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 72 65 20 61 72 65 20 6e 6f 20 75 6e 72 65 61 64 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 20 77 61 69 74 69 6e 67 20 66 6f 72 20 79 6f 75 2e 22 2c 22 6e 6f 46 65 61 74 75 72 65 52 65 71 75 65 73 74 73 54 69 74 6c 65 22 3a 22 4e 6f 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 20 79 65 74 22 2c 22 6e 6f 46 65 61 74 75 72 65 52 65 71 75 65 73 74 73 44 65 73 63 Data Ascii: et the filters to see more feature requests.","nothingUnseenTitle":"Nothing unread, good job ","nothingUnseenDescription":"There are no unread feature requests waiting for you.","noFeatureRequestsTitle":"No feature requests yet","noFeatureRequestsDesc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49813	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:33 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:33 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49815	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	1149	OUT	GET /static/js/6316.088c246e.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:34 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 24696 Connection: close Date: Tue, 12 Nov 2024 04:19:35 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "e5c87ba1e0bb5d6e4d405b1821abb42f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 2fcedcc055e24d7ac99fbc19ed8fc8ec.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:50055 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: OM66jN4dWsxUjGwV36MGtkYCJB2g2Te3sQgIzmEqezFbp1BmBSErjg==
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 31 36 5d 2c 7b 35 31 36 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 73 69 6e 67 6c 65 5f 73 6f 75 72 63 65 5f 73 68 6f 72 74 65 73 74 5f 70 61 74 68 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 7b 7d 2c 69 3d 7b 7d 3b 69 5b 72 5d 3d 30 3b 76 61 72 20 61 2c 75 2c 73 2c 66 2c 63 2c 68 2c 64 2c 67 3d 65 2e 50 72 69 6f 72 69 74 79 51 75 65 75 65 2e 6d 61 6b 65 28 29 3b 66 6f 72 28 67 2e 70 75 73 68 28 72 2c 30 29 3b 21 67 2e 65 6d 70 Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6316],{51664:function(t){"use strict";var e={single_source_shortest_paths:function(t,r,n){var o={},i={};i[r]=0;var a,u,s,f,c,h,d,g=e.PriorityQueue.make();for(g.push(r,0);!g.emp
2024-11-12 04:19:34 UTC	8312	IN	Data Raw: 22 2c 6f 3d 22 28 3f 3a 28 3f 21 5b 41 2d 5a 30 2d 39 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 7c 22 2b 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 75 2f 67 2c 22 5c 5c 75 22 29 29 2b 22 29 28 3f 3a 2e 7c 5b 5c 72 5c 6e 5d 29 29 2b 22 3b 65 2e 4b 41 4e 4a 49 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 2c 22 67 22 29 2c 65 2e 42 59 54 45 5f 4b 41 4e 4a 49 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 5e 41 2d 5a 30 2d 39 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 2b 22 2c 22 67 22 29 2c 65 2e 42 59 54 45 3d 6e 65 77 20 52 65 67 45 78 70 28 6f 2c 22 67 22 29 2c 65 2e 4e 55 4d 45 52 49 43 3d 6e 65 77 20 52 65 67 45 78 70 28 72 2c 22 67 22 29 2c 65 2e 41 4c 50 48 41 4e 55 4d 45 52 49 43 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 41 2d 5a 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 2b 22 2c Data Ascii: ",o="(?:(?![A-Z0-9 $%+\\-./:]\|"+(n=n.replace(/u/g,"\\u"))+")(?:.\|[\r\n]))+";e.KANJI=new RegExp(n,"g"),e.BYTE_KANJI=new RegExp("[^A-Z0-9 $%+\\-./:]+","g"),e.BYTE=new RegExp(o,"g"),e.NUMERIC=new RegExp(r,"g"),e.ALPHANUMERIC=new RegExp("[A-Z $%*+\\-./:]+",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49816	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	1149	OUT	GET /static/js/4366.ea2f9748.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:34 UTC	1931	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 213993 Connection: close Date: Tue, 12 Nov 2024 04:19:35 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "e5fd2c86c1b8f0a06c77aa265987eb94" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 71dbd5706c5b0c7b733248e1171f2d4e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:59959 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: RMUluoVUqsbwzswRbErQwq0tz0XDu5GXzy9_vqRdFuPyJqDEh3rHKA==
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 33 36 36 2e 65 61 32 66 39 37 34 38 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 36 36 5d 2c 7b 38 34 33 36 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 57 33 6d 41 63 63 6f 75 6e 74 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 63 7d 2c 57 33 6d 43 Data Ascii: /! For license information please see 4366.ea2f9748.chunk.js.LICENSE.txt /"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[4366],{84366:function(t,e,n){n.r(e),n.d(e,{W3mAccountButton:function(){return fc},W3mC
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 5f 24 41 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 29 7d 7d 5d 29 2c 74 7d 28 29 2c 64 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 28 30 2c 63 2e 5a 29 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 74 79 70 65 3d 31 2c 74 68 69 73 2e 5f 24 41 48 3d 72 74 2c 74 68 69 73 2e 5f 24 41 4e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 6e 2c 74 68 69 73 2e 5f 24 41 4d 3d 69 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2c 72 2e 6c 65 6e 67 74 68 3e 32 7c 7c 22 22 21 3d 3d 72 5b 30 5d 7c 7c 22 22 21 3d 3d 72 5b 31 5d 3f 28 74 68 69 73 2e 5f 24 41 48 3d 41 72 72 61 Data Ascii: null===(e=this._$AP)\|\|void 0===e\|\|e.call(this,t))}}]),t}(),dt=function(){function t(e,n,r,i,a){(0,c.Z)(this,t),this.type=1,this._$AH=rt,this._$AN=void 0,this.element=e,this.name=n,this._$AM=i,this.options=a,r.length>2\|\|""!==r[0]\|\|""!==r[1]?(this._$AH=Arra
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 21 3d 3d 28 65 3d 56 65 28 74 2c 5f 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6e 75 6c 6c 3d 3d 3d 50 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 30 7d 2c 64 3d 24 65 28 7a 65 28 6e 29 2c 73 29 2c 6d 3d 42 65 28 64 2c 50 29 3b 69 66 28 71 74 28 67 29 29 7b 76 61 72 20 66 3d 67 2e 63 72 65 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 64 2c 22 6f 70 61 63 69 74 79 22 21 3d 3d 65 2c 73 2c 5f 2c 49 29 3b 67 3d 66 2e 65 61 73 69 6e 67 2c 64 3d 66 2e 6b 65 79 66 72 61 6d 65 73 7c 7c 64 2c 75 3d 66 2e 64 75 72 61 74 69 6f 6e 7c 7c 75 7d 69 66 28 49 65 28 5f 29 26 26 28 53 65 2e 63 73 73 52 65 67 69 73 74 65 72 50 72 6f 70 65 72 74 79 28 29 3f 6a 65 28 5f Data Ascii: !==(e=Ve(t,_))&&void 0!==e?e:null===P\|\|void 0===P?void 0:P.initialValue)&&void 0!==n?n:0},d=$e(ze(n),s),m=Be(d,P);if(qt(g)){var f=g.createAnimation(d,"opacity"!==e,s,_,I);g=f.easing,d=f.keyframes\|\|d,u=f.duration\|\|u}if(Ie(_)&&(Se.cssRegisterProperty()?je(_
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 20 30 2d 34 2e 33 36 20 31 2e 34 36 36 2d 34 2e 35 32 20 33 2e 34 38 37 68 32 2e 39 31 34 63 2e 31 2d 2e 38 39 31 2e 37 33 34 2d 31 2e 34 32 36 20 31 2e 37 30 35 2d 31 2e 34 32 36 2e 39 31 31 20 30 20 31 2e 34 30 37 2e 35 31 35 20 31 2e 34 30 37 20 31 2e 31 31 20 30 20 2e 34 33 35 2d 2e 32 35 38 2e 36 39 33 2d 31 2e 30 33 2e 37 39 32 6c 2d 31 2e 33 38 38 2e 31 35 39 63 2d 32 2e 30 36 31 2e 32 35 37 2d 33 2e 38 32 35 20 31 2e 30 31 2d 33 2e 38 32 35 20 33 2e 31 39 20 30 20 31 2e 39 38 32 20 31 2e 36 34 35 20 33 2e 30 39 32 20 33 2e 33 35 20 33 2e 30 39 32 5a 6d 2e 38 39 31 2d 32 2e 30 34 31 63 2d 2e 37 37 33 20 30 2d 31 2e 33 34 38 2d 2e 34 33 36 2d 31 2e 33 34 38 2d 31 2e 31 39 20 30 2d 2e 37 33 33 2e 36 35 35 2d 31 2e 30 39 20 31 2e 36 34 35 2d 31 2e 32 Data Ascii: 0-4.36 1.466-4.52 3.487h2.914c.1-.891.734-1.426 1.705-1.426.911 0 1.407.515 1.407 1.11 0 .435-.258.693-1.03.792l-1.388.159c-2.061.257-3.825 1.01-3.825 3.19 0 1.982 1.645 3.092 3.35 3.092Zm.891-2.041c-.773 0-1.348-.436-1.348-1.19 0-.733.655-1.09 1.645-1.2
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 2e 30 34 35 20 34 2e 37 33 38 20 34 2e 37 33 38 20 30 20 30 20 30 2d 31 2e 36 33 33 20 33 2e 35 38 34 20 34 2e 37 33 20 34 2e 37 33 20 30 20 30 20 30 20 2e 39 35 36 20 32 2e 38 35 38 20 35 2e 32 31 38 20 35 2e 32 31 38 20 30 20 30 20 30 2d 32 2e 33 35 38 20 36 2e 38 31 35 63 2d 33 2e 30 36 20 34 2e 31 32 39 2d 36 2e 30 39 38 20 38 2e 32 39 38 2d 36 2e 30 39 38 20 31 35 2e 36 34 20 30 20 32 2e 36 36 38 2e 33 36 34 20 34 2e 38 35 36 2e 37 33 31 20 36 2e 33 38 35 2e 31 38 34 2e 37 36 35 2e 33 36 38 20 31 2e 33 36 36 2e 35 30 39 20 31 2e 37 38 61 31 32 2e 37 32 31 20 31 32 2e 37 32 31 20 30 20 30 20 30 20 2e 32 32 35 2e 36 31 31 6c 2e 30 31 35 2e 30 33 37 2e 30 30 35 2e 30 31 31 2e 30 30 31 2e 30 30 34 76 2e 30 30 32 68 2e 30 30 31 6c 2e 39 32 2d 2e 33 39 33 Data Ascii: .045 4.738 4.738 0 0 0-1.633 3.584 4.73 4.73 0 0 0 .956 2.858 5.218 5.218 0 0 0-2.358 6.815c-3.06 4.129-6.098 8.298-6.098 15.64 0 2.668.364 4.856.731 6.385.184.765.368 1.366.509 1.78a12.721 12.721 0 0 0 .225.611l.015.037.005.011.001.004v.002h.001l.92-.393
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 20 34 20 30 20 30 20 31 20 32 20 33 2e 34 36 35 76 39 2e 33 38 31 61 34 20 34 20 30 20 30 20 31 2d 32 20 33 2e 34 36 34 4c 31 36 20 32 36 2e 38 36 32 61 34 20 34 20 30 20 30 20 31 2d 34 20 30 6c 2d 38 2e 31 32 34 2d 34 2e 36 39 61 34 20 34 20 30 20 30 20 31 2d 32 2d 33 2e 34 36 34 56 39 2e 33 32 37 61 34 20 34 20 30 20 30 20 31 20 32 2d 33 2e 34 36 34 4c 31 32 20 31 2e 31 37 33 5a 22 2f 3e 3c 2f 6d 61 73 6b 3e 3c 67 20 6d 61 73 6b 3d 22 75 72 6c 28 23 70 29 22 3e 3c 70 61 74 68 20 69 64 3d 22 6e 65 74 77 6f 72 6b 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 66 69 6c 6c 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 32 38 76 32 38 48 30 7a 22 2f 3e 3c 70 61 74 68 20 69 64 3d 22 6e 65 74 77 6f 72 6b 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 64 61 Data Ascii: 4 0 0 1 2 3.465v9.381a4 4 0 0 1-2 3.464L16 26.862a4 4 0 0 1-4 0l-8.124-4.69a4 4 0 0 1-2-3.464V9.327a4 4 0 0 1 2-3.464L12 1.173Z"/></mask><g mask="url(#p)"><path id="network-placeholder-fill" fill="#fff" d="M0 0h28v28H0z"/><path id="network-placeholder-da
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 29 2c 49 74 2e 41 56 2e 67 6f 42 61 63 6b 2c 6b 6f 2e 42 41 43 4b 5f 49 43 4f 4e 29 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 6f 6e 42 74 6e 54 65 6d 70 6c 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 74 28 4a 6e 7c 7c 28 4a 6e 3d 68 28 5b 27 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 77 33 6d 2d 61 63 74 69 6f 6e 2d 62 74 6e 22 20 40 63 6c 69 63 6b 3d 22 27 2c 27 22 3e 27 2c 22 3c 2f 62 75 74 74 6f 6e 3e 22 5d 29 29 2c 74 68 69 73 2e 6f 6e 41 63 74 69 6f 6e 2c 74 68 69 73 2e 61 63 74 69 6f 6e 49 63 6f 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 22 77 33 6d 2d 62 6f 72 64 65 72 22 3a 74 68 69 73 2e 62 6f 72 64 65 72 7d 2c 65 3d Data Ascii: ),It.AV.goBack,ko.BACK_ICON)}},{key:"actionBtnTemplate",value:function(){return tt(Jn\|\|(Jn=h(['<button class="w3m-action-btn" @click="','">',"</button>"])),this.onAction,this.actionIcon)}},{key:"render",value:function(){var t={"w3m-border":this.border},e=
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 68 6f 6c 64 65 72 2d 64 61 73 68 7b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 77 33 6d 2d 63 6f 6c 6f 72 2d 6f 76 65 72 6c 61 79 29 7d 69 6d 61 67 65 7b 63 6c 69 70 2d 70 61 74 68 3a 70 61 74 68 28 27 4d 31 37 2e 30 33 33 20 34 2e 39 36 34 63 33 2e 38 35 32 2d 32 2e 32 36 32 20 35 2e 37 37 38 2d 33 2e 33 39 33 20 37 2e 38 34 2d 33 2e 37 37 61 31 31 2e 38 30 37 20 31 31 2e 38 30 37 20 30 20 30 20 31 20 34 2e 32 35 34 20 30 63 32 2e 30 36 32 2e 33 37 37 20 33 2e 39 38 38 20 31 2e 35 30 38 20 37 2e 38 34 20 33 2e 37 37 6c 36 2e 30 36 36 20 33 2e 35 36 32 63 33 2e 38 35 32 20 32 2e 32 36 33 20 35 2e 37 37 37 20 33 2e 33 39 34 20 37 2e 31 33 20 35 2e 30 32 32 61 31 32 2e 32 36 38 20 31 32 2e 32 36 38 20 30 20 30 20 31 20 32 2e 31 32 37 20 33 2e 37 34 37 63 2e 37 Data Ascii: holder-dash{stroke:var(--w3m-color-overlay)}image{clip-path:path('M17.033 4.964c3.852-2.262 5.778-3.393 7.84-3.77a11.807 11.807 0 0 1 4.254 0c2.062.377 3.988 1.508 7.84 3.77l6.066 3.562c3.852 2.263 5.777 3.394 7.13 5.022a12.268 12.268 0 0 1 2.127 3.747c.7
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 6c 6f 72 2d 62 67 2d 33 29 7d 23 77 61 6c 6c 65 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 64 61 73 68 7b 73 74 72 6f 6b 65 3a 76 61 72 28 2d 2d 77 33 6d 2d 63 6f 6c 6f 72 2d 6f 76 65 72 6c 61 79 29 7d 22 5d 29 29 29 2c 56 6c 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 55 6c 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 42 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 2c 61 3d 72 3e 31 3f 76 6f 69 64 20 30 3a 72 3f 55 6c 28 65 2c 6e 29 3a 65 2c 6f 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 6f 3e 3d 30 3b 6f 2d 2d 29 28 69 3d 74 5b 6f 5d 29 26 26 28 61 3d 28 72 3f 69 28 65 2c 6e 2c 61 29 3a 69 28 61 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 72 26 Data Ascii: lor-bg-3)}#wallet-placeholder-dash{stroke:var(--w3m-color-overlay)}"]))),Vl=Object.defineProperty,Ul=Object.getOwnPropertyDescriptor,Bl=function(t,e,n,r){for(var i,a=r>1?void 0:r?Ul(e,n):e,o=t.length-1;o>=0;o--)(i=t[o])&&(a=(r?i(e,n,a):i(a))\|\|a);return r&
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 79 70 65 2c 22 6e 61 6d 65 22 2c 32 29 2c 5a 63 28 5b 5f 74 28 29 5d 2c 41 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 61 64 69 6e 67 22 2c 32 29 2c 5a 63 28 5b 45 74 28 29 5d 2c 41 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 72 69 61 6e 74 22 2c 32 29 2c 41 63 3d 5a 63 28 5b 41 74 28 22 77 33 6d 2d 61 64 64 72 65 73 73 2d 74 65 78 74 22 29 5d 2c 41 63 29 3b 76 61 72 20 4f 63 3d 7b 6f 6e 43 6f 6e 6e 65 63 74 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 55 6f 2e 67 6f 54 6f 43 6f 6e 6e 65 63 74 69 6e 67 56 69 65 77 28 74 29 7d 2c 6f 6e 45 78 74 65 72 6e 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 55 6f 2e 68 61 6e 64 6c 65 43 6f 6e 6e 65 63 74 6f 72 43 6f 6e 6e 65 63 74 69 6f 6e 28 74 29 7d 2c 6d 61 6e 75 61 6c 57 61 6c 6c 65 74 73 54 65 6d 70 6c 61 Data Ascii: ype,"name",2),Zc([_t()],Ac.prototype,"loading",2),Zc([Et()],Ac.prototype,"variant",2),Ac=Zc([At("w3m-address-text")],Ac);var Oc={onConnecting:function(t){Uo.goToConnectingView(t)},onExternal:function(t){Uo.handleConnectorConnection(t)},manualWalletsTempla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49814	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	646	OUT	GET /manifest.json HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:34 UTC	1922	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/json Content-Length: 575 Connection: close Date: Tue, 12 Nov 2024 04:19:35 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "d2d665efdbc66692e54556e74a3c6c8d" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:49051 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: VbPiDot92tn5UPds-oOtujyssNV-DVl2LX1rZZWBz6rFaWXiBoXO3A==
2024-11-12 04:19:34 UTC	575	IN	Data Raw: 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 57 65 53 65 6e 64 69 74 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 57 65 53 65 6e 64 69 74 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 2c 0a 20 20 20 20 20 20 22 70 75 72 70 6f 73 65 22 3a 20 22 61 6e 79 20 6d 61 73 6b 61 62 6c 65 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f 67 6f 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 Data Ascii: { "short_name": "WeSendit", "name": "WeSendit", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon", "purpose": "any maskable" }, { "src": "logo192.png", "type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49817	157.240.251.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	1431	OUT	GET /signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:34 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-auEVpIDt' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-12 04:19:34 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-12 04:19:34 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-11-12 04:19:34 UTC	14884	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-11-12 04:19:34 UTC	1491	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-11-12 04:19:34 UTC	1500	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 Data Ascii: );return Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue
2024-11-12 04:19:34 UTC	13393	IN	Data Raw: 73 28 62 29 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 3d 2d 31 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6a 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 Data Ascii: s(b).indexOf(c)===-1}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.cookie",function(){return function(j,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsEvents"
2024-11-12 04:19:34 UTC	1491	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-11-12 04:19:34 UTC	1491	IN	Data Raw: 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 Data Ascii: h.listen(function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.ap
2024-11-12 04:19:34 UTC	13402	IN	Data Raw: 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 41 72 72 61 79 2e Data Ascii: e:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function g(a){if(Array.
2024-11-12 04:19:34 UTC	1491	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49818	13.32.27.107	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:33 UTC	575	OUT	GET /modules.6f60e575cf8ad7cb10f7.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:34 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226966 Connection: close Date: Mon, 04 Nov 2024 14:20:08 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "4eec238587f7f82d91a29f25d83a5fb6" Last-Modified: Mon, 04 Nov 2024 14:19:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef4ff53b101ef123a46ec560b6c94cb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: lzLcS3Vfyf7R2POouIqioypVQ431Hhalyc-OHAqJeFABid5sqiEoxw== Age: 655166
2024-11-12 04:19:34 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 66 36 30 65 35 37 35 63 66 38 61 64 37 63 62 31 30 66 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.6f60e575cf8ad7cb10f7.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 29 29 2c 68 6a 2e 62 72 69 64 67 65 2e 66 6c 75 73 68 55 73 65 72 41 74 74 72 69 62 75 74 65 73 28 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 28 6e 75 6c 6c 2c 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 7d 65 6c 73 65 20 65 28 45 72 72 6f 72 28 22 6e 6f 5f 75 73 65 72 22 29 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 66 6c 75 73 68 22 29 2c 67 65 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 73 65 72 5f 69 64 22 3d 3d 3d 65 3f 6f 2e 69 64 3a 65 26 26 6f 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 67 65 Data Ascii: own_failure")}),"userAttributes"))),hj.bridge.flushUserAttributes(o.id,o.attributes),e(null,o.id,o.attributes)}else e(Error("no_user"))}),"userAttributes.flush"),get:hj.tryCatch((function(e){return"user_id"===e?o.id:e&&o.attributes[e]}),"userAttributes.ge
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 48 54 43 28 2e 46 6c 79 65 72 7c 5c 5f 46 6c 79 65 72 29 7c 53 70 72 69 6e 74 2e 41 54 50 35 31 7c 56 69 65 77 50 61 64 37 7c 70 61 6e 64 69 67 69 74 61 6c 28 73 70 72 6e 6f 76 61 7c 6e 6f 76 61 29 7c 49 64 65 6f 73 2e 53 37 7c 44 65 6c 6c 2e 53 74 72 65 61 6b 2e 37 7c 41 64 76 65 6e 74 2e 56 65 67 61 7c 41 31 30 31 49 54 7c 41 37 30 42 48 54 7c 4d 49 44 37 30 31 35 7c 4e 65 78 74 32 7c 6e 6f 6f 6b 2f 69 29 7c 7c 74 28 2f 4d 42 35 31 31 2f 69 29 26 26 74 28 2f 52 55 54 45 4d 2f 69 29 3f 22 74 61 62 6c 65 74 22 3a 74 28 2f 42 4f 4c 54 7c 46 65 6e 6e 65 63 7c 49 72 69 73 7c 4d 61 65 6d 6f 7c 4d 69 6e 69 6d 6f 7c 4d 6f 62 69 7c 6d 6f 77 73 65 72 7c 4e 65 74 46 72 6f 6e 74 7c 4e 6f 76 61 72 72 61 7c 50 72 69 73 6d 7c 52 58 2d 33 34 7c 53 6b 79 66 69 72 65 7c Data Ascii: HTC(.Flyer\|\_Flyer)\|Sprint.ATP51\|ViewPad7\|pandigital(sprnova\|nova)\|Ideos.S7\|Dell.Streak.7\|Advent.Vega\|A101IT\|A70BHT\|MID7015\|Next2\|nook/i)\|\|t(/MB511/i)&&t(/RUTEM/i)?"tablet":t(/BOLT\|Fennec\|Iris\|Maemo\|Minimo\|Mobi\|mowser\|NetFront\|Novarra\|Prism\|RX-34\|Skyfire\|
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 65 28 32 29 3a 65 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 22 2d 22 3d 3d 3d 65 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 7c 7c 77 28 65 29 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 2f 5c 73 2f 67 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 28 72 2e 6c 65 6e 67 74 68 3c 74 2e 6d 61 78 43 6c 61 73 Data Ascii: e(2):e},w=function(e){return 1===e.length&&"-"===e},S=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1\|\|w(e))&&((e=e.replace(n,"\\$1")).split(/\s/g).forEach((function(e){!(r.length<t.maxClas
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 2c 21 30 29 2e 66 6c 75 73 68 28 29 2c 42 2e 79 2e 73 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 75 73 65 72 5f 61 74 74 72 69 62 75 74 65 73 5f 65 6e 61 62 6c 65 64 26 26 61 2e 72 2e 66 6c 75 73 68 28 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 72 65 63 6f 72 64 69 6e 67 2e 73 74 61 72 74 22 29 2c 73 65 74 41 6e 64 53 65 6e 64 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7a 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 22 29 3b 7a 2e 51 2e 6f 6e 28 22 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 65 76 65 6e 74 53 74 72 65 Data Ascii: ,!0).flush(),B.y.set("autoTagsToProcess",[])),hj.settings.user_attributes_enabled&&a.r.flush()}),"behavior-data.recording.start"),setAndSendPageContent:function(e,t){var n=z.Q.get("sessionAccepted");z.Q.on("sessionAccepted",(function(){return hj.eventStre
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 28 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 5b 65 5d 3d 74 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 61 74 74 72 69 62 75 74 65 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4d 75 74 61 74 65 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 7c 7c 28 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 3d 21 30 2c 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4f 6c 64 56 61 6c 75 65 3d 65 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 64 46 72 6f 6d 50 61 72 65 6e Data Ascii: .attributeOldValues\|\|(n.attributeOldValues[e]=t)}),"NodeChange.attributeMutated"),this.characterDataMutated=hj.tryCatch((function(e){n.characterData\|\|(n.characterData=!0,n.characterDataOldValue=e)}),"NodeChange.characterDataMutated"),this.removedFromParen
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 6f 75 73 53 69 62 6c 69 6e 67 26 26 65 2e 68 61 73 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 72 26 26 65 2e 68 61 73 28 72 29 3b 29 7b 76 61 72 20 69 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 29 3b 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 28 69 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 29 3b 76 61 72 20 73 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 76 6f 69 64 20 30 2c 28 74 3d 73 2e 68 6f 73 74 29 26 26 70 65 28 74 29 3f 28 69 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 73 2e 68 6f 73 Data Ascii: ousSibling&&e.has(r.previousSibling);)r=r.previousSibling;for(;r&&e.has(r);){var i=o.serializeNode(r);r.previousSibling&&(i.previousSibling=o.serializeNode(r.previousSibling));var s=r.parentNode;void 0,(t=s.host)&&pe(t)?(i.parentNode=o.serializeNode(s.hos
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 37 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 69 6e 73 65 72 74 65 64 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 6e 3d 5b 5d 2c 6f 3d 21 31 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 69 73 4f 6e 44 6f 63 75 6d 65 6e 74 3d 6f 2c 61 2e 72 75 6c 65 3d 74 2c 61 2e 69 6e 64 65 78 3d 6e 2c 61 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3d 6f 3f 6e 75 6c 6c 3a 28 69 3d 65 2c 68 6a 2e 73 65 6c 65 63 74 6f 72 28 29 2e 67 65 74 28 68 6a 2e 68 71 28 69 29 29 29 2c 61 2e 6e 6f 64 65 49 64 3d 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 Data Ascii: ;n.r(t);var r=n(5547);hj.tryCatch((function(){hj.insertedRules=function(){var e,t={},n=[],o=!1,i=function(e,t,n,r,o){var i,a={};return a.isOnDocument=o,a.rule=t,a.index=n,a.parentSelector=o?null:(i=e,hj.selector().get(hj.hq(i))),a.nodeId=hj.treeMirror.get
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 53 2e 77 72 69 74 65 28 65 2c 74 2c 21 30 2c 72 29 7d 29 29 2c 53 3b 76 61 72 20 69 3d 65 3b 69 66 28 21 72 26 26 21 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 29 7b 69 66 28 21 53 2e 5f 77 73 2e 73 65 73 73 69 6f 6e 54 69 6d 65 64 4f 75 74 44 75 65 54 6f 49 6e 61 63 74 69 76 69 74 79 7c 7c 21 43 28 69 29 29 72 65 74 75 72 6e 20 53 3b 53 2e 5f 77 73 3d 6e 65 77 20 79 28 53 2e 66 6c 75 73 68 29 2c 68 6a 2e 5f 69 6e 69 74 2e 72 65 69 6e 69 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 30 29 2c 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 7d 76 61 72 20 61 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 53 2e 65 76 65 6e 74 73 2e 70 6f 70 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 5f 28 70 29 3b 72 65 74 75 Data Ascii: ion(e,t){S.write(e,t,!0,r)})),S;var i=e;if(!r&&!S._ws.connect()){if(!S._ws.sessionTimedOutDueToInactivity\|\|!C(i))return S;S._ws=new y(S.flush),hj._init.reinit(window.location.href,!0),S._ws.connect()}var a=null!==(o=S.events.pop())&&void 0!==o?o:_(p);retu
2024-11-12 04:19:34 UTC	16384	IN	Data Raw: 2c 22 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 22 29 7d 7d 29 2c 6f 29 7d 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 3e 3d 6e 2b 69 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 22 63 68 65 63 6b 2d 63 6f 6f 6b 69 65 22 29 2c 21 30 7d 7d 7d 2c 33 38 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 28 30 2c 6e 28 34 35 35 37 29 2e 4d 29 28 7b 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 3a 21 31 2c 73 65 73 73 69 6f 6e 3a 6e 75 6c 6c 2c 75 73 65 72 3a 7b 7d 7d 2c 22 73 65 73 73 69 6f 6e 22 29 7d 2c 35 31 34 38 3a 66 75 6e Data Ascii: ,"clear-cookie")}}),o)}return"number"==typeof n&&r.f_.now()>=n+i}catch(e){return s(e,"check-cookie"),!0}}},3883:function(e,t,n){"use strict";n.d(t,{Q:function(){return r}});var r=(0,n(4557).M)({sessionAccepted:!1,session:null,user:{}},"session")},5148:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49819	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:34 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:34 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:34 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49820	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:34 UTC	1149	OUT	GET /static/js/3046.6e077f08.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:35 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 16032 Connection: close Date: Tue, 12 Nov 2024 04:19:36 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "e80ee1a69fd6aeefe618fa9175a9fce6" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 debe291145dc27044f50d04bac101cd8.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:39061 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: T9L8O7HyEMFG1WC-k6hjTa9eS4Fnf2Viiw_pLlfOoRscFl21ttZqHg==
2024-11-12 04:19:35 UTC	16032	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 34 36 5d 2c 7b 37 34 38 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 7d 29 3b 76 61 72 20 69 2c 61 3d 6e 28 38 35 35 35 34 29 2c 72 3d 6e 28 34 37 33 31 33 29 2c 6f 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 Data Ascii: "use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3046],{74853:function(e,t,n){n.d(t,{s:function(){return m}});var i,a=n(85554),r=n(47313),o=["title","titleId"];function l(){return l=Object.assign?Object.assign.bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49821	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:34 UTC	1149	OUT	GET /static/js/6458.c8caa6c4.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:35 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 42630 Connection: close Date: Tue, 12 Nov 2024 04:19:36 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "220916af03983dd5b9283c7c0f8a7bdc" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e5b93012e2bfb81dc9846f43efd610a6.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:60529 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: ErhtFKXn1okKvQ3qK8WJVTBtEJVMCB7S8vJvYFeQXk3fcHPPiudnHw==
2024-11-12 04:19:35 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 35 38 5d 2c 7b 34 39 30 33 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 7d 29 3b 76 61 72 20 65 2c 6e 2c 72 2c 73 2c 6f 2c 6d 2c 78 3d 61 28 34 37 33 31 33 29 2c 6c 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 64 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 Data Ascii: "use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6458],{4903:function(i,t,a){a.d(t,{r:function(){return y}});var e,n,r,s,o,m,x=a(47313),l=["title","titleId"];function d(){return d=Object.assign?Object.assign.bind
2024-11-12 04:19:35 UTC	16384	IN	Data Raw: 35 2c 22 73 22 3a 5b 2d 31 30 5d 7d 2c 7b 22 74 22 3a 31 31 35 2c 22 73 22 3a 5b 33 36 30 5d 7d 5d 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 34 30 2c 31 34 30 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 31 30 2e 32 35 2c 31 31 30 2e 32 35 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 37 2c 22 73 22 3a 5b Data Ascii: 5,"s":[-10]},{"t":115,"s":[360]}],"ix":10},"p":{"a":0,"k":[140,140,0],"ix":2},"a":{"a":0,"k":[110.25,110.25,0],"ix":1},"s":{"a":1,"k":[{"i":{"x":[0.833,0.833,0.833],"y":[0.833,0.833,0.833]},"o":{"x":[0.167,0.167,0.167],"y":[0.167,0.167,0.167]},"t":7,"s":[
2024-11-12 04:19:35 UTC	9862	IN	Data Raw: 39 2c 33 2e 37 38 39 2c 30 5d 7d 2c 7b 22 74 22 3a 35 34 2c 22 73 22 3a 5b 35 32 2e 35 2c 34 35 2c 30 5d 7d 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 31 30 2e 32 35 2c 31 31 30 2e 32 35 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 31 32 2c 22 73 22 3a 5b 30 2c 30 2c 31 30 30 5d 7d 2c 7b 22 74 22 3a 35 34 2c 22 73 22 3a 5b 35 2c 35 2c 31 30 30 5d Data Ascii: 9,3.789,0]},{"t":54,"s":[52.5,45,0]}],"ix":2},"a":{"a":0,"k":[110.25,110.25,0],"ix":1},"s":{"a":1,"k":[{"i":{"x":[0.833,0.833,0.833],"y":[0.833,0.833,0.833]},"o":{"x":[0.167,0.167,0.167],"y":[0.167,0.167,0.167]},"t":12,"s":[0,0,100]},{"t":54,"s":[5,5,100]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49824	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:35 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:35 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:35 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49822	142.250.185.162	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:35 UTC	1369	OUT	GET /pagead/viewthroughconversion/957027334/?random=1731385168509&cv=11&fst=1731385168509&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-11-12 04:19:35 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUkc6-mNUJnx93ZQCoEeXiKs4yWnle5XNR5K8Pn0n6JHc-jZ1WdtV-wmTFIL; expires=Thu, 12-Nov-2026 04:19:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-12 04:19:35 UTC	367	IN	Data Raw: 31 32 64 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12d8(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-11-12 04:19:35 UTC	1378	IN	Data Raw: 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 Data Ascii: b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];re
2024-11-12 04:19:35 UTC	1378	IN	Data Raw: 2b 2b 29 69 66 28 4c 3d 4c 5b 4b 5b 4d 5d 5d 2c 4c 3d 3d 6e 75 6c 6c 29 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d Data Ascii: ++)if(L=L[K[M]],L==null){H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=
2024-11-12 04:19:35 UTC	1378	IN	Data Raw: 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 77 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 Data Ascii: tch==="function"){var I=w(Object,"assign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba
2024-11-12 04:19:35 UTC	331	IN	Data Raw: 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 69 4f 51 79 38 62 33 4e 34 5a 79 47 69 64 2d 36 31 54 6f 47 5a 52 71 43 76 55 6d 61 4f 79 36 69 42 4e 62 78 79 36 Data Ascii: 938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7diOQy8b3N4ZyGid-61ToGZRqCvUmaOy6iBNbxy6
2024-11-12 04:19:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49827	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:35 UTC	1149	OUT	GET /static/js/8839.6d5fc415.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:36 UTC	1929	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 9363 Connection: close Date: Tue, 12 Nov 2024 04:19:36 GMT Last-Modified: Tue, 15 Oct 2024 09:39:35 GMT Etag: "d3ce1ff04d9c9af9d15079f151301353" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 91ba7c34719cd9c69e0357c149b94b90.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:42123 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: kXn1dl_Rnq8u5BGChRt_FzG1kdZ-d1Nr-bmL0aBDuPuK9CVHQHXg9Q==
2024-11-12 04:19:36 UTC	9363	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 33 39 5d 2c 7b 38 33 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 61 3d 74 28 36 34 37 34 39 29 2c 6f 3d 74 28 35 33 30 34 36 29 2c 69 3d 74 28 35 38 33 33 35 29 2c 72 3d 22 50 61 67 65 48 65 61 64 65 72 57 69 74 68 4e 61 76 69 67 61 74 69 6f 6e 5f 68 65 61 64 65 72 5f 5f 68 56 61 64 7a 22 2c 6c 3d 22 50 61 67 65 48 65 61 64 65 72 57 69 74 68 4e 61 76 69 67 Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[8839],{83343:function(e,n,t){"use strict";t.d(n,{l:function(){return f}});var a=t(64749),o=t(53046),i=t(58335),r="PageHeaderWithNavigation_header__hVadz",l="PageHeaderWithNavig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49826	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:35 UTC	1226	OUT	GET /static/media/background.89952b18428ee1e72fb5.webp HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D
2024-11-12 04:19:36 UTC	1928	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: binary/octet-stream Content-Length: 281796 Connection: close Date: Tue, 12 Nov 2024 04:19:36 GMT Last-Modified: Tue, 15 Oct 2024 09:39:36 GMT Etag: "a013aa5320533f411c7ed3702817427f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 cc0ab20766d57035422a2c4c69fe0620.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:43483 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 0YgYKCY9bdbINavAW5dJNJCq2Um7-ZjUlICBUg_3qD0qFSvkLqhP5g==
2024-11-12 04:19:36 UTC	14456	IN	Data Raw: 52 49 46 46 bc 4c 04 00 57 45 42 50 56 50 38 20 b0 4c 04 00 70 a3 0f 9d 01 2a 80 07 38 04 00 00 00 25 a5 98 fe 9d 5e bd 83 ff cc f6 7e fd ff b5 b9 f7 67 f5 1c ea a1 d7 e4 df 0e ce 9d b5 d5 ff fd e8 ee 03 c2 7f 44 2b cf dd df 17 7d da c6 5f 26 ea 9e fa 3c 35 fd bf c0 53 cf 7f bf 74 cb ff 75 dd af ba 9e c0 de 73 99 88 ff 93 d3 4b cc 53 fb be 93 1f f5 79 27 fb 77 d4 76 74 78 57 fc 3f 7f 3b f8 e3 ff c5 7f ff ff d7 e8 07 e8 07 f0 0f 47 cb 7f ff ef ff ff e2 4f ff fd c7 fe df ff ff 65 0f c1 ff ff cf 77 ff ff 64 bf bf fa ae 79 d2 e8 f1 f5 d1 ff a7 a7 bb 7a d7 ff ff b7 87 f8 0e 90 0f ff fe df fc df fe af fb fd e8 07 ea 3f 7e 3f e5 7d aa fa cf fa 97 bf 27 f5 df ef ff 70 3e 83 ff c6 ff ff ff 4f 80 bf ad ff a7 f7 9f d5 5f f0 5f d5 ff f5 ff 27 db 7f fa 9f ff ff ec 7f Data Ascii: RIFFLWEBPVP8 Lp*8%^~gD+}_&<5StusKSy'wvtxW?;GOewdyz?~?}'p>O__'
2024-11-12 04:19:36 UTC	2521	IN	Data Raw: 1e 0a 9a 42 01 6b 26 3b b7 d9 8b 62 ec 7b bb cb a3 77 d2 6b cf 91 85 23 9b bb 42 cb ad f5 df a3 4f 2c 9d f2 74 d2 f8 5f f4 83 28 83 83 7e 61 8f 8a 65 b1 2e 43 83 fc 70 b2 92 87 52 71 26 69 d4 a4 9f f4 ae 07 1c 91 93 73 56 83 a0 28 c7 9a d8 c2 18 3f d6 95 4b dc cd 1f fb 75 a2 91 3d 49 e8 6f 1f 56 01 58 e1 43 43 45 91 29 6c 57 f8 bb d4 9c 67 de 61 18 1f 2e 5a a1 ca 2d b7 29 05 60 92 92 b7 4e e3 5b 2d eb 1b d1 8c 26 b9 73 c7 01 8e 91 ea 5f 61 ac af a4 d3 71 71 e3 6d 78 30 05 74 0f 86 4c 41 9f 27 cb 7d 65 3d d0 bf 55 cb 0e 87 ba 8e 78 3a bc 82 4b 76 97 8f 19 00 49 4c c6 bc 66 dd 86 f8 53 9e 61 28 3c 5f 2d 59 4c 58 30 44 68 c8 d1 73 58 bc c5 f8 75 4a 85 21 30 17 fa 34 58 8c 66 db 16 e0 4e 13 a0 04 b6 b4 bc a0 94 e7 f2 3b 88 a9 7a b3 65 6c 2b 64 25 a2 1c b1 3d Data Ascii: Bk&;b{wk#BO,t_(~ae.CpRq&isV(?Ku=IoVXCCE)lWga.Z-)`N[-&s_aqqmx0tLA'}e=Ux:KvILfSa(<_-YLX0DhsXuJ!04XfN;zel+d%=
2024-11-12 04:19:36 UTC	16384	IN	Data Raw: 11 5c f0 98 e1 3a 3d 0b 97 da fe 38 44 fd ad b2 cc 46 e4 09 69 ac 52 6a ae 18 df 7d 20 a6 e7 8a c0 0c 98 a9 eb 98 0a 75 a5 74 e4 a5 0f a9 af af b7 65 40 9f 98 0d 5e 51 3b 43 47 1e 32 16 57 ff 3c 33 c1 23 00 77 21 0a 17 e4 41 2f 6c 17 b7 d6 48 ad 7c 6d d7 02 cf a6 1c df c4 8e 7c a7 74 e5 74 f0 b2 6d 0f 7e 88 40 a1 f6 d9 50 9d 0d 9d 7b 68 29 ed fe fd a8 3f d5 83 3c c7 69 70 df ff d8 74 b1 fd 1a aa 87 eb ca 65 bd 34 04 1d a7 ea 3d 1c b9 8f e8 aa 71 37 6f 9b 40 52 36 49 85 f3 07 32 0d c4 ec cb 5a 63 54 4f 7c 5e ad 5c 52 e2 7f dd d5 15 35 bc 3a ee 9c 8b 3f 30 d3 a4 88 dc 5f c5 a0 9e 9a 1f a7 11 cf 96 1f ed 1a da eb 18 93 d1 fc 26 ad b7 3c 25 a7 d5 b4 3b 11 09 d7 f1 28 eb 34 cf 47 d1 93 7a 58 d6 3e a7 55 f6 f8 ff c6 9e 2f e2 e8 24 f6 2b 20 70 9c 0d 91 3b 72 83 Data Ascii: \:=8DFiRj} ute@^Q;CG2W<3#w!A/lH\|m\|ttm~@P{h)?<ipte4=q7o@R6I2ZcTO\|^\R5:?0_&<%;(4GzX>U/$+ p;r
2024-11-12 04:19:36 UTC	16384	IN	Data Raw: da ab d0 9b ce a0 e7 44 f2 8d f8 8e 27 26 bc d4 55 c4 c7 57 89 99 ba aa 5c 7a 73 74 3d df 9b 35 b7 41 c2 fe 61 fd 7d 8e 56 8d d7 9c d0 c2 f3 69 45 6d f9 f4 34 59 f0 53 7d 0d b6 69 ef 13 ea c0 f5 04 b1 14 0a 41 84 f8 32 f8 ae c5 a3 2b 9b 8c eb 4a d6 95 b0 3f 5a b9 43 1d 74 ae 3a 7b 21 3a 0b 90 21 38 b5 46 1d 25 da 21 ce 4b 76 65 52 57 71 fc 81 2a 87 e8 8e e6 c7 39 19 db d7 c9 0c 25 af 0f 34 d3 27 75 e1 39 5c 03 8e fe a7 23 23 61 7d 46 a1 bd 3c 5f a9 a4 8d 20 5e e8 dd f9 d1 3b 64 c8 0f ea 9b 31 8a d7 eb b8 87 b8 11 f1 f7 b4 cc cf 64 6b 04 db f5 07 1f 6e 0a e0 9e 19 66 bb f2 8e a7 b5 6b e2 5a 53 0e ba 1c e5 29 23 3f 0d 4b 9e fe d4 8c a4 a6 77 a1 2e 1e e8 63 a2 a0 0b 8c da 1e 30 41 95 c5 f9 02 a0 19 bb a9 00 b8 f2 b8 14 24 9e bf c2 31 71 c5 98 53 41 40 4b d5 Data Ascii: D'&UW\zst=5Aa}ViEm4YS}iA2+J?ZCt:{!:!8F%!KveRWq*9%4'u9\##a}F<_ ^;d1dknfkZS)#?Kw.c0A$1qSA@K
2024-11-12 04:19:36 UTC	3778	IN	Data Raw: b7 fe 9c 15 7c 75 72 75 04 d3 d6 ec d0 40 77 00 4a 20 6a ed 28 57 d6 10 4f a4 09 78 aa 43 8f 74 e6 41 4e 89 cd d5 3c c6 e2 fb 5a 06 12 46 1e b9 38 51 08 73 7d 4f 89 ae fb 84 22 6e 87 57 b1 a5 6b b5 89 64 17 d3 79 c4 e6 b9 fb 4a 52 9a 81 18 c3 c7 4a eb 63 46 5b 10 2b 83 7e ef 80 70 33 fb 9a 87 f1 da 3c ed f3 27 3b 96 81 b1 7c ca ba 8a 94 16 84 6f 39 a9 ac f6 d4 18 37 79 4c 44 bf 14 f7 d9 90 42 b9 63 b5 cf 36 18 6d 02 b3 ca 5b ce 00 39 93 a7 5a 6f 8c 38 af 78 f8 67 e7 72 51 fa 34 7e 63 11 9d a2 b9 18 81 18 5f cd a7 82 f3 06 3a bc e3 d5 53 7d 3a c6 33 64 da c2 08 a3 4b f1 90 32 48 08 5c 46 3b 16 3b 43 4a dc a9 3d 70 3d 52 94 31 7f d7 41 a1 f9 1b 81 7d 8c 04 b4 ba 1b b7 77 e9 57 9e c3 53 3e 78 14 41 bc 87 f0 4e e7 d2 46 30 52 50 3f e3 ad 96 6a 1c 6d 00 04 a0 Data Ascii: \|uru@wJ j(WOxCtAN<ZF8Qs}O"nWkdyJRJcF[+~p3<';\|o97yLDBc6m[9Zo8xgrQ4~c_:S}:3dK2H\F;;CJ=p=R1A}wWS>xANF0RP?jm
2024-11-12 04:19:36 UTC	16384	IN	Data Raw: a2 d1 5e ee a2 f5 5f b0 14 1b 75 c4 25 31 c9 eb f9 19 3f 41 db d2 05 fe e1 67 bb c8 d6 2b 9a 3b 1f f9 2b ea 9d d4 5a d0 01 8f 97 fc 92 fe c8 4b 68 c0 ea a8 39 66 48 fc d4 19 83 6c 01 a5 db a9 19 6c 43 c9 d5 96 f3 5a a6 9b 69 c6 ae 32 53 f2 43 7e fb ea 43 4f fe 7e dd aa ff d0 5b dd cb 5d 23 dd 78 05 63 2a cf cf b5 dc e0 83 82 ac 34 52 ed 38 c5 78 c6 21 00 cc c3 19 f8 81 dc b4 8f b7 25 ee aa e5 ea 36 25 08 be 18 3d 51 47 85 fb ce f5 dc 8b 94 5a b3 a6 7c 76 2f aa 84 37 76 8c 97 e4 5b 24 2d 7a 35 ec 96 e6 a7 11 bd d6 64 32 e7 86 42 03 a2 63 be 05 df 70 bf 72 37 3f ad 30 3c 40 06 94 84 6e ce 3c 7e 4d c7 3d 59 2c 3e e9 34 2a e0 98 e3 b0 aa 2b b7 a7 00 d3 3d c3 38 2b cf b1 7c 58 c0 ee 35 95 7f 7a 0e f8 c0 35 bc b4 07 bf 6f 00 b0 d1 28 d4 69 7b 85 9d b8 88 56 40 Data Ascii: ^_u%1?Ag+;+ZKh9fHllCZi2SC~CO~[]#xc4R8x!%6%=QGZ\|v/7v[$-z5d2Bcpr7?0<@n<~M=Y,>4+=8+\|X5z5o(i{V@
2024-11-12 04:19:36 UTC	16384	IN	Data Raw: e4 a0 6a 15 a2 29 e4 79 d6 df 10 d1 70 e2 83 dc 5f 6b 1b 03 c1 51 57 96 f2 65 93 f2 5b ce 04 5a 5d 4d ca c2 d6 93 d5 3e 47 5a 35 1e ce 1b 4b a3 7f 41 64 ef 13 65 c5 db e8 73 64 fb 1d 64 16 af 65 1b 0c 5e 3a 1c b9 5a 5c dc 6a f9 a2 c1 dc 5d e4 ae bb 14 d0 6a 19 9e d5 46 4a f4 33 aa 7b dd 26 03 1f 8f 48 cb 33 88 15 a1 d2 2d 58 45 50 fd c4 a3 59 92 29 5a 89 90 f5 32 a7 61 43 a1 01 a3 54 22 12 76 c2 66 41 55 c9 cd a8 d5 5e a0 4f a5 aa 8c d5 7f 03 b2 24 b9 dd ff ad 87 96 72 b7 00 b8 37 62 57 76 e0 9c f5 f5 bf ea 44 08 8b ba 7c 9a e1 c4 28 d7 f2 05 a1 19 ef 7d ea 7b 79 b5 14 b2 ac 21 a5 84 57 19 a4 81 0a ff 44 1f a5 db 95 f6 1d cf 43 f9 b7 11 fb f4 1a 1e 1b ca a4 72 78 16 8f 7c 61 e1 da 92 7e 38 0d db 0d f5 95 b6 d2 f5 a1 3d f5 31 59 d8 82 75 27 e3 85 22 b4 71 Data Ascii: j)yp_kQWe[Z]M>GZ5KAdesdde^:Z\j]jFJ3{&H3-XEPY)Z2aCT"vfAU^O$r7bWvD\|(}{y!WDCrx\|a~8=1Yu'"q
2024-11-12 04:19:36 UTC	1024	IN	Data Raw: 77 05 44 38 8e a2 15 6d a6 39 55 17 0c ec d4 6d 6c 64 af ec 24 04 6b ce e6 e9 2d b1 e2 26 f9 83 46 a5 69 26 18 ab d8 f0 7d ed e7 e8 ea 92 9c c4 4d 70 f9 73 98 0a 5f 6a 36 81 4b ae 0f 04 c1 f5 16 80 43 4e 9b da 2a d9 f7 c7 1b 4b 38 7f d9 9a 94 37 da b9 dc dd 37 32 88 8c 69 a6 e1 5e 32 90 4a 1a bb 76 91 c9 e7 2a f5 7a 41 a4 be 2b c1 0e ba b2 fb 6f 68 d4 1c 5f 9e b6 cf 50 8e 28 ec bd 93 1a bf 8d 16 4e e9 23 03 45 69 3c ad 81 6a 2a aa 38 71 dc 46 21 4f e4 ee 64 bb bf 77 c2 a3 a2 95 cb db e7 b7 26 1c 61 f7 f5 ce b0 df 23 a6 11 ef 0f 0d e3 f4 fd ee 8e 43 9b 11 1e 88 af 8e 73 8b be 01 c1 a7 91 2d ef bb e4 c9 c4 9a 2f 43 0f e3 7f 39 9a 1c 3b 1d ab 0f 9f 76 95 57 fc a2 5a c4 42 21 ad 2d 8a 16 88 22 bb a1 9c 70 1f b6 da 77 75 50 d9 69 25 99 38 ff 9f 21 57 5c 41 93 Data Ascii: wD8m9Umld$k-&Fi&}Mps_j6KCNK8772i^2JvzA+oh_P(N#Ei<j*8qF!Odw&a#Cs-/C9;vWZB!-"pwuPi%8!W\A
2024-11-12 04:19:36 UTC	1024	IN	Data Raw: bb 62 83 5c 07 62 22 1a 7f 77 e2 dc ba 1c 85 09 6e c7 67 8c 70 47 a4 76 38 6c bc e0 41 e6 0d 1c 57 05 70 7d 9b ee ca df f9 5d 31 f6 64 a5 30 ac 4a c2 5d 46 2b d4 1d 2b 3c 3f 35 a7 6e 2d ea 57 1c 8b d6 f0 bd de 95 44 36 a5 14 0c e6 6d 9c 24 64 3c 33 50 8c c4 da fd 0c b9 35 07 2c b2 50 d1 97 cd 41 9b 40 03 58 1a 95 b0 f8 b2 5c 30 09 2c 7c f7 8e fc c8 9e 47 05 f4 b0 13 d6 e5 ea c9 c0 99 02 42 ff b3 c5 23 8a 19 23 66 25 3c e9 14 2f 64 bc d2 71 6f 33 5e e2 62 eb b6 b6 d0 0a e4 00 f8 70 82 1a 06 b5 88 4d a8 54 7f fe ba cb 12 9a 0d e5 fb db 69 c8 b3 9e 14 a3 b8 96 5b 8d 7f 40 47 4d 61 15 c8 82 63 f1 ce d6 cd 1e e4 46 4b 63 c2 20 e2 e2 ef a0 7a 1f ba 52 09 71 b0 a9 34 ca 8a 59 3a 8b 59 bd 11 6c 45 3a 32 35 b6 b6 5c bf 04 03 d8 46 86 d2 5d fb ef 4b c7 59 7a 29 8b Data Ascii: b\b"wngpGv8lAWp}]1d0J]F++<?5n-WD6m$d<3P5,PA@X\0,\|GB##f%</dqo3^bpMTi[@GMacFKc zRq4Y:YlE:25\F]KYz)
2024-11-12 04:19:36 UTC	16384	IN	Data Raw: df bb ca 28 08 f2 b2 d7 f6 69 25 8e 1f 0c 82 2b 12 ee 68 f9 85 b9 ee 5e a4 16 9b 15 5a b4 9d 1a de 14 b8 91 8b 6e ee 09 bc ff a4 7e b9 06 a9 0a 76 0e c7 00 4e d5 65 14 4c 1b b7 cb f8 0f 46 f7 58 48 09 c1 f3 5e 3e 4e e4 6f bc b9 51 04 c1 76 63 02 69 7b 7b bf 23 89 b9 09 ad b9 ea cf a7 ef a7 4c 99 66 87 60 8e 4a f5 f1 6e 11 e8 3a 75 e9 85 b1 31 67 c6 b1 70 ac 55 3e bd d6 02 b5 1c f7 23 8d 32 73 fb 8b ba 9b ca 0e 90 3f 9c c7 c9 22 6f da ae af 22 13 84 2d 81 b9 00 5f 9f 29 34 ea bd 2b e5 a5 39 29 e7 9e a7 50 25 29 0b c9 6d ee 2d d9 da 81 75 4e 9e 0b 8f 3c e4 71 12 cd 02 c5 4f 02 62 2a 52 5d 0b 6a e7 4c d6 8e 19 38 ce 2a eb 18 86 93 f7 13 ed 2d 86 5b 61 69 51 12 5b af 64 b8 a3 d8 66 95 0e ba 14 30 f3 52 24 0c 37 79 57 c1 04 df 21 8d d8 b7 a5 b7 10 18 18 02 98 Data Ascii: (i%+h^Zn~vNeLFXH^>NoQvci{{#Lf`Jn:u1gpU>#2s?"o"-_)4+9)P%)m-uN<qObR]jL8-[aiQ[df0R$7yW!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49831	104.18.29.72	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	635	OUT	OPTIONS /getWallets?page=1&entries=4 HTTP/1.1 Host: api.web3modal.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-project-id,x-sdk-type,x-sdk-version Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	455	IN	HTTP/1.1 204 Not Found Date: Tue, 12 Nov 2024 04:19:36 GMT Connection: close Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Vary: Origin, Access-Control-Request-Headers Access-Control-Allow-Headers: x-project-id,x-sdk-version,x-sdk-type Access-Control-Allow-Methods: OPTIONS,GET,POST,PUT,PATCH,DELETE Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 8e13b9890fb5e85f-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49829	104.21.30.157	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	374	OUT	GET /crowdswap-widget.js?1730283708 HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	1078	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"6ce979505a0cdcd7ca55597e6702e2f7" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZRzs43eoBVBb2uFLatOknBdKQWvO8pBArhMcJKG45BpnBSxIs4XdTBg9Vy0SYw1Bg4PdpzAzVgbDv7bSZX1wcEm28tzPFxflyUiBwF8HBgtIMUHcurotBjVRaFGTtQmJfKSa8VkDsA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: REVALIDATED Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b9890d272cc6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1314&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=952&delivery_rate=2146775&cwnd=251&unsent_bytes=0&cid=6a8c8f0dc7c62bc9&ts=345&x=0"
2024-11-12 04:19:36 UTC	291	IN	Data Raw: 37 63 32 37 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 67 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3d 76 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 76 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 67 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 67 2c 72 2e 61 6d 64 4f 3d 7b 7d 2c 65 3d 5b 5d 2c 72 2e 4f 3d 28 6e 2c 74 2c 69 2c 66 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 Data Ascii: 7c27(()=>{"use strict";var e,g={},v={};function r(e){var n=v[e];if(void 0!==n)return n.exports;var t=v[e]={id:e,loaded:!1,exports:{}};return g[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=g,r.amdO={},e=[],r.O=(n,t,i,f)=>{if(!t){var a=1/0;f
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 5d 3d 65 5b 6f 5d 2c 63 3d 21 30 2c 64 3d 30 3b 64 3c 74 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 28 21 31 26 66 7c 7c 61 3e 3d 66 29 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 72 2e 4f 29 2e 65 76 65 72 79 28 62 3d 3e 72 2e 4f 5b 62 5d 28 74 5b 64 5d 29 29 3f 74 2e 73 70 6c 69 63 65 28 64 2d 2d 2c 31 29 3a 28 63 3d 21 31 2c 66 3c 61 26 26 28 61 3d 66 29 29 3b 69 66 28 63 29 7b 65 2e 73 70 6c 69 63 65 28 6f 2d 2d 2c 31 29 3b 76 61 72 20 75 3d 69 28 29 3b 76 6f 69 64 20 30 21 3d 3d 75 26 26 28 6e 3d 75 29 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 3d 66 7c 7c 30 3b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3e 30 26 26 65 5b 6f 2d 31 5d 5b 32 5d 3e 66 3b 6f 2d 2d 29 65 5b 6f 5d 3d 65 5b 6f 2d 31 5d 3b 65 5b 6f 5d 3d 5b 74 2c 69 2c 66 5d 7d 2c 72 2e 6e Data Ascii: ]=e[o],c=!0,d=0;d<t.length;d++)(!1&f\|\|a>=f)&&Object.keys(r.O).every(b=>r.O[b](t[d]))?t.splice(d--,1):(c=!1,f<a&&(a=f));if(c){e.splice(o--,1);var u=i();void 0!==u&&(n=u)}}return n}f=f\|\|0;for(var o=e.length;o>0&&e[o-1][2]>f;o--)e[o]=e[o-1];e[o]=[t,i,f]},r.n
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 32 30 2c 72 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 72 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 6e 2b 66 29 2c 61 2e 73 72 63 3d 72 2e 74 75 28 74 29 29 2c 65 5b 74 5d 3d 5b 69 5d 3b 76 61 72 20 6c 3d 28 5f 2c 62 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 70 29 3b 76 61 72 20 68 3d 65 5b 74 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 74 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 2c 68 26 26 68 2e 66 6f 72 45 61 63 68 28 79 3d 3e 79 28 62 29 29 2c 5f 29 72 65 74 75 72 6e 20 5f 28 62 29 7d Data Ascii: 20,r.nc&&a.setAttribute("nonce",r.nc),a.setAttribute("data-webpack",n+f),a.src=r.tu(t)),e[t]=[i];var l=(_,b)=>{a.onerror=a.onload=null,clearTimeout(p);var h=e[t];if(delete e[t],a.parentNode&&a.parentNode.removeChild(a),h&&h.forEach(y=>y(b)),_)return _(b)}
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 65 5b 70 5d 29 29 7b 66 6f 72 28 64 20 69 6e 20 61 29 72 2e 6f 28 61 2c 64 29 26 26 28 72 2e 6d 5b 64 5d 3d 61 5b 64 5d 29 3b 69 66 28 63 29 76 61 72 20 6c 3d 63 28 72 29 7d 66 6f 72 28 69 26 26 69 28 66 29 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 72 2e 6f 28 65 2c 75 3d 6f 5b 73 5d 29 26 26 65 5b 75 5d 26 26 65 5b 75 5d 5b 30 5d 28 29 2c 65 5b 75 5d 3d 30 3b 72 65 74 75 72 6e 20 72 2e 4f 28 6c 29 7d 2c 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 72 6f 77 64 73 77 61 70 5f 77 69 64 67 65 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 63 72 6f 77 64 73 77 61 70 5f 77 69 64 67 65 74 7c 7c 5b 5d 3b 74 2e 66 6f 72 45 61 63 68 28 6e 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 74 2e 70 75 73 68 3d 6e 2e 62 69 6e 64 28 6e 75 6c Data Ascii: e[p])){for(d in a)r.o(a,d)&&(r.m[d]=a[d]);if(c)var l=c(r)}for(i&&i(f);s<o.length;s++)r.o(e,u=o[s])&&e[u]&&e[u][0](),e[u]=0;return r.O(l)},t=self.webpackChunkcrowdswap_widget=self.webpackChunkcrowdswap_widget\|\|[];t.forEach(n.bind(null,0)),t.push=n.bind(nul
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 6a 6f 69 6e 28 22 22 29 7d 3b 66 6f 72 28 76 61 72 20 5a 3d 5b 5d 2c 50 3d 5b 5d 2c 75 74 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3c 22 75 22 3f 55 69 6e 74 38 41 72 72 61 79 3a 41 72 72 61 79 2c 61 74 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 22 2c 7a 3d 30 3b 7a 3c 36 34 3b 2b 2b 7a 29 5a 5b 7a 5d 3d 61 74 5b 7a 5d 2c 50 5b 61 74 2e 63 68 61 72 43 6f 64 65 41 74 28 7a 29 5d 3d 7a 3b 66 75 6e 63 74 69 6f 6e 20 46 28 6b 29 7b 76 61 72 20 54 3d 6b 2e 6c 65 6e 67 74 68 3b 69 66 28 54 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 69 6e 67 Data Ascii: join("")};for(var Z=[],P=[],ut=typeof Uint8Array<"u"?Uint8Array:Array,at="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",z=0;z<64;++z)Z[z]=at[z],P[at.charCodeAt(z)]=z;function F(k){var T=k.length;if(T%4>0)throw new Error("Invalid string
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 74 29 3b 63 6f 6e 73 74 20 65 3d 30 7c 5f 74 28 6e 2c 74 29 3b 6c 65 74 20 72 3d 46 28 65 29 3b 63 6f 6e 73 74 20 69 3d 72 2e 77 72 69 74 65 28 6e 2c 74 29 3b 72 65 74 75 72 6e 20 69 21 3d 3d 65 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 30 2c 69 29 29 2c 72 7d 28 6e 2c 74 29 3b 69 66 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 6e 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 54 28 6e 29 7b 69 66 28 6f 28 6e 2c 55 69 6e 74 38 41 72 72 61 79 29 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6e 29 3b 72 65 74 75 72 6e 20 52 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 7d 72 65 74 75 72 6e 20 6b 28 6e 29 Data Ascii: wn encoding: "+t);const e=0\|_t(n,t);let r=F(e);const i=r.write(n,t);return i!==e&&(r=r.slice(0,i)),r}(n,t);if(ArrayBuffer.isView(n))return function T(n){if(o(n,Uint8Array)){const t=new Uint8Array(n);return R(t.buffer,t.byteOffset,t.byteLength)}return k(n)
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 74 20 6d 75 73 74 20 62 65 20 6f 66 20 74 79 70 65 20 6e 75 6d 62 65 72 27 29 3b 69 66 28 6e 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 27 54 68 65 20 76 61 6c 75 65 20 22 27 2b 6e 2b 27 22 20 69 73 20 69 6e 76 61 6c 69 64 20 66 6f 72 20 6f 70 74 69 6f 6e 20 22 73 69 7a 65 22 27 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 6e 29 7b 72 65 74 75 72 6e 20 63 74 28 6e 29 2c 46 28 6e 3c 30 3f 30 3a 30 7c 64 74 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 6e 29 7b 63 6f 6e 73 74 20 74 3d 6e 2e 6c 65 6e 67 74 68 3c 30 3f 30 3a 30 7c 64 74 28 6e 2e 6c 65 6e 67 74 68 29 2c 65 3d 46 28 74 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 74 3b 72 2b 3d 31 29 65 5b 72 5d 3d 32 35 35 26 6e 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 Data Ascii: t must be of type number');if(n<0)throw new RangeError('The value "'+n+'" is invalid for option "size"')}function K(n){return ct(n),F(n<0?0:0\|dt(n))}function k(n){const t=n.length<0?0:0\|dt(n.length),e=F(t);for(let r=0;r<t;r+=1)e[r]=255&n[r];return e}funct
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 20 50 74 28 6e 2c 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 69 66 28 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3c 30 29 26 26 28 74 3d 30 29 2c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 7c 7c 28 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 65 3c 3d 30 29 7c 7c 28 65 3e 3e 3e 3d 30 29 3c 3d 28 74 3e 3e 3e 3d 30 29 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 6e 7c 7c 28 6e 3d 22 75 74 66 38 22 29 3b 3b 29 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 75 65 28 74 68 69 73 2c 74 2c 65 29 3b 63 61 73 65 22 75 74 66 38 22 3a 63 61 73 65 22 75 74 66 2d 38 22 3a 72 65 74 75 72 6e 20 62 74 28 74 68 69 73 2c 74 2c 65 29 3b 63 61 73 65 22 61 73 63 Data Ascii: Pt(n,t,e){let r=!1;if((void 0===t\|\|t<0)&&(t=0),t>this.length\|\|((void 0===e\|\|e>this.length)&&(e=this.length),e<=0)\|\|(e>>>=0)<=(t>>>=0))return"";for(n\|\|(n="utf8");;)switch(n){case"hex":return ue(this,t,e);case"utf8":case"utf-8":return bt(this,t,e);case"asc
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 78 28 41 2c 4f 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 63 3f 41 5b 4f 5d 3a 41 2e 72 65 61 64 55 49 6e 74 31 36 42 45 28 4f 2a 63 29 7d 69 66 28 69 29 7b 6c 65 74 20 41 3d 2d 31 3b 66 6f 72 28 76 3d 65 3b 76 3c 6c 3b 76 2b 2b 29 69 66 28 78 28 6e 2c 76 29 3d 3d 3d 78 28 74 2c 2d 31 3d 3d 3d 41 3f 30 3a 76 2d 41 29 29 7b 69 66 28 2d 31 3d 3d 3d 41 26 26 28 41 3d 76 29 2c 76 2d 41 2b 31 3d 3d 3d 67 29 72 65 74 75 72 6e 20 41 2a 63 7d 65 6c 73 65 2d 31 21 3d 3d 41 26 26 28 76 2d 3d 76 2d 41 29 2c 41 3d 2d 31 7d 65 6c 73 65 20 66 6f 72 28 65 2b 67 3e 6c 26 26 28 65 3d 6c 2d 67 29 2c 76 3d 65 3b 76 3e 3d 30 3b 76 2d 2d 29 7b 6c 65 74 20 41 3d 21 30 3b 66 6f 72 28 6c 65 74 20 4f 3d 30 3b 4f 3c 67 3b 4f 2b 2b 29 69 66 28 78 28 6e 2c 76 2b Data Ascii: unction x(A,O){return 1===c?A[O]:A.readUInt16BE(Oc)}if(i){let A=-1;for(v=e;v<l;v++)if(x(n,v)===x(t,-1===A?0:v-A)){if(-1===A&&(A=v),v-A+1===g)return Ac}else-1!==A&&(v-=v-A),A=-1}else for(e+g>l&&(e=l-g),v=e;v>=0;v--){let A=!0;for(let O=0;O<g;O++)if(x(n,v+
2024-11-12 04:19:36 UTC	1369	IN	Data Raw: 37 33 34 33 29 26 26 28 6c 3d 4f 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 78 3d 6e 5b 69 2b 31 5d 2c 76 3d 6e 5b 69 2b 32 5d 2c 41 3d 6e 5b 69 2b 33 5d 2c 31 32 38 3d 3d 28 31 39 32 26 78 29 26 26 31 32 38 3d 3d 28 31 39 32 26 76 29 26 26 31 32 38 3d 3d 28 31 39 32 26 41 29 26 26 28 4f 3d 28 31 35 26 63 29 3c 3c 31 38 7c 28 36 33 26 78 29 3c 3c 31 32 7c 28 36 33 26 76 29 3c 3c 36 7c 36 33 26 41 2c 4f 3e 36 35 35 33 35 26 26 4f 3c 31 31 31 34 31 31 32 26 26 28 6c 3d 4f 29 29 7d 7d 6e 75 6c 6c 3d 3d 3d 6c 3f 28 6c 3d 36 35 35 33 33 2c 67 3d 31 29 3a 6c 3e 36 35 35 33 35 26 26 28 6c 2d 3d 36 35 35 33 36 2c 72 2e 70 75 73 68 28 6c 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 6c 3d 35 36 33 32 30 7c 31 30 32 33 26 6c 29 2c 72 2e 70 75 73 68 28 Data Ascii: 7343)&&(l=O));break;case 4:x=n[i+1],v=n[i+2],A=n[i+3],128==(192&x)&&128==(192&v)&&128==(192&A)&&(O=(15&c)<<18\|(63&x)<<12\|(63&v)<<6\|63&A,O>65535&&O<1114112&&(l=O))}}null===l?(l=65533,g=1):l>65535&&(l-=65536,r.push(l>>>10&1023\|55296),l=56320\|1023&l),r.push(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49832	216.239.32.181	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	1396	OUT	POST /g/collect?v=2&tid=G-EHZSQKTF1P&gtm=45je4bb0v9116426356za200zb71480359&_p=1731385163337&gcd=13l3l3l3l1l1&npa=0&dma=0&cid=752911800.1731385168&ecid=477598349&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1731385168&sct=1&seg=0&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&dt=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&en=scroll&epn.percent_scrolled=90&_et=52&tfd=13069 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	874	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Date: Tue, 12 Nov 2024 04:19:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49830	104.18.29.72	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	626	OUT	OPTIONS /getAnalyticsConfig HTTP/1.1 Host: api.web3modal.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-project-id,x-sdk-type,x-sdk-version Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	455	IN	HTTP/1.1 204 Not Found Date: Tue, 12 Nov 2024 04:19:36 GMT Connection: close Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Vary: Origin, Access-Control-Request-Headers Access-Control-Allow-Headers: x-project-id,x-sdk-version,x-sdk-type Access-Control-Allow-Methods: OPTIONS,GET,POST,PUT,PATCH,DELETE Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 8e13b9892e7c6b55-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49828	74.125.133.155	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	912	OUT	POST /g/collect?v=2&tid=G-EHZSQKTF1P&cid=752911800.1731385168&gtm=45je4bb0v9116426356z871480359za200zb71480359&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-11-12 04:19:36 UTC	874	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Date: Tue, 12 Nov 2024 04:19:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49834	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	820	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 11001 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	11001	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 33 38 61 39 61 37 62 32 62 37 35 36 34 30 61 37 62 39 64 66 32 34 63 35 62 34 37 64 39 37 62 39 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 33 35 2e 32 33 35 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 76 33 2e 31 2e 35 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 62 64 61 32 32 65 33 34 39 63 61 63 34 66 63 32 39 63 34 35 61 66 31 61 34 31 39 39 64 66 34 61 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 63 Data Ascii: {"event_id":"38a9a7b2b75640a7b9df24c5b47d97b9","sent_at":"2024-11-12T04:19:35.235Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"},"trace":{"environment":"prod","release":"v3.1.5","public_key":"bda22e349cac4fc29c45af1a4199df4a","trace_id":"ac
2024-11-12 04:19:36 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:36 GMT Content-Type: application/json Content-Length: 41 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:36 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 33 38 61 39 61 37 62 32 62 37 35 36 34 30 61 37 62 39 64 66 32 34 63 35 62 34 37 64 39 37 62 39 22 7d Data Ascii: {"id":"38a9a7b2b75640a7b9df24c5b47d97b9"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49833	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:36 UTC	349	OUT	GET /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:36 UTC	299	IN	HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 content-length: 152 vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:36 GMT connection: close
2024-11-12 04:19:36 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 65 73 73 69 6f 6e 73 2f 70 69 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /sessions/ping</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49841	104.18.29.72	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	715	OUT	GET /getAnalyticsConfig HTTP/1.1 Host: api.web3modal.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-sdk-version: html-wagmi-undefined x-sdk-type: w3m sec-ch-ua-mobile: ?0 x-project-id: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:37 UTC	368	IN	HTTP/1.1 403 Forbidden Date: Tue, 12 Nov 2024 04:19:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 9 Connection: close Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Cache-Control: public, max-age=300, s-maxage=300 Vary: Origin Server: cloudflare CF-RAY: 8e13b98dfcc7144c-DFW alt-svc: h3=":443"; ma=86400
2024-11-12 04:19:37 UTC	9	IN	Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49842	104.18.29.72	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	724	OUT	GET /getWallets?page=1&entries=4 HTTP/1.1 Host: api.web3modal.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-sdk-version: html-wagmi-undefined x-sdk-type: w3m sec-ch-ua-mobile: ?0 x-project-id: User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:37 UTC	368	IN	HTTP/1.1 403 Forbidden Date: Tue, 12 Nov 2024 04:19:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 9 Connection: close Access-Control-Allow-Origin: https://secure_sharing0documentpreview.wesendit.com Cache-Control: public, max-age=300, s-maxage=300 Vary: Origin Server: cloudflare CF-RAY: 8e13b98e1e672cc7-DFW alt-svc: h3=":443"; ma=86400
2024-11-12 04:19:37 UTC	9	IN	Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49839	3.126.198.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	681	OUT	GET /web2/api/users/public/advertisement-backgrounds HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:37 UTC	480	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:37 GMT Content-Type: application/json Content-Length: 2 Connection: close apigw-requestid: BHaWCjniliAEJxA= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2 access-control-allow-origin: *
2024-11-12 04:19:37 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49838	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	1541	OUT	GET /static/media/OpenSans-Bold.45847e90261782dc01a6.ttf HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://secure_sharing0documentpreview.wesendit.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://secure_sharing0documentpreview.wesendit.com/static/css/main.55b776a0.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:37 UTC	1980	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: binary/octet-stream Content-Length: 130864 Connection: close Date: Tue, 12 Nov 2024 04:19:38 GMT Last-Modified: Tue, 15 Oct 2024 09:39:36 GMT Etag: "5112859ee40a5dfa527b3b4068ccd74d" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Access-Control-Allow-Origin: Access-Control-Expose-Headers: * Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:50769 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: AxpQiRN6AVA3R6BzbYe-nHGI_b-vI0N_-HN_n13AfyD07Lg0fJzT2A==
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 47 44 45 46 af b3 b5 55 00 00 03 70 00 00 01 c2 47 50 4f 53 ae 8f 3a 3e 00 00 76 54 00 00 37 a8 47 53 55 42 13 63 1f 65 00 00 1e 7c 00 00 0f 06 4f 53 2f 32 97 6c 83 0c 00 00 02 14 00 00 00 60 53 54 41 54 5e fd 41 a5 00 00 01 b8 00 00 00 5a 63 6d 61 70 c3 38 1f 80 00 00 07 d4 00 00 03 f6 63 76 74 20 3d 49 2c c8 00 00 02 74 00 00 00 fc 66 70 67 6d e2 19 9e 5a 00 00 2d 84 00 00 0f 94 67 61 73 70 00 15 00 23 00 00 01 2c 00 00 00 10 67 6c 79 66 6b 68 e1 a5 00 00 ad fc 00 01 51 32 68 65 61 64 1b ff 34 b6 00 00 01 80 00 00 00 36 68 68 65 61 0e 29 09 97 00 00 01 5c 00 00 00 24 68 6d 74 78 d0 f9 0d 88 00 00 3d 18 00 00 11 ce 6c 6f 63 61 be 82 6c 3b 00 00 0b cc 00 00 08 ea 6d 61 78 70 07 fb 10 a5 00 00 01 3c 00 00 00 20 6e 61 6d Data Ascii: GDEFUpGPOS:>vT7GSUBce\|OS/2l`STAT^AZcmap8cvt =I,tfpgmZ-gasp#,glyfkhQ2head46hhea)\$hmtx=local;maxp< nam
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 04 f4 00 5c 05 42 00 9a 05 42 00 9a 05 42 00 9a 05 42 00 9a 04 8d 00 00 05 10 00 a0 04 8d 00 00 05 85 00 00 04 d5 00 56 05 85 00 00 04 d5 00 56 05 85 00 00 04 d5 00 56 05 19 00 77 04 1d 00 5c 05 19 00 77 04 1d 00 5c 05 19 00 77 04 1d 00 5c 05 19 00 77 04 1d 00 5c 05 ec 00 b8 05 10 00 5c 05 ec 00 2f 05 31 00 5c 04 7b 00 b8 04 ba 00 5c 04 7b 00 b8 04 ba 00 5c 04 7b 00 b8 04 ba 00 5c 04 7b 00 b8 04 ba 00 5c 04 7b 00 b8 04 ba 00 5c 05 cb 00 77 04 85 00 06 05 cb 00 77 04 85 00 06 05 cb 00 77 04 85 00 06 05 cb 00 77 04 85 00 06 06 1f 00 b8 05 42 ff 8d 06 1f 00 00 05 42 00 04 02 a6 ff b6 02 71 ff 9a 02 a6 00 00 02 71 ff e8 02 a6 ff cb 02 71 ff b6 02 a6 00 87 02 71 00 5c 02 a6 00 ae 05 4c 00 b8 04 e1 00 93 02 a6 ff 68 02 71 ff 7d 05 50 00 b8 04 f6 00 a0 04 f6 00 Data Ascii: \BBBBVVVw\w\w\w\\/1\{\{\{\{\{\wwwwBBqqqq\Lhq}P
2024-11-12 04:19:37 UTC	1585	IN	Data Raw: 2b 82 00 00 00 00 00 00 2e 8e 2e 28 00 00 00 00 00 00 2b 7c 2c 78 00 00 00 00 00 00 2b 76 2c 78 00 00 00 00 00 00 2b 70 2c 78 00 00 00 00 00 00 2e 76 2b 6a 00 00 00 00 00 00 2b 64 2b 5e 00 00 00 00 00 00 2b 58 30 3e 00 00 00 00 00 00 2c 7e 2e 64 00 00 00 00 00 00 30 32 2b 52 00 00 00 00 00 00 2e 5e 2b 4c 00 00 00 00 00 00 2e 1c 2e 58 00 00 00 00 00 00 2b 46 30 1a 00 00 00 00 00 00 2b 40 2e 4c 00 00 00 00 00 00 30 20 2b 3a 00 00 00 00 00 00 2e 76 2b 34 00 00 00 00 00 00 30 20 30 1a 00 00 00 00 00 00 2e 76 2e 4c 00 00 00 00 00 00 30 20 30 1a 00 00 00 00 00 00 2e 76 2e 4c 00 00 00 00 00 00 30 20 30 1a 00 00 00 00 00 00 2e 76 2e 4c 00 00 00 00 00 00 2b 2e 2f f0 00 00 00 00 00 00 2c 48 2e 28 00 00 00 00 00 00 2f f6 2b 28 00 00 00 00 00 00 2e 2e 2b 22 00 00 00 Data Ascii: +..(+\|,x+v,x+p,x.v+j+d+^+X0>,~.d02+R.^+L..X+F0+@.L0 +:.v+40 0.v.L0 0.v.L0 0.v.L+./,H.(/+(..+"
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 00 00 00 28 2e 28 28 00 00 00 00 00 00 28 22 29 90 00 00 00 00 00 00 28 1c 30 d4 00 00 00 00 00 00 2f a2 2f 9c 00 00 00 00 00 00 30 50 28 16 00 00 00 00 00 00 29 c6 29 c0 00 00 00 00 00 00 28 10 28 0a 00 00 00 00 00 00 28 2e 28 28 00 00 00 00 00 00 28 04 29 96 00 00 00 00 00 00 27 fe 27 f8 00 00 00 00 00 00 29 78 27 f2 00 00 00 00 00 00 30 ec 30 e6 00 00 00 00 00 00 27 ec 27 e6 00 00 00 00 00 00 30 da 30 d4 00 00 00 00 00 00 2f 66 29 90 00 00 00 00 00 00 27 e0 27 da 00 00 00 00 00 00 30 9e 30 98 00 00 00 00 00 00 29 ba 29 b4 00 00 00 00 00 00 27 d4 27 ce 00 00 00 00 00 00 27 c8 27 c2 00 00 00 00 00 00 27 bc 27 c2 00 00 00 00 00 00 29 f0 29 96 00 00 00 00 00 00 29 78 29 72 00 00 00 00 00 00 30 08 30 02 00 00 00 00 00 00 30 68 30 62 00 00 00 00 00 00 2f e4 Data Ascii: (.(((")(0//0P())(((.((()'')x'00''00/f)''00))'''''')))x)r000h0b/
2024-11-12 04:19:37 UTC	2452	IN	Data Raw: 72 02 08 08 01 08 72 00 2b 32 11 33 2b 32 11 33 30 31 61 21 35 01 21 11 21 15 01 21 04 71 fb c0 02 bd fd 56 04 1a fd 44 02 cf c9 03 ed 01 00 c8 fc 12 00 00 01 00 8f fe bc 02 73 05 b6 00 07 00 0e b5 05 02 02 72 06 01 00 2f 33 2b 32 30 31 41 21 11 21 15 23 11 33 02 73 fe 1c 01 e4 e0 e0 fe bc 06 fa d3 fa ac 00 00 01 00 0c 00 00 03 42 05 b6 00 03 00 0c b5 03 02 72 01 08 72 00 2b 2b 30 31 41 01 21 01 01 21 02 21 fe eb fd df 05 b6 fa 4a 05 b6 00 01 00 33 fe bc 02 17 05 b6 00 07 00 0e b5 00 07 03 04 02 72 00 2b 32 2f 33 30 31 57 33 11 23 35 21 11 21 33 df df 01 e4 fe 1c 71 05 54 d3 f9 06 00 00 01 00 2f 02 08 04 64 05 be 00 06 00 0e b5 05 04 00 01 11 72 00 2b cd 32 39 30 31 53 01 33 01 23 01 01 2f 01 b6 90 01 ef ef fe be fe e8 02 08 03 b6 fc 4a 02 83 fd 7d 00 01 Data Ascii: rr+23+2301a!5!!!qVDsr/3+201A!!#3sBrr++01A!!!J3r+2/301W3#5!!3qT/dr+2901S3#/J}
2024-11-12 04:19:37 UTC	15980	IN	Data Raw: 15 06 72 13 12 1f 1f 0f 07 72 04 05 17 17 08 0b 72 00 2b 32 11 33 33 2b 32 11 33 33 2b 2b 30 31 41 11 34 36 37 23 06 06 23 22 02 11 34 12 36 33 32 16 17 33 37 21 11 01 32 36 36 37 35 34 26 23 22 06 15 14 16 03 3f 07 06 0d 2b 97 7b bd e9 6c c1 7f 7b 99 30 08 1b 01 02 fd fe 54 63 2c 02 64 86 6d 6a 6c fe 14 01 d5 2a 55 29 45 60 01 25 01 1c bf 01 03 84 5f 45 8f f9 b6 02 c7 42 85 64 25 a3 ad ae a4 a7 a7 00 00 01 00 a0 00 00 03 77 04 73 00 15 00 19 40 0d 0f 06 72 0e 0a 72 12 11 07 07 00 07 72 00 2b 32 11 33 33 2b 2b 30 31 41 32 16 17 03 26 26 23 22 0e 02 15 11 21 11 33 17 33 3e 02 03 10 17 3d 13 17 0f 37 14 3b 6f 58 33 fe cf e7 2d 0f 21 63 7f 04 73 05 04 fe e2 05 05 1e 43 6d 4f fd c7 04 5e bc 39 5f 39 00 01 00 5c ff ec 03 ac 04 73 00 2a 00 1a 40 0e 0e 12 27 16 Data Ascii: rrr+233+233++01A467##"463237!266754&#"?+{l{0Tc,dmjlU)E`%_EBd%ws@rrr+233++01A2&&#"!33>=7;oX3-!csCmO^9_9\s@'
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 14 00 0b 00 0c b4 00 0f 06 01 06 00 2f 5d 33 30 31 53 32 16 15 14 06 23 22 26 35 34 36 f8 44 62 62 44 45 61 61 06 14 3f 56 55 41 41 55 56 3f 00 02 00 52 04 d7 02 48 06 b2 00 0b 00 17 00 0e b4 12 06 c0 0c 00 00 2f 32 1a cc 32 30 31 41 22 26 35 34 36 33 32 16 15 14 06 27 32 36 35 34 26 23 22 06 15 14 16 01 4a 6f 89 89 6f 6a 94 93 6b 29 37 37 29 2a 37 31 04 d7 7f 6f 6e 7f 7e 6d 70 80 8d 34 2d 2c 34 34 2c 2d 34 00 01 00 52 fe 14 01 e7 00 23 00 14 00 0e b4 03 0a c0 12 11 00 2f 33 1a cc 32 30 31 45 14 16 33 32 36 37 15 06 06 23 22 26 35 34 36 36 37 17 06 06 01 25 2d 23 20 3f 13 20 4a 31 73 87 3c 66 3f 85 45 4e e3 2a 28 0c 06 b2 09 0e 81 65 3c 6d 5d 23 23 42 6d 00 01 00 52 04 d7 03 8f 06 0e 00 19 00 1d 40 0d 16 0d 0d 05 11 80 19 19 0a 0f 11 01 11 00 2f 5d 33 33 Data Ascii: /]301S2#"&546DbbDEaa?VUAAUV?RH/2201A"&54632'2654&#"Joojk)77)71on~mp4-,44,-4R#/3201E3267#"&54667%-# ? J1s<f?EN(e<m]##BmR@/]33
2024-11-12 04:19:37 UTC	1024	IN	Data Raw: 22 25 62 54 73 97 02 3b 14 32 2b 1d 2e 2e 1d 2a 31 00 05 00 3b ff ec 06 d3 05 c9 00 03 00 2d 00 3b 00 54 00 60 00 39 40 1e 34 35 43 4f 55 05 5b 49 3c 2e 03 03 3c 0d 72 28 27 14 14 11 11 0b 04 21 1a 01 01 21 05 72 00 2b 32 2f 32 10 cc 32 39 2f 33 12 39 39 2b 32 2f 32 10 cc 32 17 39 30 31 61 01 33 01 01 22 26 27 35 16 16 33 32 36 35 34 26 23 23 35 33 32 36 35 34 26 23 22 06 07 27 36 36 33 32 16 15 14 06 07 15 16 16 15 14 06 01 32 36 35 34 26 27 27 0e 02 15 14 16 17 22 26 35 34 36 36 37 26 26 35 34 36 33 32 16 15 14 06 07 16 16 15 14 06 03 36 36 35 34 26 23 22 06 15 14 16 01 6f 03 2b ef fc d5 fe ee 4c 84 41 42 84 49 4a 45 45 61 70 5c 68 3c 32 33 2f 54 39 65 3e 97 67 7d a4 51 59 65 61 b0 03 73 3b 3c 40 39 0d 1f 2d 18 3a 3d a7 b1 2c 48 2a 36 49 b8 81 81 b4 53 Data Ascii: "%bTs;2+..1;-;T`9@45COU[I<.<r('!!r+2/229/399+2/22901a3"&'532654&##532654&#"'66322654&''"&54667&&546326654&#"o+LABIJEEap\h<23/T9e>g}QYeas;<@9-:=,H6IS
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 36 6f 72 31 43 62 3f 1e 2f 35 38 61 4e 39 0f 0d 4f 05 cb 5d 9e ca 6e 7e fe f8 f4 c1 71 78 c0 6b 49 ac aa 8c 54 37 2b 08 16 07 55 72 39 3c 33 01 0f 1d 28 15 fd 60 56 87 96 41 48 50 4f 88 ae 5f 34 34 00 ff ff 00 39 00 00 05 0a 05 bc 06 06 01 61 00 00 00 01 00 a6 fe 37 05 48 05 b6 00 07 00 0e b5 06 01 02 72 04 00 00 2f 32 2b 32 30 31 53 11 21 11 21 11 21 11 a6 04 a2 fe c2 fd d9 fe 37 07 7f f8 81 06 7d f9 83 00 00 01 00 29 fe 37 05 02 05 b6 00 0b 00 1d 40 0d 03 07 07 08 02 00 04 02 72 01 09 09 00 00 2f 32 11 33 2b 12 39 39 33 11 33 30 31 53 35 01 01 35 21 15 21 01 01 21 15 29 02 3f fd d1 04 8e fd 0c 01 ee fd f9 03 48 fe 37 aa 03 42 02 ed a6 fc fd 6f fd 0c fe 00 01 00 58 02 64 04 39 03 3f 00 03 00 08 b1 01 00 00 2f 32 30 31 53 35 21 15 58 03 e1 02 64 db db 00 Data Ascii: 6or1Cb?/58aN9O]n~qxkIT7+Ur9<3(`VAHPO_449a7Hr/2+201S!!!7})7@r/23+993301S55!!!)?H7BoXd9?/201S5!Xd
2024-11-12 04:19:38 UTC	16384	IN	Data Raw: 01 eb fe 06 72 eb 00 00 01 00 10 fe 56 06 8b 05 b6 00 21 00 19 40 0d 07 20 02 72 17 10 09 72 02 00 05 08 72 00 2b 32 cc 2b 32 2b 32 30 31 41 21 03 21 13 21 11 21 0e 03 07 0e 02 23 22 26 27 35 16 16 33 32 36 36 37 3e 02 12 37 21 05 3d 01 4e b2 fe a8 bc fe cb fe 9a 0c 1c 1e 21 10 1a 59 99 7b 29 4b 20 1a 34 1f 28 35 2a 15 09 1e 26 29 13 03 9b 01 0a fd 4c 01 aa 04 b4 5e de e2 cc 4d 80 b3 5e 0c 0a fe 09 0b 35 81 72 32 b7 f7 01 24 9e 00 00 01 00 00 fe 6f 05 b4 04 5e 00 1a 00 1b 40 0e 07 19 06 72 13 0c 0b 72 02 80 00 05 0a 72 00 2b 32 1a cc 2b 32 2b 32 30 31 65 21 03 21 13 21 11 21 06 02 06 06 23 22 26 27 35 16 16 33 32 3e 02 12 37 21 04 89 01 2b 91 fe dd 89 fe cf fe e7 15 3a 5a 86 62 36 55 23 16 32 1a 1d 34 2e 29 22 0f 03 4e df fd 90 01 91 03 79 f6 fe a6 d9 64 Data Ascii: rV!@ rrr+2+2+201A!!!!#"&'532667>7!=N!Y{)K 4(5*&)L^M^5r2$o^@rrr+2+2+201e!!!!#"&'532>7!+:Zb6U#24.)"Nyd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49837	3.126.198.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	666	OUT	GET /web2/api/users/public/plans/WEB2 HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:37 UTC	484	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:37 GMT Content-Type: application/json Content-Length: 34012 Connection: close apigw-requestid: BHaWCiuZliAEJVw= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2 access-control-allow-origin: *
2024-11-12 04:19:37 UTC	3607	IN	Data Raw: 5b 7b 22 6e 61 6d 65 22 3a 22 53 54 41 52 54 45 52 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 46 49 4c 45 5f 4d 41 4e 41 47 45 4d 45 4e 54 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4e 42 4d 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 44 52 45 53 53 5f 42 4f 4f 4b 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 59 45 41 52 4c 59 5f 44 49 53 43 4f 55 4e 54 5f 50 45 52 43 45 4e 54 41 47 45 22 2c 22 76 61 6c 75 65 22 3a 22 32 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 47 44 50 52 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 57 48 49 54 45 4c 41 42 4c 45 5f 49 4e 54 45 52 46 41 43 45 22 2c 22 Data Ascii: [{"name":"STARTER","settings":[{"name":"FILE_MANAGEMENT","value":"FALSE"},{"name":"NBM","value":"0"},{"name":"ADDRESS_BOOK","value":"FALSE"},{"name":"YEARLY_DISCOUNT_PERCENTAGE","value":"20"},{"name":"GDPR","value":"TRUE"},{"name":"WHITELABLE_INTERFACE","
2024-11-12 04:19:37 UTC	8192	IN	Data Raw: 44 41 54 41 5f 45 4e 43 52 59 50 54 49 4f 4e 5f 41 45 53 32 35 36 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 52 41 4e 44 49 4e 47 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 52 45 46 45 52 52 41 4c 5f 52 45 57 41 52 44 53 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 41 56 45 5f 46 49 4c 45 53 5f 49 4e 5f 46 49 4c 45 4d 41 4e 41 47 45 52 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4d 4f 4e 54 48 4c 59 5f 43 4f 53 54 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 45 4e 43 52 59 50 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 45 4e 43 52 59 50 54 49 4f 4e 5f 41 45 53 32 35 Data Ascii: DATA_ENCRYPTION_AES256","value":"TRUE"},{"name":"BRANDING","value":"FALSE"},{"name":"REFERRAL_REWARDS","value":"FALSE"},{"name":"SAVE_FILES_IN_FILEMANAGER","value":"FALSE"},{"name":"MONTHLY_COST","value":"0"},{"name":"ENCRYPTION","value":"ENCRYPTION_AES25
2024-11-12 04:19:37 UTC	4485	IN	Data Raw: 53 46 45 52 5f 48 49 53 54 4f 52 59 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 43 48 45 44 55 4c 45 5f 41 44 53 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 43 54 49 56 49 54 59 5f 54 4f 4b 45 4e 5f 52 45 57 41 52 44 53 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 52 45 53 45 4e 44 5f 46 49 4c 45 53 22 2c 22 76 61 6c 75 65 22 3a 22 53 4f 4f 4e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4f 52 47 41 4e 49 5a 45 5f 46 49 4c 45 5f 49 4e 5f 45 58 50 4c 4f 52 45 52 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 5f 35 30 30 30 5f 43 48 46 22 2c 22 76 61 6c 75 65 22 3a 22 33 30 22 7d 2c 7b Data Ascii: SFER_HISTORY","value":"TRUE"},{"name":"SCHEDULE_ADS","value":""},{"name":"ACTIVITY_TOKEN_REWARDS","value":"TRUE"},{"name":"RESEND_FILES","value":"SOON"},{"name":"ORGANIZE_FILE_IN_EXPLORER","value":"TRUE"},{"name":"UPGRADE_STORAGE_5000_CHF","value":"30"},{
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 5f 45 58 50 4c 4f 52 45 52 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 5f 35 30 30 30 5f 43 48 46 22 2c 22 76 61 6c 75 65 22 3a 22 33 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 44 41 54 45 5f 52 45 54 45 4e 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 75 6e 6c 69 6d 69 74 65 64 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 44 41 54 41 5f 45 4e 43 52 59 50 54 49 4f 4e 5f 41 45 53 32 35 36 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 52 41 4e 44 49 4e 47 22 2c 22 76 61 6c 75 65 22 3a 22 42 61 73 69 63 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 52 45 46 45 52 52 41 4c 5f 52 45 57 41 52 44 53 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 Data Ascii: _EXPLORER","value":"TRUE"},{"name":"UPGRADE_STORAGE_5000_CHF","value":"30"},{"name":"DATE_RETENTION_DURATION","value":"unlimited"},{"name":"DATA_ENCRYPTION_AES256","value":"TRUE"},{"name":"BRANDING","value":"Basic"},{"name":"REFERRAL_REWARDS","value":"TRU
2024-11-12 04:19:37 UTC	1344	IN	Data Raw: 46 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 44 52 45 53 53 5f 42 4f 4f 4b 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 5f 32 35 30 22 2c 22 76 61 6c 75 65 22 3a 22 31 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 45 41 4d 5f 4d 41 4e 41 47 45 4d 45 4e 54 5f 43 48 46 22 2c 22 76 61 6c 75 65 22 3a 22 34 2e 39 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 5f 35 30 30 22 2c 22 76 61 6c 75 65 22 3a 22 31 35 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 43 48 45 44 55 4c 45 5f 54 52 41 4e 53 46 45 52 22 2c 22 76 61 6c 75 65 22 3a 22 31 34 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 Data Ascii: F","value":"0"},{"name":"ADDRESS_BOOK","value":"TRUE"},{"name":"UPGRADE_STORAGE_250","value":"10"},{"name":"TEAM_MANAGEMENT_CHF","value":"4.90"},{"name":"UPGRADE_STORAGE_500","value":"15"},{"name":"SCHEDULE_TRANSFER","value":"14"},{"name":"UPGRADE_STORAGE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49840	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	1783	OUT	GET /?timestamp=1731385175910 HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / baggage: sentry-environment=prod,sentry-release=v3.1.5,sentry-public_key=bda22e349cac4fc29c45af1a4199df4a,sentry-trace_id=ac01bd357cab425394d920b30d37742c,sentry-sample_rate=1,sentry-sampled=true sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sentry-trace: ac01bd357cab425394d920b30d37742c-99269f127a825b58-1 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:37 UTC	1952	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html Content-Length: 2938 Connection: close Date: Tue, 12 Nov 2024 04:19:38 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "6bc66faf4ef04baa93a407a9eae17cde" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 286eb4b50e0acf373dd03645aee00b7e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=0, must-revalidate Clear-Site-Data: cache Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:49025 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: wEl1g0uQtN6MexwaW2fgc1-Y5NfF9ZHqT_3OyrZ_S2_NmsJVcvG3ag==
2024-11-12 04:19:37 UTC	2938	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 64 65 70 72 65 63 61 74 65 64 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49843	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	375	OUT	GET /config/AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:37 UTC	267	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 50183 etag: W/"c407-tODthcPDtOiaQvcI9sgbbPWANbA" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:37 GMT connection: close
2024-11-12 04:19:37 UTC	14185	IN	Data Raw: 7b 22 66 6c 6f 77 43 6f 6e 66 69 67 22 3a 7b 22 6e 65 77 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 4e 65 77 73 22 2c 22 63 68 65 63 6b 6c 69 73 74 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 56 49 50 20 55 73 65 72 22 2c 22 66 65 61 74 75 72 65 52 65 71 75 65 73 74 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 52 6f 61 64 6d 61 70 22 2c 22 61 6c 6c 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 4d 65 73 73 61 67 65 73 22 2c 22 6b 6e 6f 77 6c 65 64 67 65 42 61 73 65 4d 65 6e 75 4c 61 62 65 6c 22 3a 22 48 65 6c 70 22 2c 22 77 65 6c 63 6f 6d 65 54 65 78 74 22 3a 22 48 6f 77 20 63 61 6e 20 77 65 20 68 65 6c 70 3f 22 2c 22 72 65 70 6c 79 54 69 6d 65 22 3a 22 77 69 74 68 69 6e 20 61 20 66 65 77 20 6d 69 6e 75 74 65 73 22 2c 22 63 6f 6c 6f 72 22 3a 22 Data Ascii: {"flowConfig":{"newsMenuLabel":"News","checklistMenuLabel":"VIP User","featureRequestsMenuLabel":"Roadmap","allConversationsMenuLabel":"Messages","knowledgeBaseMenuLabel":"Help","welcomeText":"How can we help?","replyTime":"within a few minutes","color":"
2024-11-12 04:19:37 UTC	16384	IN	Data Raw: 74 20 62 65 74 74 65 72 3f 22 2c 22 54 79 70 65 20 79 6f 75 72 20 73 75 67 67 65 73 74 69 6f 6e 73 20 68 65 72 65 22 3a 22 54 79 70 65 20 79 6f 75 72 20 73 75 67 67 65 73 74 69 6f 6e 73 20 68 65 72 65 22 7d 2c 22 65 6e 22 3a 7b 22 53 75 62 6d 69 74 22 3a 22 53 75 62 6d 69 74 22 2c 22 48 69 22 3a 22 48 69 22 2c 22 53 68 6f 72 74 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 74 69 74 6c 65 22 3a 22 53 68 6f 72 74 2c 20 64 65 73 63 72 69 70 74 69 76 65 20 74 69 74 6c 65 22 2c 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 68 6f 77 20 77 65 20 63 61 6e 20 64 6f 20 62 65 74 74 65 72 2e 22 3a 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 68 6f 77 20 77 65 20 63 61 6e 20 64 6f 20 62 65 74 74 65 72 2e 22 2c 22 52 65 70 6f 72 74 20 61 20 62 75 67 20 6f 72 20 73 68 61 72 65 20 79 6f Data Ascii: t better?","Type your suggestions here":"Type your suggestions here"},"en":{"Submit":"Submit","Hi":"Hi","Short, descriptive title":"Short, descriptive title","Let us know how we can do better.":"Let us know how we can do better.","Report a bug or share yo
2024-11-12 04:19:38 UTC	12576	IN	Data Raw: 73 20 66 6f 72 20 79 6f 75 72 20 66 65 65 64 62 61 63 6b 2e 22 2c 22 48 6f 77 20 77 6f 75 6c 64 20 79 6f 75 20 72 61 74 65 20 74 68 65 20 71 75 61 6c 69 74 79 20 6f 66 20 57 65 53 65 6e 64 69 74 3f 22 3a 22 48 6f 77 20 77 6f 75 6c 64 20 79 6f 75 20 72 61 74 65 20 74 68 65 20 71 75 61 6c 69 74 79 20 6f 66 20 57 65 53 65 6e 64 69 74 3f 22 2c 22 48 6f 77 20 77 6f 75 6c 64 20 79 6f 75 20 72 61 74 65 20 74 68 65 20 76 61 6c 75 65 20 66 6f 72 20 6d 6f 6e 65 79 20 6f 66 20 57 65 53 65 6e 64 69 74 3f 22 3a 22 48 6f 77 20 77 6f 75 6c 64 20 79 6f 75 20 72 61 74 65 20 74 68 65 20 76 61 6c 75 65 20 66 6f 72 20 6d 6f 6e 65 79 20 6f 66 20 57 65 53 65 6e 64 69 74 3f 22 2c 22 49 73 20 74 68 65 72 65 20 61 6e 79 74 68 69 6e 67 20 70 61 72 74 69 63 75 6c 61 72 20 79 6f 75 Data Ascii: s for your feedback.","How would you rate the quality of WeSendit?":"How would you rate the quality of WeSendit?","How would you rate the value for money of WeSendit?":"How would you rate the value for money of WeSendit?","Is there anything particular you
2024-11-12 04:19:38 UTC	7038	IN	Data Raw: 65 74 20 74 68 65 20 66 69 6c 74 65 72 73 20 74 6f 20 73 65 65 20 6d 6f 72 65 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 2e 22 2c 22 6e 6f 74 68 69 6e 67 55 6e 73 65 65 6e 54 69 74 6c 65 22 3a 22 4e 6f 74 68 69 6e 67 20 75 6e 72 65 61 64 2c 20 67 6f 6f 64 20 6a 6f 62 20 f0 9f 92 aa 22 2c 22 6e 6f 74 68 69 6e 67 55 6e 73 65 65 6e 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 72 65 20 61 72 65 20 6e 6f 20 75 6e 72 65 61 64 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 20 77 61 69 74 69 6e 67 20 66 6f 72 20 79 6f 75 2e 22 2c 22 6e 6f 46 65 61 74 75 72 65 52 65 71 75 65 73 74 73 54 69 74 6c 65 22 3a 22 4e 6f 20 66 65 61 74 75 72 65 20 72 65 71 75 65 73 74 73 20 79 65 74 22 2c 22 6e 6f 46 65 61 74 75 72 65 52 65 71 75 65 73 74 73 44 65 73 63 Data Ascii: et the filters to see more feature requests.","nothingUnseenTitle":"Nothing unread, good job ","nothingUnseenDescription":"There are no unread feature requests waiting for you.","noFeatureRequestsTitle":"No feature requests yet","noFeatureRequestsDesc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49846	104.21.30.157	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:37 UTC	375	OUT	GET /crowdswap-widget.css?1730283708 HTTP/1.1 Host: widget.crowdswap.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:38 UTC	1085	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:37 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: W/"6a832e9c1bef16c04641299359542269" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CXYp0BPOx%2FQt%2BlIFP8mD7Vol81B7JWp19IyKB3pqXEx91UWsGE6pErdEIUosZKoG6pCdGc1Y%2BLam8wdmYZFYNoxGeNiUm3yndfRjVkVZnngXMiYijf4UqfBCf64J3Hcly27NhiZ0LA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: REVALIDATED Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8e13b9923d814608-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1292&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=953&delivery_rate=2706542&cwnd=251&unsent_bytes=0&cid=0d32282aa6e95859&ts=168&x=0"
2024-11-12 04:19:38 UTC	284	IN	Data Raw: 37 63 32 30 0d 0a 2e 66 6f 6e 74 2d 32 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 33 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 32 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 34 7b 66 6f Data Ascii: 7c20.font-28{font-size:28px!important}.font-24{font-size:24px!important}.font-32{font-size:32px!important}.font-22{font-size:22px!important}.font-20{font-size:20px!important}.font-18{font-size:18px!important}.font-16{font-size:16px!important}.font-14{fo
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 31 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 31 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 39 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 38 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 69 6e 65 2d 68 65 69 67 68 74 2d 31 30 70 78 7b Data Ascii: 13{font-size:13px!important}.font-12{font-size:12px!important}.font-11{font-size:11px!important}.font-10{font-size:10px!important}.font-9{font-size:9px!important}.font-8{font-size:8px!important}.line-height-18{line-height:18px!important}.line-height-10px{
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 31 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 31 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 32 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6f 6e 74 2d 78 73 2d 32 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 66 6f 6e 74 2d 77 6f 66 66 3b 63 68 61 72 73 65 Data Ascii: x!important}.font-xs-14{font-size:14px!important}.font-xs-16{font-size:16px!important}.font-xs-20{font-size:20px!important}.font-xs-28{font-size:28px!important}}@charset "UTF-8";@font-face{font-family:swiper-icons;src:url(data:application/font-woff;charse
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 35 36 38 78 39 41 6e 65 59 59 67 6d 34 4d 4a 62 68 4b 46 61 45 78 49 4f 41 56 58 38 41 70 65 77 53 74 34 42 69 63 34 41 66 65 41 69 64 33 56 4f 42 69 78 44 78 66 50 59 45 7a 61 35 4f 2b 58 66 69 30 34 59 41 44 67 67 69 55 49 55 4c 43 75 45 4a 4b 38 56 68 4f 34 62 53 76 70 64 6e 6b 74 48 49 35 51 43 59 74 64 69 32 73 6c 38 5a 6e 58 61 48 6c 71 55 72 4e 4b 7a 64 4b 63 54 38 63 6a 6c 71 2b 72 77 5a 53 76 49 56 63 7a 4e 69 65 7a 73 66 6e 50 2f 75 7a 6e 6d 66 50 46 42 4e 4f 44 4d 32 4b 37 4d 54 51 34 35 59 45 41 5a 71 47 50 38 31 41 6d 47 47 63 46 33 69 50 71 4f 6f 70 30 72 31 53 50 54 61 54 62 56 6b 66 55 65 34 48 58 6a 39 37 77 59 45 2b 79 4e 77 57 59 78 77 57 75 34 76 31 75 67 57 48 67 6f 33 53 31 58 64 5a 45 56 71 57 4d 37 45 54 30 63 66 6e 4c 47 78 57 66 Data Ascii: 568x9AneYYgm4MJbhKFaExIOAVX8ApewSt4Bic4AfeAid3VOBixDxfPYEza5O+Xfi04YADggiUIULCuEJK8VhO4bSvpdnktHI5QCYtdi2sl8ZnXaHlqUrNKzdKcT8cjlq+rwZSvIVczNiezsfnP/uznmfPFBNODM2K7MTQ45YEAZqGP81AmGGcF3iPqOop0r1SPTaTbVkfUe4HXj97wYE+yNwWYxwWu4v1ugWHgo3S1XdZEVqWM7ET0cfnLGxWf
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 73 77 69 70 65 72 2d 61 6e 64 72 6f 69 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2c 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 73 77 69 70 65 72 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 79 7d 2e 73 77 69 70 65 72 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 2e 73 77 69 70 65 72 2d 76 65 72 74 69 63 61 6c 7b 74 6f 75 63 68 2d Data Ascii: idth:100%;height:100%;z-index:1;display:flex;transition-property:transform;box-sizing:content-box}.swiper-android .swiper-slide,.swiper-wrapper{transform:translateZ(0)}.swiper-pointer-events{touch-action:pan-y}.swiper-pointer-events.swiper-vertical{touch-
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 74 6f 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 Data Ascii: iper-slide-shadow-left{background-image:linear-gradient(to left,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-right{background-image:linear-gradient(to right,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-top{background-imag
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 2d 61 66 74 65 72 29 7d 2e 73 77 69 70 65 72 2d 63 65 6e 74 65 72 65 64 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 3e 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 6f 70 3a 61 6c 77 61 79 73 7d 3a 72 6f 6f 74 7b 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 3a 20 34 34 70 78 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 77 69 64 74 68 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 29 20 Data Ascii: -after)}.swiper-centered>.swiper-wrapper>.swiper-slide{scroll-snap-align:center center;scroll-snap-stop:always}:root{--swiper-navigation-size: 44px}.swiper-button-prev,.swiper-button-next{position:absolute;top:50%;width:calc(var(--swiper-navigation-size)
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 6e 65 78 74 22 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 20 6f 70 61 63 69 74 79 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 69 64 64 65 6e 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 64 69 73 61 62 6c 65 64 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 Data Ascii: tent:"next"}.swiper-button-lock{display:none}.swiper-pagination{position:absolute;text-align:center;transition:.3s opacity;transform:translateZ(0);z-index:10}.swiper-pagination.swiper-pagination-hidden{opacity:0}.swiper-pagination-disabled>.swiper-paginat
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 6c 6c 65 74 2d 68 65 69 67 68 74 2c 20 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 73 69 7a 65 2c 20 38 70 78 29 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 69 6e 61 63 74 69 76 65 2d 63 6f 6c 6f 72 2c 20 23 30 30 30 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 69 6e 61 63 74 69 76 65 2d 6f 70 61 63 69 74 79 2c 20 2e 32 29 7d 62 75 74 74 6f 6e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 62 6f 72 Data Ascii: llet-height, var(--swiper-pagination-bullet-size, 8px));display:inline-block;border-radius:50%;background:var(--swiper-pagination-bullet-inactive-color, #000);opacity:var(--swiper-pagination-bullet-inactive-opacity, .2)}button.swiper-pagination-bullet{bor
2024-11-12 04:19:38 UTC	1369	IN	Data Raw: 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 74 72 61 6e 73 66 6f 72 6d 2c 2e 32 73 20 74 6f 70 7d 2e 73 77 69 70 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2c 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 6d 61 72 67 69 6e 3a 30 20 76 61 72 28 2d 2d 73 77 Data Ascii: mic .swiper-pagination-bullet{display:inline-block;transition:.2s transform,.2s top}.swiper-horizontal>.swiper-pagination-bullets .swiper-pagination-bullet,.swiper-pagination-horizontal.swiper-pagination-bullets .swiper-pagination-bullet{margin:0 var(--sw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49851	3.126.198.9	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:38 UTC	706	OUT	GET /web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:38 UTC	482	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:38 GMT Content-Type: application/json Content-Length: 222 Connection: close apigw-requestid: BHaWQgUgFiAEJXg= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2 access-control-allow-origin: *
2024-11-12 04:19:38 UTC	222	IN	Data Raw: 7b 22 69 64 22 3a 32 30 33 2c 22 63 68 61 6e 6e 65 6c 4e 61 6d 65 22 3a 22 48 65 72 69 74 61 67 65 20 50 72 69 76 61 74 65 20 57 65 61 6c 74 68 22 2c 22 75 72 6c 22 3a 22 73 65 63 75 72 65 5f 73 68 61 72 69 6e 67 30 64 6f 63 75 6d 65 6e 74 70 72 65 76 69 65 77 22 2c 22 6c 69 6e 6b 54 6f 57 65 62 73 69 74 65 22 3a 6e 75 6c 6c 2c 22 63 68 61 6e 6e 65 6c 4c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 66 61 63 65 4c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 31 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 32 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 33 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 34 22 3a 6e 75 6c 6c 7d Data Ascii: {"id":203,"channelName":"Heritage Private Wealth","url":"secure_sharing0documentpreview","linkToWebsite":null,"channelLogo":null,"interfaceLogo":null,"wallpaper1":null,"wallpaper2":null,"wallpaper3":null,"wallpaper4":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49850	216.58.206.36	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:38 UTC	1474	OUT	GET /pagead/1p-user-list/957027334/?random=1731385168509&cv=11&fst=1731384000000&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7diOQy8b3N4ZyGid-61ToGZRqCvUmaOy6iBNbxy6kRAA61f99p&random=735624657&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:38 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49849	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:38 UTC	980	OUT	GET /tr/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:38 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=119, rtx=0, c=10, mss=1380, tbw=3404, tp=-1, tpl=-1, uplat=5, ullat=5 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 12 Nov 2024 04:19:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49848	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:38 UTC	1090	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:39 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7436242717805352968", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7436242717805352968"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-11-12 04:19:39 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2024-11-12 04:19:39 UTC	1674	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-11-12 04:19:39 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49861	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:38 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:39 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:39 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49853	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1234	OUT	GET /static/js/6316.088c246e.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 24696 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "e5c87ba1e0bb5d6e4d405b1821abb42f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 06d36e78e8dfd9468327f09115761a9e.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:45273 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 97EZDz2Hpqa-x5KAvh3muUn1GDt7MdNUsSZJ5E3oc01Iiu_bWJ60oA==
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 31 36 5d 2c 7b 35 31 36 36 34 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 73 69 6e 67 6c 65 5f 73 6f 75 72 63 65 5f 73 68 6f 72 74 65 73 74 5f 70 61 74 68 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 7b 7d 2c 69 3d 7b 7d 3b 69 5b 72 5d 3d 30 3b 76 61 72 20 61 2c 75 2c 73 2c 66 2c 63 2c 68 2c 64 2c 67 3d 65 2e 50 72 69 6f 72 69 74 79 51 75 65 75 65 2e 6d 61 6b 65 28 29 3b 66 6f 72 28 67 2e 70 75 73 68 28 72 2c 30 29 3b 21 67 2e 65 6d 70 Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6316],{51664:function(t){"use strict";var e={single_source_shortest_paths:function(t,r,n){var o={},i={};i[r]=0;var a,u,s,f,c,h,d,g=e.PriorityQueue.make();for(g.push(r,0);!g.emp
2024-11-12 04:19:39 UTC	8312	IN	Data Raw: 22 2c 6f 3d 22 28 3f 3a 28 3f 21 5b 41 2d 5a 30 2d 39 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 7c 22 2b 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 75 2f 67 2c 22 5c 5c 75 22 29 29 2b 22 29 28 3f 3a 2e 7c 5b 5c 72 5c 6e 5d 29 29 2b 22 3b 65 2e 4b 41 4e 4a 49 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 2c 22 67 22 29 2c 65 2e 42 59 54 45 5f 4b 41 4e 4a 49 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 5e 41 2d 5a 30 2d 39 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 2b 22 2c 22 67 22 29 2c 65 2e 42 59 54 45 3d 6e 65 77 20 52 65 67 45 78 70 28 6f 2c 22 67 22 29 2c 65 2e 4e 55 4d 45 52 49 43 3d 6e 65 77 20 52 65 67 45 78 70 28 72 2c 22 67 22 29 2c 65 2e 41 4c 50 48 41 4e 55 4d 45 52 49 43 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5b 41 2d 5a 20 24 25 2a 2b 5c 5c 2d 2e 2f 3a 5d 2b 22 2c Data Ascii: ",o="(?:(?![A-Z0-9 $%+\\-./:]\|"+(n=n.replace(/u/g,"\\u"))+")(?:.\|[\r\n]))+";e.KANJI=new RegExp(n,"g"),e.BYTE_KANJI=new RegExp("[^A-Z0-9 $%+\\-./:]+","g"),e.BYTE=new RegExp(o,"g"),e.NUMERIC=new RegExp(r,"g"),e.ALPHANUMERIC=new RegExp("[A-Z $%*+\\-./:]+",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49855	157.240.0.6	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1228	OUT	GET /signals/config/427391422902188?v=2.9.176&r=stable&domain=secure_sharing0documentpreview.wesendit.com&hme=872f04a0547459b3285cb03b0d7a47bfde40628f4b386809918a621e2688602f&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C195%2C194%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:39 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-deRj44lN' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-11-12 04:19:39 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-11-12 04:19:39 UTC	1491	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-11-12 04:19:39 UTC	14893	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 Data Ascii: );return Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue
2024-11-12 04:19:39 UTC	1500	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-11-12 04:19:39 UTC	1482	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 70 65 6e 64 28 22 65 69 64 Data Ascii: function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.append("eid
2024-11-12 04:19:39 UTC	13402	IN	Data Raw: 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 41 72 72 61 79 2e Data Ascii: e:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function g(a){if(Array.
2024-11-12 04:19:39 UTC	1491	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi
2024-11-12 04:19:39 UTC	14893	IN	Data Raw: 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d Data Ascii: ot installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={}
2024-11-12 04:19:39 UTC	1491	IN	Data Raw: 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 67 61 74 69 6e 67 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 67 61 74 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 66 62 71 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 34 32 37 33 39 31 34 32 32 39 30 32 31 38 38 22 2c 20 7b 5f 5f 66 62 45 76 65 6e 74 73 50 6c 75 67 69 6e 3a 20 31 2c 20 70 6c 75 67 69 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 66 62 71 2c 20 69 6e 73 74 61 6e 63 65 2c 20 63 Data Ascii: ("fbevents.plugins.gating",e.exports);f.ensureModuleRegistered("fbevents.plugins.gating",function(){return e.exports})})()})(window,document,location,history);fbq.registerPlugin("427391422902188", {__fbEventsPlugin: 1, plugin: function(fbq, instance, c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49858	13.32.27.19	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	372	OUT	GET /modules.6f60e575cf8ad7cb10f7.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:39 UTC	719	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226966 Connection: close Date: Mon, 04 Nov 2024 14:20:08 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "4eec238587f7f82d91a29f25d83a5fb6" Last-Modified: Mon, 04 Nov 2024 14:19:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7d3c59ee1b45f72158a8cbce053c8978.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: PmBW_kN_BZbwO5LFswHGmkoweJ5-5RjWf0J1W21bm68rCu0C2vYInA== Age: 655171
2024-11-12 04:19:39 UTC	15665	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 66 36 30 65 35 37 35 63 66 38 61 64 37 63 62 31 30 66 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.6f60e575cf8ad7cb10f7.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 29 29 2c 68 6a 2e 62 72 69 64 67 65 2e 66 6c 75 73 68 55 73 65 72 41 74 74 72 69 62 75 74 65 73 28 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 2c 65 28 6e 75 6c 6c 2c 6f 2e 69 64 2c 6f 2e 61 74 74 72 69 62 75 74 65 73 29 7d 65 6c 73 65 20 65 28 45 72 72 6f 72 28 22 6e 6f 5f 75 73 65 72 22 29 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 66 6c 75 73 68 22 29 2c 67 65 74 3a 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 75 73 65 72 5f 69 64 22 3d 3d 3d 65 3f 6f 2e 69 64 3a 65 26 26 6f 2e 61 74 74 72 69 62 75 74 65 73 5b 65 5d 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 2e 67 65 Data Ascii: own_failure")}),"userAttributes"))),hj.bridge.flushUserAttributes(o.id,o.attributes),e(null,o.id,o.attributes)}else e(Error("no_user"))}),"userAttributes.flush"),get:hj.tryCatch((function(e){return"user_id"===e?o.id:e&&o.attributes[e]}),"userAttributes.ge
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 48 54 43 28 2e 46 6c 79 65 72 7c 5c 5f 46 6c 79 65 72 29 7c 53 70 72 69 6e 74 2e 41 54 50 35 31 7c 56 69 65 77 50 61 64 37 7c 70 61 6e 64 69 67 69 74 61 6c 28 73 70 72 6e 6f 76 61 7c 6e 6f 76 61 29 7c 49 64 65 6f 73 2e 53 37 7c 44 65 6c 6c 2e 53 74 72 65 61 6b 2e 37 7c 41 64 76 65 6e 74 2e 56 65 67 61 7c 41 31 30 31 49 54 7c 41 37 30 42 48 54 7c 4d 49 44 37 30 31 35 7c 4e 65 78 74 32 7c 6e 6f 6f 6b 2f 69 29 7c 7c 74 28 2f 4d 42 35 31 31 2f 69 29 26 26 74 28 2f 52 55 54 45 4d 2f 69 29 3f 22 74 61 62 6c 65 74 22 3a 74 28 2f 42 4f 4c 54 7c 46 65 6e 6e 65 63 7c 49 72 69 73 7c 4d 61 65 6d 6f 7c 4d 69 6e 69 6d 6f 7c 4d 6f 62 69 7c 6d 6f 77 73 65 72 7c 4e 65 74 46 72 6f 6e 74 7c 4e 6f 76 61 72 72 61 7c 50 72 69 73 6d 7c 52 58 2d 33 34 7c 53 6b 79 66 69 72 65 7c Data Ascii: HTC(.Flyer\|\_Flyer)\|Sprint.ATP51\|ViewPad7\|pandigital(sprnova\|nova)\|Ideos.S7\|Dell.Streak.7\|Advent.Vega\|A101IT\|A70BHT\|MID7015\|Next2\|nook/i)\|\|t(/MB511/i)&&t(/RUTEM/i)?"tablet":t(/BOLT\|Fennec\|Iris\|Maemo\|Minimo\|Mobi\|mowser\|NetFront\|Novarra\|Prism\|RX-34\|Skyfire\|
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 65 28 32 29 3a 65 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 22 2d 22 3d 3d 3d 65 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 7c 7c 77 28 65 29 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 2f 5c 73 2f 67 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 28 72 2e 6c 65 6e 67 74 68 3c 74 2e 6d 61 78 43 6c 61 73 Data Ascii: e(2):e},w=function(e){return 1===e.length&&"-"===e},S=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1\|\|w(e))&&((e=e.replace(n,"\\$1")).split(/\s/g).forEach((function(e){!(r.length<t.maxClas
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2c 21 30 29 2e 66 6c 75 73 68 28 29 2c 42 2e 79 2e 73 65 74 28 22 61 75 74 6f 54 61 67 73 54 6f 50 72 6f 63 65 73 73 22 2c 5b 5d 29 29 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 75 73 65 72 5f 61 74 74 72 69 62 75 74 65 73 5f 65 6e 61 62 6c 65 64 26 26 61 2e 72 2e 66 6c 75 73 68 28 29 7d 29 2c 22 62 65 68 61 76 69 6f 72 2d 64 61 74 61 2e 72 65 63 6f 72 64 69 6e 67 2e 73 74 61 72 74 22 29 2c 73 65 74 41 6e 64 53 65 6e 64 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7a 2e 51 2e 67 65 74 28 22 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 22 29 3b 7a 2e 51 2e 6f 6e 28 22 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6a 2e 65 76 65 6e 74 53 74 72 65 Data Ascii: ,!0).flush(),B.y.set("autoTagsToProcess",[])),hj.settings.user_attributes_enabled&&a.r.flush()}),"behavior-data.recording.start"),setAndSendPageContent:function(e,t){var n=z.Q.get("sessionAccepted");z.Q.on("sessionAccepted",(function(){return hj.eventStre
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 7c 7c 28 6e 2e 61 74 74 72 69 62 75 74 65 4f 6c 64 56 61 6c 75 65 73 5b 65 5d 3d 74 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 61 74 74 72 69 62 75 74 65 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4d 75 74 61 74 65 64 3d 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 7c 7c 28 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 3d 21 30 2c 6e 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4f 6c 64 56 61 6c 75 65 3d 65 29 7d 29 2c 22 4e 6f 64 65 43 68 61 6e 67 65 2e 63 68 61 72 61 63 74 65 72 44 61 74 61 4d 75 74 61 74 65 64 22 29 2c 74 68 69 73 2e 72 65 6d 6f 76 65 64 46 72 6f 6d 50 61 72 65 6e Data Ascii: .attributeOldValues\|\|(n.attributeOldValues[e]=t)}),"NodeChange.attributeMutated"),this.characterDataMutated=hj.tryCatch((function(e){n.characterData\|\|(n.characterData=!0,n.characterDataOldValue=e)}),"NodeChange.characterDataMutated"),this.removedFromParen
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 6f 75 73 53 69 62 6c 69 6e 67 26 26 65 2e 68 61 73 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 3b 29 72 3d 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 3b 72 26 26 65 2e 68 61 73 28 72 29 3b 29 7b 76 61 72 20 69 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 29 3b 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 26 26 28 69 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 72 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 29 29 3b 76 61 72 20 73 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 76 6f 69 64 20 30 2c 28 74 3d 73 2e 68 6f 73 74 29 26 26 70 65 28 74 29 3f 28 69 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 6f 2e 73 65 72 69 61 6c 69 7a 65 4e 6f 64 65 28 73 2e 68 6f 73 Data Ascii: ousSibling&&e.has(r.previousSibling);)r=r.previousSibling;for(;r&&e.has(r);){var i=o.serializeNode(r);r.previousSibling&&(i.previousSibling=o.serializeNode(r.previousSibling));var s=r.parentNode;void 0,(t=s.host)&&pe(t)?(i.parentNode=o.serializeNode(s.hos
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 3b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 35 35 34 37 29 3b 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 6a 2e 69 6e 73 65 72 74 65 64 52 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 7d 2c 6e 3d 5b 5d 2c 6f 3d 21 31 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 61 3d 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 69 73 4f 6e 44 6f 63 75 6d 65 6e 74 3d 6f 2c 61 2e 72 75 6c 65 3d 74 2c 61 2e 69 6e 64 65 78 3d 6e 2c 61 2e 70 61 72 65 6e 74 53 65 6c 65 63 74 6f 72 3d 6f 3f 6e 75 6c 6c 3a 28 69 3d 65 2c 68 6a 2e 73 65 6c 65 63 74 6f 72 28 29 2e 67 65 74 28 68 6a 2e 68 71 28 69 29 29 29 2c 61 2e 6e 6f 64 65 49 64 3d 68 6a 2e 74 72 65 65 4d 69 72 72 6f 72 2e 67 65 74 Data Ascii: ;n.r(t);var r=n(5547);hj.tryCatch((function(){hj.insertedRules=function(){var e,t={},n=[],o=!1,i=function(e,t,n,r,o){var i,a={};return a.isOnDocument=o,a.rule=t,a.index=n,a.parentSelector=o?null:(i=e,hj.selector().get(hj.hq(i))),a.nodeId=hj.treeMirror.get
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 53 2e 77 72 69 74 65 28 65 2c 74 2c 21 30 2c 72 29 7d 29 29 2c 53 3b 76 61 72 20 69 3d 65 3b 69 66 28 21 72 26 26 21 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 29 7b 69 66 28 21 53 2e 5f 77 73 2e 73 65 73 73 69 6f 6e 54 69 6d 65 64 4f 75 74 44 75 65 54 6f 49 6e 61 63 74 69 76 69 74 79 7c 7c 21 43 28 69 29 29 72 65 74 75 72 6e 20 53 3b 53 2e 5f 77 73 3d 6e 65 77 20 79 28 53 2e 66 6c 75 73 68 29 2c 68 6a 2e 5f 69 6e 69 74 2e 72 65 69 6e 69 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 30 29 2c 53 2e 5f 77 73 2e 63 6f 6e 6e 65 63 74 28 29 7d 76 61 72 20 61 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 53 2e 65 76 65 6e 74 73 2e 70 6f 70 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 5f 28 70 29 3b 72 65 74 75 Data Ascii: ion(e,t){S.write(e,t,!0,r)})),S;var i=e;if(!r&&!S._ws.connect()){if(!S._ws.sessionTimedOutDueToInactivity\|\|!C(i))return S;S._ws=new y(S.flush),hj._init.reinit(window.location.href,!0),S._ws.connect()}var a=null!==(o=S.events.pop())&&void 0!==o?o:_(p);retu
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2c 22 63 6c 65 61 72 2d 63 6f 6f 6b 69 65 22 29 7d 7d 29 2c 6f 29 7d 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 72 2e 66 5f 2e 6e 6f 77 28 29 3e 3d 6e 2b 69 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 73 28 65 2c 22 63 68 65 63 6b 2d 63 6f 6f 6b 69 65 22 29 2c 21 30 7d 7d 7d 2c 33 38 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 51 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 72 3d 28 30 2c 6e 28 34 35 35 37 29 2e 4d 29 28 7b 73 65 73 73 69 6f 6e 41 63 63 65 70 74 65 64 3a 21 31 2c 73 65 73 73 69 6f 6e 3a 6e 75 6c 6c 2c 75 73 65 72 3a 7b 7d 7d 2c 22 73 65 73 73 69 6f 6e 22 29 7d 2c 35 31 34 38 3a 66 75 6e Data Ascii: ,"clear-cookie")}}),o)}return"number"==typeof n&&r.f_.now()>=n+i}catch(e){return s(e,"check-cookie"),!0}}},3883:function(e,t,n){"use strict";n.d(t,{Q:function(){return r}});var r=(0,n(4557).M)({sessionAccepted:!1,session:null,user:{}},"session")},5148:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49857	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1234	OUT	GET /static/js/4366.ea2f9748.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1931	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 213993 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "e5fd2c86c1b8f0a06c77aa265987eb94" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 debe291145dc27044f50d04bac101cd8.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:49719 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: c8VicrZ_EH5OW1tMppj1Il1_FTeJUoW7fidzEhYQMNdgFbVdte7ulA==
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 34 33 36 36 2e 65 61 32 66 39 37 34 38 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 36 36 5d 2c 7b 38 34 33 36 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 2e 72 28 65 29 2c 6e 2e 64 28 65 2c 7b 57 33 6d 41 63 63 6f 75 6e 74 42 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 63 7d 2c 57 33 6d 43 Data Ascii: /! For license information please see 4366.ea2f9748.chunk.js.LICENSE.txt /"use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[4366],{84366:function(t,e,n){n.r(e),n.d(e,{W3mAccountButton:function(){return fc},W3mC
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 5f 24 41 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 29 7d 7d 5d 29 2c 74 7d 28 29 2c 64 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 2c 69 2c 61 29 7b 28 30 2c 63 2e 5a 29 28 74 68 69 73 2c 74 29 2c 74 68 69 73 2e 74 79 70 65 3d 31 2c 74 68 69 73 2e 5f 24 41 48 3d 72 74 2c 74 68 69 73 2e 5f 24 41 4e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 6e 2c 74 68 69 73 2e 5f 24 41 4d 3d 69 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2c 72 2e 6c 65 6e 67 74 68 3e 32 7c 7c 22 22 21 3d 3d 72 5b 30 5d 7c 7c 22 22 21 3d 3d 72 5b 31 5d 3f 28 74 68 69 73 2e 5f 24 41 48 3d 41 72 72 61 Data Ascii: null===(e=this._$AP)\|\|void 0===e\|\|e.call(this,t))}}]),t}(),dt=function(){function t(e,n,r,i,a){(0,c.Z)(this,t),this.type=1,this._$AH=rt,this._$AN=void 0,this.element=e,this.name=n,this._$AM=i,this.options=a,r.length>2\|\|""!==r[0]\|\|""!==r[1]?(this._$AH=Arra
2024-11-12 04:19:39 UTC	1614	IN	Data Raw: 21 3d 3d 28 65 3d 56 65 28 74 2c 5f 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6e 75 6c 6c 3d 3d 3d 50 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 30 7d 2c 64 3d 24 65 28 7a 65 28 6e 29 2c 73 29 2c 6d 3d 42 65 28 64 2c 50 29 3b 69 66 28 71 74 28 67 29 29 7b 76 61 72 20 66 3d 67 2e 63 72 65 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 64 2c 22 6f 70 61 63 69 74 79 22 21 3d 3d 65 2c 73 2c 5f 2c 49 29 3b 67 3d 66 2e 65 61 73 69 6e 67 2c 64 3d 66 2e 6b 65 79 66 72 61 6d 65 73 7c 7c 64 2c 75 3d 66 2e 64 75 72 61 74 69 6f 6e 7c 7c 75 7d 69 66 28 49 65 28 5f 29 26 26 28 53 65 2e 63 73 73 52 65 67 69 73 74 65 72 50 72 6f 70 65 72 74 79 28 29 3f 6a 65 28 5f Data Ascii: !==(e=Ve(t,_))&&void 0!==e?e:null===P\|\|void 0===P?void 0:P.initialValue)&&void 0!==n?n:0},d=$e(ze(n),s),m=Be(d,P);if(qt(g)){var f=g.createAnimation(d,"opacity"!==e,s,_,I);g=f.easing,d=f.keyframes\|\|d,u=f.duration\|\|u}if(Ie(_)&&(Se.cssRegisterProperty()?je(_
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 3a 74 7d 76 61 72 20 58 65 2c 51 65 3d 28 58 65 3d 64 65 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 2c 72 3d 28 74 3d 4b 65 28 74 29 29 2e 6c 65 6e 67 74 68 3b 42 6f 6f 6c 65 61 6e 28 72 29 2c 42 6f 6f 6c 65 61 6e 28 65 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 61 3d 30 3b 61 3c 72 3b 61 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 61 5d 3b 66 6f 72 28 76 61 72 20 6c 20 69 6e 20 65 29 7b 76 61 72 20 63 3d 71 65 28 6e 2c 6c 29 3b 63 2e 64 65 6c 61 79 3d 59 65 28 63 2e 64 65 6c 61 79 2c 61 2c 72 29 3b 76 61 72 20 73 3d 47 65 28 6f 2c 6c 2c 65 5b 6c 5d 2c 63 2c 58 65 29 3b 69 Data Ascii: :t}var Xe,Qe=(Xe=de,function(t,e){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},r=(t=Ke(t)).length;Boolean(r),Boolean(e);for(var i=[],a=0;a<r;a++){var o=t[a];for(var l in e){var c=qe(n,l);c.delay=Ye(c.delay,a,r);var s=Ge(o,l,e[l],c,Xe);i
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2e 33 31 20 35 2e 33 31 20 30 20 30 20 30 20 2e 30 37 39 2d 2e 38 39 32 76 2d 2e 33 37 37 68 2d 32 2e 38 37 34 76 39 2e 37 31 32 68 32 2e 38 37 34 5a 4d 31 33 37 2e 34 36 34 20 32 30 2e 39 34 38 76 2d 35 2e 36 38 39 63 30 2d 31 2e 32 30 38 2e 37 35 33 2d 32 2e 31 20 31 2e 38 32 33 2d 32 2e 31 20 31 2e 30 31 31 20 30 20 31 2e 36 30 36 2e 37 37 33 20 31 2e 36 30 36 20 32 2e 30 36 76 35 2e 37 32 39 68 32 2e 38 37 33 76 2d 36 2e 31 34 34 63 30 2d 32 2e 33 33 39 2d 31 2e 32 32 38 2d 33 2e 39 30 35 2d 33 2e 34 32 38 2d 33 2e 39 30 35 2d 31 2e 35 32 36 20 30 2d 32 2e 34 35 38 2e 37 33 34 2d 32 2e 39 35 33 20 31 2e 36 30 36 61 35 2e 33 31 20 35 2e 33 31 20 30 20 30 20 30 20 2e 30 37 39 2d 2e 38 39 32 76 2d 2e 33 37 37 68 2d 32 2e 38 37 34 76 39 2e 37 31 32 68 32 Data Ascii: .31 5.31 0 0 0 .079-.892v-.377h-2.874v9.712h2.874ZM137.464 20.948v-5.689c0-1.208.753-2.1 1.823-2.1 1.011 0 1.606.773 1.606 2.06v5.729h2.873v-6.144c0-2.339-1.228-3.905-3.428-3.905-1.526 0-2.458.734-2.953 1.606a5.31 5.31 0 0 0 .079-.892v-.377h-2.874v9.712h2
2024-11-12 04:19:39 UTC	1024	IN	Data Raw: 20 33 35 2e 32 31 76 2d 31 30 2e 32 5a 22 20 66 69 6c 6c 3d 22 23 31 44 43 39 35 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 2e 35 20 32 35 2e 30 31 63 30 2d 34 2e 36 33 35 20 30 2d 38 2e 30 37 38 2e 32 34 34 2d 31 30 2e 37 39 35 2e 32 34 34 2d 32 2e 37 31 2e 37 32 36 2d 34 2e 36 35 20 31 2e 36 36 2d 36 2e 32 38 39 61 31 34 2e 35 20 31 34 2e 35 20 30 20 30 20 31 20 35 2e 34 31 32 2d 35 2e 34 31 63 31 2e 36 33 39 2d 2e 39 33 36 20 33 2e 35 37 39 2d 31 2e 34 31 38 20 36 2e 32 38 39 2d 31 2e 36 36 31 43 31 36 2e 38 32 32 2e 36 31 20 32 30 2e 32 36 35 2e 36 31 20 32 34 2e 39 2e 36 31 68 31 30 2e 32 63 34 2e 36 33 35 20 30 20 38 2e 30 37 38 20 30 20 31 30 2e 37 39 35 2e 32 34 35 20 32 2e 37 31 2e 32 34 33 20 34 2e 36 35 2e 37 32 35 20 36 2e 32 39 20 31 2e 36 36 Data Ascii: 35.21v-10.2Z" fill="#1DC956"/><path d="M.5 25.01c0-4.635 0-8.078.244-10.795.244-2.71.726-4.65 1.66-6.289a14.5 14.5 0 0 1 5.412-5.41c1.639-.936 3.579-1.418 6.289-1.661C16.822.61 20.265.61 24.9.61h10.2c4.635 0 8.078 0 10.795.245 2.71.243 4.65.725 6.29 1.66
2024-11-12 04:19:39 UTC	1024	IN	Data Raw: 2e 37 31 32 61 32 20 32 20 30 20 30 20 31 20 31 2e 34 32 38 2d 31 2e 30 31 36 6c 34 2e 31 33 34 2d 2e 36 38 39 61 32 20 32 20 30 20 30 20 31 20 31 2e 36 31 2e 34 33 37 6c 33 2e 38 39 32 20 33 2e 32 34 33 61 32 20 32 20 30 20 30 20 30 20 32 2e 36 39 34 2d 2e 31 32 32 6c 34 2e 36 33 33 2d 34 2e 36 33 32 43 36 30 20 31 39 2e 32 38 20 36 30 20 32 31 2e 38 38 20 36 30 20 32 35 2e 30 31 76 31 30 2e 32 63 30 20 39 2e 32 35 32 20 30 20 31 33 2e 38 37 37 2d 31 2e 39 37 20 31 37 2e 33 33 32 61 31 34 2e 39 39 38 20 31 34 2e 39 39 38 20 30 20 30 20 31 2d 35 2e 35 39 38 20 35 2e 35 39 38 63 2d 32 2e 31 33 31 20 31 2e 32 31 35 2d 34 2e 37 30 38 20 31 2e 36 38 31 2d 38 2e 35 34 20 31 2e 38 36 48 31 36 2e 31 30 38 5a 22 20 66 69 6c 6c 3d 22 23 32 42 45 45 36 43 22 2f 3e Data Ascii: .712a2 2 0 0 1 1.428-1.016l4.134-.689a2 2 0 0 1 1.61.437l3.892 3.243a2 2 0 0 0 2.694-.122l4.633-4.632C60 19.28 60 21.88 60 25.01v10.2c0 9.252 0 13.877-1.97 17.332a14.998 14.998 0 0 1-5.598 5.598c-2.131 1.215-4.708 1.681-8.54 1.86H16.108Z" fill="#2BEE6C"/>
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 39 2e 35 20 31 39 61 35 2e 35 20 35 2e 35 20 30 20 31 20 31 2d 31 31 20 30 20 35 2e 35 20 35 2e 35 20 30 20 30 20 31 20 31 31 20 30 5a 22 20 66 69 6c 6c 3d 22 23 32 42 45 45 36 43 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 34 37 2e 35 20 31 39 61 33 2e 35 20 33 2e 35 20 30 20 31 20 31 2d 37 20 30 20 33 2e 35 20 33 2e 35 20 30 20 30 20 31 20 37 20 30 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 34 35 20 2e 32 38 33 76 35 39 2e 36 35 34 63 2d 2e 36 33 2e 30 34 32 2d 31 2e 32 39 34 2e 30 37 34 2d 32 20 2e 30 39 38 56 2e 31 38 35 63 2e 37 30 36 2e 30 32 35 20 31 2e 33 37 2e 30 35 36 20 32 20 2e 30 39 38 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 68 Data Ascii: venodd" d="M49.5 19a5.5 5.5 0 1 1-11 0 5.5 5.5 0 0 1 11 0Z" fill="#2BEE6C"/><path d="M47.5 19a3.5 3.5 0 1 1-7 0 3.5 3.5 0 0 1 7 0Z" fill="#fff"/><path d="M45 .283v59.654c-.63.042-1.294.074-2 .098V.185c.706.025 1.37.056 2 .098Z" fill="#fff"/><path class="h
2024-11-12 04:19:39 UTC	1024	IN	Data Raw: 68 20 69 64 3d 22 77 61 6c 6c 65 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 64 61 73 68 22 20 73 74 72 6f 6b 65 3d 22 23 30 30 30 22 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3d 22 34 20 34 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 31 2e 35 22 20 64 3d 22 4d 2e 30 34 20 34 31 2e 37 30 38 61 32 33 31 2e 35 39 38 20 32 33 31 2e 35 39 38 20 30 20 30 20 31 2d 2e 30 33 39 2d 34 2e 34 30 33 6c 2e 37 35 2d 2e 30 30 31 4c 2e 37 35 20 33 35 2e 31 76 2d 32 2e 35 35 48 30 76 2d 35 2e 31 68 2e 37 35 56 32 34 2e 39 6c 2e 30 30 31 2d 32 2e 32 30 34 68 2d 2e 37 35 63 2e 30 30 33 2d 31 2e 36 31 37 2e 30 31 31 2d 33 2e 30 37 37 2e 30 33 39 2d 34 2e 34 30 34 6c 2e 37 35 2e 30 31 36 63 2e 30 33 34 2d 31 2e 36 35 2e 30 39 39 2d 33 2e 30 38 2e 32 31 38 2d 34 2e Data Ascii: h id="wallet-placeholder-dash" stroke="#000" stroke-dasharray="4 4" stroke-width="1.5" d="M.04 41.708a231.598 231.598 0 0 1-.039-4.403l.75-.001L.75 35.1v-2.55H0v-5.1h.75V24.9l.001-2.204h-.75c.003-1.617.011-3.077.039-4.404l.75.016c.034-1.65.099-3.08.218-4.
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 36 20 32 2e 37 38 37 2e 30 33 39 20 34 2e 34 30 33 6c 2d 2e 37 35 2e 30 30 31 2e 30 30 31 20 32 2e 32 30 34 76 32 2e 35 35 48 36 30 76 35 2e 31 68 2d 2e 37 35 76 32 2e 35 35 6c 2d 2e 30 30 31 20 32 2e 32 30 34 68 2e 37 35 61 32 33 31 2e 34 33 31 20 32 33 31 2e 34 33 31 20 30 20 30 20 31 2d 2e 30 33 39 20 34 2e 34 30 34 6c 2d 2e 37 35 2d 2e 30 31 36 63 2d 2e 30 33 34 20 31 2e 36 35 2d 2e 30 39 39 20 33 2e 30 38 2d 2e 32 31 38 20 34 2e 33 34 33 6c 2e 37 34 37 2e 30 37 63 2d 2e 31 35 39 20 31 2e 36 37 38 2d 2e 34 31 33 20 33 2e 30 38 33 2d 2e 38 32 32 20 34 2e 33 31 36 6c 2d 2e 37 31 32 2d 2e 32 33 36 61 31 30 2e 32 35 35 20 31 30 2e 32 35 35 20 30 20 30 20 31 2d 2e 38 32 37 20 31 2e 38 37 35 20 31 34 2e 32 34 32 20 31 34 2e 32 34 32 20 30 20 30 20 31 2d 31 Data Ascii: 6 2.787.039 4.403l-.75.001.001 2.204v2.55H60v5.1h-.75v2.55l-.001 2.204h.75a231.431 231.431 0 0 1-.039 4.404l-.75-.016c-.034 1.65-.099 3.08-.218 4.343l.747.07c-.159 1.678-.413 3.083-.822 4.316l-.712-.236a10.255 10.255 0 0 1-.827 1.875 14.242 14.242 0 0 1-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49856	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1234	OUT	GET /static/js/6458.c8caa6c4.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 42630 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:34 GMT Etag: "220916af03983dd5b9283c7c0f8a7bdc" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 d6b9c7bad28b271f1e800a50d49ab8a4.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:53115 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: jv3JF_HzJJAabSOuq9OkT4WAMgn11y48gbD2qdYEWhf5AUWlCAMuMw==
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 35 38 5d 2c 7b 34 39 30 33 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 7d 29 3b 76 61 72 20 65 2c 6e 2c 72 2c 73 2c 6f 2c 6d 2c 78 3d 61 28 34 37 33 31 33 29 2c 6c 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 64 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 Data Ascii: "use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[6458],{4903:function(i,t,a){a.d(t,{r:function(){return y}});var e,n,r,s,o,m,x=a(47313),l=["title","titleId"];function d(){return d=Object.assign?Object.assign.bind
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 35 2c 22 73 22 3a 5b 2d 31 30 5d 7d 2c 7b 22 74 22 3a 31 31 35 2c 22 73 22 3a 5b 33 36 30 5d 7d 5d 2c 22 69 78 22 3a 31 30 7d 2c 22 70 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 34 30 2c 31 34 30 2c 30 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 31 30 2e 32 35 2c 31 31 30 2e 32 35 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 37 2c 22 73 22 3a 5b Data Ascii: 5,"s":[-10]},{"t":115,"s":[360]}],"ix":10},"p":{"a":0,"k":[140,140,0],"ix":2},"a":{"a":0,"k":[110.25,110.25,0],"ix":1},"s":{"a":1,"k":[{"i":{"x":[0.833,0.833,0.833],"y":[0.833,0.833,0.833]},"o":{"x":[0.167,0.167,0.167],"y":[0.167,0.167,0.167]},"t":7,"s":[
2024-11-12 04:19:39 UTC	9862	IN	Data Raw: 39 2c 33 2e 37 38 39 2c 30 5d 7d 2c 7b 22 74 22 3a 35 34 2c 22 73 22 3a 5b 35 32 2e 35 2c 34 35 2c 30 5d 7d 5d 2c 22 69 78 22 3a 32 7d 2c 22 61 22 3a 7b 22 61 22 3a 30 2c 22 6b 22 3a 5b 31 31 30 2e 32 35 2c 31 31 30 2e 32 35 2c 30 5d 2c 22 69 78 22 3a 31 7d 2c 22 73 22 3a 7b 22 61 22 3a 31 2c 22 6b 22 3a 5b 7b 22 69 22 3a 7b 22 78 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 2c 22 79 22 3a 5b 30 2e 38 33 33 2c 30 2e 38 33 33 2c 30 2e 38 33 33 5d 7d 2c 22 6f 22 3a 7b 22 78 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 2c 22 79 22 3a 5b 30 2e 31 36 37 2c 30 2e 31 36 37 2c 30 2e 31 36 37 5d 7d 2c 22 74 22 3a 31 32 2c 22 73 22 3a 5b 30 2c 30 2c 31 30 30 5d 7d 2c 7b 22 74 22 3a 35 34 2c 22 73 22 3a 5b 35 2c 35 2c 31 30 30 5d Data Ascii: 9,3.789,0]},{"t":54,"s":[52.5,45,0]}],"ix":2},"a":{"a":0,"k":[110.25,110.25,0],"ix":1},"s":{"a":1,"k":[{"i":{"x":[0.833,0.833,0.833],"y":[0.833,0.833,0.833]},"o":{"x":[0.167,0.167,0.167],"y":[0.167,0.167,0.167]},"t":12,"s":[0,0,100]},{"t":54,"s":[5,5,100]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49854	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1234	OUT	GET /static/js/3046.6e077f08.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1930	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 16032 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:33 GMT Etag: "e80ee1a69fd6aeefe618fa9175a9fce6" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 ac0e9b19969df989a920e6d1b834d008.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:36551 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: pInSb4AJwOG7aAVvgvV-F9blyV_x-MA_Gp4eXWbGwkKxOe4Ms1qwqA==
2024-11-12 04:19:39 UTC	16032	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 30 34 36 5d 2c 7b 37 34 38 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 7d 29 3b 76 61 72 20 69 2c 61 3d 6e 28 38 35 35 35 34 29 2c 72 3d 6e 28 34 37 33 31 33 29 2c 6f 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 20 6c 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 Data Ascii: "use strict";(self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[3046],{74853:function(e,t,n){n.d(t,{s:function(){return m}});var i,a=n(85554),r=n(47313),o=["title","titleId"];function l(){return l=Object.assign?Object.assign.bi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49859	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1234	OUT	GET /static/js/8839.6d5fc415.chunk.js HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1929	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: application/javascript Content-Length: 9363 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:35 GMT Etag: "d3ce1ff04d9c9af9d15079f151301353" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 04ce5a607a98db6d08257633417b84d6.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:40745 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: 12fA0hBaoBiLbFlK97O-6E2x13MoMn6-VuHKZxWHz3dKwFgcU3w13A==
2024-11-12 04:19:39 UTC	9363	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 73 65 6e 64 69 74 5f 77 65 62 61 70 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 33 39 5d 2c 7b 38 33 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 7d 29 3b 76 61 72 20 61 3d 74 28 36 34 37 34 39 29 2c 6f 3d 74 28 35 33 30 34 36 29 2c 69 3d 74 28 35 38 33 33 35 29 2c 72 3d 22 50 61 67 65 48 65 61 64 65 72 57 69 74 68 4e 61 76 69 67 61 74 69 6f 6e 5f 68 65 61 64 65 72 5f 5f 68 56 61 64 7a 22 2c 6c 3d 22 50 61 67 65 48 65 61 64 65 72 57 69 74 68 4e 61 76 69 67 Data Ascii: (self.webpackChunkwesendit_webapp=self.webpackChunkwesendit_webapp\|\|[]).push([[8839],{83343:function(e,n,t){"use strict";t.d(n,{l:function(){return f}});var a=t(64749),o=t(53046),i=t(58335),r="PageHeaderWithNavigation_header__hVadz",l="PageHeaderWithNavig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49860	142.250.184.226	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1204	OUT	GET /pagead/viewthroughconversion/957027334/?random=1731385168509&cv=11&fst=1731385168509&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkc6-mNUJnx93ZQCoEeXiKs4yWnle5XNR5K8Pn0n6JHc-jZ1WdtV-wmTFIL
2024-11-12 04:19:39 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-12 04:19:39 UTC	675	IN	Data Raw: 31 32 64 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12d8(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-11-12 04:19:39 UTC	1378	IN	Data Raw: 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 65 61 6b 20 61 3b 67 3d 67 5b 66 5d 7d 63 3d 63 5b 63 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 70 26 26 64 3d 3d 3d 22 65 73 36 22 3f 67 5b 63 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 64 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 68 28 74 2c 63 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 3a 62 21 3d 3d 64 26 26 28 76 5b 63 5d 3d 3d 3d 76 6f 69 64 20 30 Data Ascii: r c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0
2024-11-12 04:19:39 UTC	1378	IN	Data Raw: 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 29 29 7c 7c 52 28 22 53 69 6c 6b 22 29 7d 3b 21 52 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 55 28 29 3b 55 28 29 3b 52 28 22 53 61 66 61 72 69 22 29 26 26 28 55 28 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 54 28 29 3f 30 3a 52 28 22 45 64 67 65 22 Data Ascii: dexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R("CriOS"))&&!(T()?0:R("Edge"))\|\|R("Silk")};!R("Android")\|\|U();U();R("Safari")&&(U()\|\|(T()?0:R("Coast"))\|\|(T()?0:R("Opera"))\|\|(T()?0:R("Edge"
2024-11-12 04:19:39 UTC	1378	IN	Data Raw: 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 63 3d 64 5b 66 2e 67 5d 7d 65 28 29 7d 76 61 72 20 58 3d 5b 22 73 73 5f 22 5d 2c 59 3d 73 7c 7c 7a 3b 58 5b 30 5d 69 6e 20 59 7c 7c 74 79 70 65 6f 66 20 59 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 59 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 58 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 5a 3b 58 2e 6c 65 6e 67 74 68 26 26 28 5a 3d 58 2e 73 68 69 66 74 28 29 29 3b Data Ascii: con&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.src=d[f.g]}e()}var X=["ss_"],Y=s\|\|z;X[0]in Y\|\|typeof Y.execScript=="undefined"\|\|Y.execScript("var "+X[0]); for(var Z;X.length&&(Z=X.shift());
2024-11-12 04:19:39 UTC	23	IN	Data Raw: 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ipr\x3dy'], []);})();
2024-11-12 04:19:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49864	3.69.70.211	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1122	OUT	GET /web2/api/users/public/advertisement-backgrounds HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	448	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:39 GMT Content-Type: application/json Content-Length: 2 Connection: close apigw-requestid: BHaWVjbeliAEPog= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2
2024-11-12 04:19:39 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49863	3.69.70.211	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1107	OUT	GET /web2/api/users/public/plans/WEB2 HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	452	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:39 GMT Content-Type: application/json Content-Length: 34012 Connection: close apigw-requestid: BHaWVjdsliAEPbQ= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2
2024-11-12 04:19:39 UTC	3639	IN	Data Raw: 5b 7b 22 6e 61 6d 65 22 3a 22 53 54 41 52 54 45 52 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 46 49 4c 45 5f 4d 41 4e 41 47 45 4d 45 4e 54 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4e 42 4d 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 41 44 44 52 45 53 53 5f 42 4f 4f 4b 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 59 45 41 52 4c 59 5f 44 49 53 43 4f 55 4e 54 5f 50 45 52 43 45 4e 54 41 47 45 22 2c 22 76 61 6c 75 65 22 3a 22 32 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 47 44 50 52 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 57 48 49 54 45 4c 41 42 4c 45 5f 49 4e 54 45 52 46 41 43 45 22 2c 22 Data Ascii: [{"name":"STARTER","settings":[{"name":"FILE_MANAGEMENT","value":"FALSE"},{"name":"NBM","value":"0"},{"name":"ADDRESS_BOOK","value":"FALSE"},{"name":"YEARLY_DISCOUNT_PERCENTAGE","value":"20"},{"name":"GDPR","value":"TRUE"},{"name":"WHITELABLE_INTERFACE","
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 42 52 41 4e 44 49 4e 47 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 52 45 46 45 52 52 41 4c 5f 52 45 57 41 52 44 53 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 41 56 45 5f 46 49 4c 45 53 5f 49 4e 5f 46 49 4c 45 4d 41 4e 41 47 45 52 22 2c 22 76 61 6c 75 65 22 3a 22 46 41 4c 53 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4d 4f 4e 54 48 4c 59 5f 43 4f 53 54 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 45 4e 43 52 59 50 54 49 4f 4e 22 2c 22 76 61 6c 75 65 22 3a 22 45 4e 43 52 59 50 54 49 4f 4e 5f 41 45 53 32 35 36 5f 54 4c 53 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 44 4f 57 4e 4c 4f 41 44 5f 53 54 41 54 49 53 Data Ascii: "TRUE"},{"name":"BRANDING","value":"FALSE"},{"name":"REFERRAL_REWARDS","value":"FALSE"},{"name":"SAVE_FILES_IN_FILEMANAGER","value":"FALSE"},{"name":"MONTHLY_COST","value":"0"},{"name":"ENCRYPTION","value":"ENCRYPTION_AES256_TLS"},{"name":"DOWNLOAD_STATIS
2024-11-12 04:19:39 UTC	13989	IN	Data Raw: 65 76 65 72 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 55 50 47 52 41 44 45 5f 53 54 4f 52 41 47 45 5f 31 30 30 30 5f 43 48 46 22 2c 22 76 61 6c 75 65 22 3a 22 32 30 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 53 48 41 52 45 44 5f 46 49 4c 45 5f 48 49 53 54 4f 52 59 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 50 45 52 46 4f 52 4d 41 4e 43 45 5f 49 4e 53 49 47 48 54 53 22 2c 22 76 61 6c 75 65 22 3a 22 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4c 4f 47 49 4e 5f 57 49 54 48 5f 44 41 41 50 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 46 49 4c 45 5f 43 48 52 4f 4e 49 43 22 2c 22 76 61 6c 75 65 22 3a 22 54 52 55 45 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 49 4e 43 52 45 41 53 45 5f 53 54 4f 52 41 47 45 5f 53 49 5a 45 22 2c 22 Data Ascii: ever"},{"name":"UPGRADE_STORAGE_1000_CHF","value":"20"},{"name":"SHARED_FILE_HISTORY","value":""},{"name":"PERFORMANCE_INSIGHTS","value":""},{"name":"LOGIN_WITH_DAAP","value":"TRUE"},{"name":"FILE_CHRONIC","value":"TRUE"},{"name":"INCREASE_STORAGE_SIZE","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49862	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:39 UTC	1251	OUT	GET /static/media/background.89952b18428ee1e72fb5.webp HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:39 UTC	1928	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: binary/octet-stream Content-Length: 281796 Connection: close Date: Tue, 12 Nov 2024 04:19:40 GMT Last-Modified: Tue, 15 Oct 2024 09:39:36 GMT Etag: "a013aa5320533f411c7ed3702817427f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 590590f04f79f692591f9db0e720a31c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:60159 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: phTySjlG8UmAqVGcqrawSMaAIKVFI2N3_v4MIlbeVGEYWSFsLfdKMA==
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 52 49 46 46 bc 4c 04 00 57 45 42 50 56 50 38 20 b0 4c 04 00 70 a3 0f 9d 01 2a 80 07 38 04 00 00 00 25 a5 98 fe 9d 5e bd 83 ff cc f6 7e fd ff b5 b9 f7 67 f5 1c ea a1 d7 e4 df 0e ce 9d b5 d5 ff fd e8 ee 03 c2 7f 44 2b cf dd df 17 7d da c6 5f 26 ea 9e fa 3c 35 fd bf c0 53 cf 7f bf 74 cb ff 75 dd af ba 9e c0 de 73 99 88 ff 93 d3 4b cc 53 fb be 93 1f f5 79 27 fb 77 d4 76 74 78 57 fc 3f 7f 3b f8 e3 ff c5 7f ff ff d7 e8 07 e8 07 f0 0f 47 cb 7f ff ef ff ff e2 4f ff fd c7 fe df ff ff 65 0f c1 ff ff cf 77 ff ff 64 bf bf fa ae 79 d2 e8 f1 f5 d1 ff a7 a7 bb 7a d7 ff ff b7 87 f8 0e 90 0f ff fe df fc df fe af fb fd e8 07 ea 3f 7e 3f e5 7d aa fa cf fa 97 bf 27 f5 df ef ff 70 3e 83 ff c6 ff ff ff 4f 80 bf ad ff a7 f7 9f d5 5f f0 5f d5 ff f5 ff 27 db 7f fa 9f ff ff ec 7f Data Ascii: RIFFLWEBPVP8 Lp*8%^~gD+}_&<5StusKSy'wvtxW?;GOewdyz?~?}'p>O__'
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 98 37 ac 2f 28 da 11 c3 d5 98 6e dc 59 d5 ec 73 a2 ee 2b 79 64 ea 8b 40 a6 b8 5c 16 95 ec 1b 05 f8 3a b2 31 da c5 b2 a2 41 20 74 f6 c6 0e 02 a4 a9 79 91 df 40 68 30 d2 47 75 a9 7f 73 67 b0 31 fb 92 ed 6d f2 44 7b 8a 52 dc 0e a3 3b ef f8 08 57 13 85 12 96 fe fc 6e 1e f1 d4 48 f8 9a f5 05 ed 8f 7d 79 48 18 32 3f 1e d1 17 e4 dd 83 2c 3c 91 db b9 ce 9a 38 6f 2c d0 9f 00 89 3f 2e dd 68 87 0b 79 0b 7f 11 af bc 9d 0a d6 27 18 de 9d 47 ca e3 40 73 ab 5f c9 f8 35 b7 1d 6c 7c c5 a0 81 0b 12 b3 f7 6a d3 db 81 7e df 00 f9 9a b1 49 a8 90 f5 64 82 6d 3a 6a 52 8c 1e 91 ea 25 49 cc e3 a5 4a a2 0c 0c af 52 a1 a6 c2 82 a6 69 3d 64 01 78 94 77 78 2c 68 07 21 b0 24 35 be 57 5e a1 62 fd 17 f5 8a 61 ef 2d 94 5d 21 d9 50 76 a6 ef 39 c0 83 e3 d9 db 16 8b 9c 59 a6 70 57 78 ec 22 Data Ascii: 7/(nYs+yd@\:1A ty@h0Gusg1mD{R;WnH}yH2?,<8o,?.hy'G@s_5l\|j~Idm:jR%IJRi=dxwx,h!$5W^ba-]!Pv9YpWx"
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 8b 18 63 14 a7 65 47 89 a3 7b 36 e7 b6 80 2b 0e 8b 3f 4a 48 54 1f a8 6d c0 dc 70 08 36 77 69 c3 00 e4 57 5b b4 54 9f a4 ea 03 a0 79 74 76 95 3b 2d 61 4f 2b c7 ce 30 12 2d 54 eb 71 8a 7b 28 8d 00 85 99 7e a4 5d bb 73 8c 49 d6 42 dd e9 3d 25 c0 1d fa bf 73 cf 65 c2 2a f9 6c 2e a6 ff 08 3a 34 ba c4 0f c1 27 c9 85 f6 ab 5b 8d b0 d8 2b 6f 02 cb c1 9c ed 0e 9f 36 60 6b 82 b3 04 ee ef 72 1e 31 40 e9 05 d8 62 ca 37 32 ca 80 21 bc b8 93 a0 aa 4c 87 ba d1 8c f9 13 98 23 78 89 17 56 d0 40 ba 4c 29 88 20 04 9f 77 97 4f 88 9a da 11 b7 3f ae f8 9b 2e 05 84 68 31 3b 04 81 14 0b e0 12 c7 99 f4 1f e8 6a 11 99 f7 30 95 41 61 01 b7 0e 87 3b 0a a7 e8 13 33 53 be fe 5d 3e 68 db e1 93 cb 85 63 f4 1e 1a 94 40 db 46 f2 d2 be 0c c4 fa 8d 51 52 63 6c fc 76 ae a5 3e 6d 64 59 1b b7 Data Ascii: ceG{6+?JHTmp6wiW[Tytv;-aO+0-Tq{(~]sIB=%se*l.:4'[+o6`kr1@b72!L#xV@L) wO?.h1;j0Aa;3S]>hc@FQRclv>mdY
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 8d 8f 62 7c 8c 0e a6 0b 75 d3 96 1f da f8 88 02 06 67 69 fa cc c3 9f e2 40 21 e8 6b 48 03 3f 51 79 2c 5c 00 a4 88 83 a3 88 05 4c e9 02 d3 f9 09 fd b8 ba 4d e2 b4 1b 31 2b e9 f4 ee b1 7d 55 62 04 7b f0 90 ef 17 e7 eb 39 12 98 96 4f eb 24 82 20 69 40 01 98 10 0e 84 5c 42 61 81 c4 08 f1 45 57 49 7b be c5 a3 53 e8 61 c1 64 45 cb 11 04 fd 6e 44 d4 c8 a2 18 9c 05 9c ec d3 25 47 28 be 09 61 20 f5 12 e2 be 40 c1 0f 9d 09 47 71 5d 58 d9 65 6d 01 a3 aa df 73 7f 88 7b 54 c7 72 9e 78 8a ee be 29 0e a0 89 e2 a0 1b 50 3f 9c e3 a4 27 55 3c 07 96 3f 33 c7 19 d1 ef 80 b6 94 5d 55 2c 7d 23 14 98 68 8d f1 ef bf fe 43 14 94 49 ce 1c 87 27 71 ad d9 e1 08 44 08 4b de 42 1f 6a 4d e6 a5 aa e9 bd 45 37 e3 4b 43 e7 f8 ff ab 09 48 16 84 f0 01 a1 5a b9 48 97 de 77 40 71 f2 9c d7 01 Data Ascii: b\|ugi@!kH?Qy,\LM1+}Ub{9O$ i@\BaEWI{SadEnD%G(a @Gq]Xems{Trx)P?'U<?3]U,}#hCI'qDKBjME7KCHZHw@q
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: e1 5c a7 29 4c 13 c0 3c 90 3d 3e 52 17 a2 73 25 d9 66 e6 46 24 1e 3d e5 27 a5 1a 9f 53 36 fa 94 b2 0f b5 03 8e 09 5f 00 a9 64 f3 61 91 1a 4b 3f e2 a7 a6 5b ca c3 34 f5 fb c7 25 b5 9a 23 6b 98 15 c4 6a 56 73 df e0 4b 28 f3 b3 28 1a 0b 0a 67 3d 74 fc fc 40 8a 20 7f e4 d1 04 01 4e 09 be 44 af ce bd 5d 4f 24 72 5e d0 99 a4 6c db 99 e0 9c 28 27 be 3e 5d 0b 4e 77 d2 ee 46 53 74 ca 91 78 b9 b1 87 80 0e 11 f5 99 44 9b db ad 26 cb f3 3c 91 a5 17 e1 1b d6 e6 6f a8 6c 77 18 bd 4d de 14 17 fa aa 0e bc 08 61 80 c0 1a 7b cc 46 74 60 3a 91 97 b3 cc 12 33 d6 5e 0e 4c 07 ce ec 7c 56 32 79 bc 56 95 eb 7a 69 25 bf d3 cc 02 71 c7 3b e6 f4 54 5d d9 05 92 9b 93 64 4f 44 ee 73 7c 11 6a 94 a4 3c df 55 64 f3 08 5c a5 b0 d8 e2 bc 7b 3f 56 20 05 67 12 1a fd da d0 9f 9f 1f 39 6c 18 Data Ascii: \)L<=>Rs%fF$='S6_daK?[4%#kjVsK((g=t@ ND]O$r^l('>]NwFStxD&<olwMa{Ft`:3^L\|V2yVzi%q;T]dODs\|j<Ud\{?V g9l
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: a5 8b a3 5a 02 eb 7f 90 f3 79 e3 8f b0 a7 74 d0 5a d5 b1 d9 df 7e ec 3a 9a 6b 66 11 5f 43 96 c3 56 dd f6 39 43 0b 61 63 39 82 fe bc 7f f1 fd 8b 59 6c e2 e9 ca 62 6b ff 56 f2 72 4d 27 a1 a2 77 16 af b5 19 70 ab 5a d6 91 10 4c 4a 9b c8 90 7b c9 29 20 3e b9 b7 71 51 57 d8 b9 4d 5a bb 1c 98 94 79 16 81 0f dc 42 f6 b4 64 ad ec 65 1e 19 45 57 1d 18 f3 c3 83 a7 34 aa 2d 49 12 a6 73 1f 3d 8b 7e ff a1 5c 49 03 a3 4a 8f 91 70 27 5e 19 d1 59 d3 ac 4c cc a6 63 da db c1 b6 fc 95 e0 6a d1 e0 94 6b 3e f6 ff 91 88 20 2e 90 43 8e d9 7d 6b d0 53 0a 0e f4 6a 30 da e3 f2 76 aa 6d e2 ce ac bd a1 86 43 7e 6c 57 69 2c 41 9b ce c9 ac 66 eb c6 bd 59 eb fe b4 0f 5c a3 d2 e7 b9 c4 eb 33 ad 9d e1 49 00 2a fa f9 dc 3a 3a fb cb 5b 01 b4 c8 13 29 0d fb 4f 8e 74 86 3b 95 f0 96 c2 e0 78 Data Ascii: ZytZ~:kf_CV9Cac9YlbkVrM'wpZLJ{) >qQWMZyBdeEW4-Is=~\IJp'^YLcjk> .C}kSj0vmC~lWi,AfY\3I*::[)Ot;x
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: de 08 ff 32 00 f1 fd fd 77 b5 92 10 4c 45 db 79 50 4a 59 d9 d4 8a 25 17 dd 06 2c 91 98 41 42 03 d7 e9 2a 05 69 61 f4 a6 3b e5 e2 27 0d f8 69 5b a9 b1 48 fd 18 6a 71 e2 66 6e 50 ab 67 33 c6 9c 7e d5 f4 b8 5c fb b9 fb 22 03 f0 e7 ce 16 fd 74 49 ce c9 dc a8 9f b0 b4 63 86 bd b2 e7 df 27 33 71 e7 9c f7 1f 90 12 1d 41 6c f2 0f 51 7c 59 21 f3 c5 72 50 71 3a 1d d9 3d 7d 2d 05 cd ef cc 86 59 76 d5 98 86 32 df 25 2e d6 41 e6 e7 f7 34 36 62 1e 54 ee 9d 5d 35 a5 b5 1c 81 db 04 e9 7f 19 f8 28 14 67 50 32 bc bc 56 73 ee d3 c4 71 44 ba 1d 06 25 79 00 22 35 b7 f2 73 8f df 1c 04 36 94 71 57 6f 26 78 e8 94 89 04 9b bf 73 7a 9c d8 ca 02 92 e9 89 f2 d0 69 e5 9e 86 5a 06 a9 9c be 71 f1 32 10 a8 ca 7a f0 15 5c 32 3b 3e e3 56 69 35 5c 47 2d 23 92 4a a5 62 99 19 a7 b1 5e 0c 97 Data Ascii: 2wLEyPJY%,AB*ia;'i[HjqfnPg3~\"tIc'3qAlQ\|Y!rPq:=}-Yv2%.A46bT]5(gP2VsqD%y"5s6qWo&xsziZq2z\2;>Vi5\G-#Jb^
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 2b 71 77 4f 10 60 c9 4a 08 db ed d8 af 27 c9 8a d1 2b 87 e0 64 50 e0 87 6a dd 29 24 2f 3e b3 77 0f 07 15 8f fc c8 f8 9a 2c 14 fb fd e6 43 54 09 b6 bc 21 6a 58 b9 4a b2 fe 4e 00 41 3c be 2a fb b1 f8 51 2e 20 bf 12 d5 2c 8f 46 e0 29 d7 61 67 0c b2 03 4d 7f e0 a9 96 26 bc e5 02 da 44 9a c7 3b 15 9e 00 1d 72 d9 5c 26 5e dd 0b cc 28 bd ed 3e 2b a1 56 14 f3 cd 1c 17 2f a4 6b d0 32 34 6a b6 42 98 51 e9 22 54 56 6b a5 75 72 44 28 f7 ad 2a 20 b5 6e 21 c1 f6 0f f6 6c cb 04 fa 11 f6 91 e0 8c 33 25 f2 b9 90 9f fb da c7 ec 8c ad 61 0b 52 cd 46 c5 21 b4 fe 79 db 71 c6 c2 d4 ca 53 53 15 c2 e3 fc 8a 74 a2 0b a0 44 2a 1e 38 9a 71 8d 7a 79 8b aa d6 fa e2 b8 d1 f9 60 8c 90 05 b7 2d 4b cb f5 de 42 99 c7 2f fa 98 78 29 56 5e b8 93 d8 0a 05 06 f3 59 97 a6 29 6f 95 b1 13 c3 7d Data Ascii: +qwO`J'+dPj)$/>w,CT!jXJNA<Q. ,F)agM&D;r\&^(>+V/k24jBQ"TVkurD( n!l3%aRF!yqSStD*8qzy`-KB/x)V^Y)o}
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: 6c d1 cb ab d6 f6 0e 88 0e 7c f3 41 a5 de c4 34 0f e8 05 c2 00 4f ca d6 f8 8b a6 3d 02 28 99 5b fa 14 ec 88 bc ea 51 7a 81 4f 4b bc 71 b2 97 dc 4b 96 f6 d0 d9 aa 8c 08 3f 99 b2 0c 89 c5 e4 8f b5 d5 3b 77 bc 26 e7 bb 7f af 92 f6 19 c2 d2 af a1 22 72 9c fb 28 32 6e a6 19 32 06 86 39 18 d8 1a 85 e0 5b 15 a1 7f 89 9a b8 00 4b 59 03 8b 7f a0 54 7c 70 76 69 ab 38 12 87 b0 33 93 10 52 9b ba 16 79 68 ab 4a 7c e2 ac 9b 06 c2 fd 70 8b 64 d9 48 49 79 53 31 ec 54 4e 23 ea 65 14 18 d4 44 6b 9b f4 2f 12 a9 b5 ed f5 9e 4a b9 5a 04 ed 63 d5 86 84 d0 1e f2 99 b4 91 99 cd d5 3b 15 18 4e 89 69 17 55 20 c0 96 5a 74 b1 09 6d 5d df aa 67 07 b4 a6 22 2c 9a a8 5f af 50 c9 28 49 a9 b0 68 2b fb a9 b2 7c 4e 7c f9 d6 ee c6 d3 70 f3 06 b4 44 60 9b fe 75 66 b8 59 dd c3 d7 db 7d d5 0a Data Ascii: l\|A4O=([QzOKqK?;w&"r(2n29[KYT\|pvi83RyhJ\|pdHIyS1TN#eDk/JZc;NiU Ztm]g",_P(Ih+\|N\|pD`ufY}
2024-11-12 04:19:39 UTC	16384	IN	Data Raw: c7 25 fd 59 85 29 ec 49 c1 e4 e7 af a4 e1 1b e3 9b 87 95 91 5a 19 04 93 b3 2d 1d 6a aa be 34 59 d6 c0 99 21 5c 1f 7f ea 15 cc 2d d7 e3 7b 54 20 76 fc 63 75 11 62 b9 8a d8 6d 06 43 ac 51 17 8f 18 5b fe f2 ce 88 68 5e f6 70 de df 76 ba c9 cf 29 d0 50 53 ec 97 5b 87 1c f2 58 73 be 31 49 5f ff 8f 78 2e b1 d5 d7 fe ba ca 1d 3a cb 04 f4 df 62 bf a3 9d 9f 10 06 69 91 c4 71 c7 80 c3 8d f8 89 30 3d f8 2a 0d 88 fd 44 a8 ff 75 f7 b5 d9 96 9a 9c e0 a3 e1 8f 2b 7e d7 57 01 07 3f ed f4 b1 c9 ee 87 60 32 30 36 40 bf 61 b1 38 97 f4 2f 86 32 8b 8f 0b 7c b4 f2 4a a3 00 6f 4b c0 9b db 4a 3c 7d 23 91 17 96 1d e9 44 72 e4 29 14 72 aa 1b c5 c1 14 46 4f e6 b3 1d 2a 2f c6 c9 e2 a2 95 a8 34 78 51 1d cb df 86 ea b1 66 67 85 03 00 19 33 a2 41 36 05 ac 09 c7 8a 43 4a 3c 77 3e 33 90 Data Ascii: %Y)IZ-j4Y!\-{T vcubmCQ[h^pv)PS[Xs1I_x.:biq0=Du+~W?`206@a8/2\|JoKJ<}#Dr)rFO/4xQfg3A6CJ<w>3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49866	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	1540	OUT	GET /logo192.png HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:40 UTC	1916	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/png Content-Length: 5347 Connection: close Date: Tue, 12 Nov 2024 04:19:41 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "33dbdd0177549353eeeb785d02c294af" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 21a3da42c823b5a4a2d9c4c63248bbd6.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:34707 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: XL1Ehs-PR2AvM2gv8M5M4N0sgckrtKjnmiixq3VEcvTfRQtQZxQaGQ==
2024-11-12 04:19:40 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49865	13.225.78.46	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	1540	OUT	GET /favicon.ico HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:40 UTC	1942	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/vnd.microsoft.icon Content-Length: 9631 Connection: close Date: Mon, 11 Nov 2024 14:08:56 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "38f7bb276f622184ace609805b3d508f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 1bf129b8787cf2e96d3bce725554e4d4.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 51045 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:51195 Cloudfront-Viewer-Country: US X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: _mJqOIktvN9kgdz9CGP3zKwmzbTuHfXs36Nt1fJUHr2iMc8wS5upMg==
2024-11-12 04:19:40 UTC	9631	IN	Data Raw: 00 00 01 00 01 00 00 00 00 00 01 00 20 00 89 25 00 00 16 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 25 43 49 44 41 54 78 da ed 5d 07 9c 93 45 fa 9e 24 8b c8 a9 a7 c2 55 3d f1 f4 bc 3b 3c d4 03 76 93 2c bd 89 a7 27 76 11 94 b2 9b 64 97 a5 48 47 9a 28 1c d8 8e 43 6c 14 11 ce 46 51 aa 9e a0 54 01 91 de 95 8e 28 bd 8b f4 ba c0 fc e7 99 0d fe 61 37 bb 9b ec 26 93 2f c9 f3 fe 7e cf 8f 65 37 5f be ef 7b 67 e6 99 77 66 de 22 44 94 a4 54 b5 86 c2 9e 92 21 ec 4e af 70 24 37 11 c2 e5 bd 46 fd 7c bb dd e5 ad a3 90 ae f0 a2 c2 28 85 b9 76 b7 77 bd fa 77 bf c2 71 85 73 0a 92 20 2c 88 73 fe 3e ba df df 67 e7 fa fb 30 fa 72 9a ee db 4e 6f 39 e1 ce b8 c6 91 d2 58 Data Ascii: %PNGIHDR\rforNTw%CIDATx]E$U=;<v,'vdHG(ClFQT(a7&/~e7_{gwf"DT!Np$7F\|(vwwqs ,s>g0rNo9X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49867	3.69.70.211	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	1147	OUT	GET /web2/api/users/public/branding-by-url?url=secure_sharing0documentpreview HTTP/1.1 Host: api-prod.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:40 UTC	450	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:19:40 GMT Content-Type: application/json Content-Length: 222 Connection: close apigw-requestid: BHaWeiKSFiAEPRA= vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers x-content-type-options: nosniff x-xss-protection: 1; mode=block cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY basepath: web2
2024-11-12 04:19:40 UTC	222	IN	Data Raw: 7b 22 69 64 22 3a 32 30 33 2c 22 63 68 61 6e 6e 65 6c 4e 61 6d 65 22 3a 22 48 65 72 69 74 61 67 65 20 50 72 69 76 61 74 65 20 57 65 61 6c 74 68 22 2c 22 75 72 6c 22 3a 22 73 65 63 75 72 65 5f 73 68 61 72 69 6e 67 30 64 6f 63 75 6d 65 6e 74 70 72 65 76 69 65 77 22 2c 22 6c 69 6e 6b 54 6f 57 65 62 73 69 74 65 22 3a 6e 75 6c 6c 2c 22 63 68 61 6e 6e 65 6c 4c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 66 61 63 65 4c 6f 67 6f 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 31 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 32 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 33 22 3a 6e 75 6c 6c 2c 22 77 61 6c 6c 70 61 70 65 72 34 22 3a 6e 75 6c 6c 7d Data Ascii: {"id":203,"channelName":"Heritage Private Wealth","url":"secure_sharing0documentpreview","linkToWebsite":null,"channelLogo":null,"interfaceLogo":null,"wallpaper1":null,"wallpaper2":null,"wallpaper3":null,"wallpaper4":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49868	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	1226	OUT	GET /?timestamp=1731385175910 HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:40 UTC	1952	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: text/html Content-Length: 2938 Connection: close Date: Tue, 12 Nov 2024 04:19:41 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "6bc66faf4ef04baa93a407a9eae17cde" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 f99b5b46e77cfe9c3413f99dc8a4088c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=0, must-revalidate Clear-Site-Data: cache Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:54857 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: HFBnoFbySB_qW7vnDfFY0MyOnNdx_Afh85qXrc9YC9PRV5Yhn2FCBg==
2024-11-12 04:19:40 UTC	2938	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 64 65 70 72 65 63 61 74 65 64 2f 73 74 79 6c 65 73 2e 63 73 73 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><link rel="stylesheet" href="/deprecated/styles.css"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=5"/><meta name="descrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49869	157.240.253.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	717	OUT	GET /tr/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:40 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 12 Nov 2024 04:19:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49870	157.240.253.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	754	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=PageView&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385175205&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:40 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7436242725893732669", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7436242725893732669"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-11-12 04:19:40 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2024-11-12 04:19:40 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49871	142.250.186.132	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	1211	OUT	GET /pagead/1p-user-list/957027334/?random=1731385168509&cv=11&fst=1731384000000&bg=ffffff&guid=ON&async=1&gtm=45be4bb0v9168099683z871480359za201zb71480359&gcd=13l3l3l3l1l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&hn=www.googleadservices.com&frm=0&tiba=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&npa=0&pscdl=noapi&auid=2000241421.1731385166&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7diOQy8b3N4ZyGid-61ToGZRqCvUmaOy6iBNbxy6kRAA61f99p&random=735624657&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 12 Nov 2024 04:19:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49873	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:40 UTC	820	OUT	POST /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive Content-Length: 74732 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:40 UTC	16384	OUT	Data Raw: 7b 22 65 76 65 6e 74 5f 69 64 22 3a 22 33 34 33 39 66 37 36 31 35 31 35 33 34 36 39 63 61 38 36 61 31 63 31 31 35 65 61 65 66 31 66 64 22 2c 22 73 65 6e 74 5f 61 74 22 3a 22 32 30 32 34 2d 31 31 2d 31 32 54 30 34 3a 31 39 3a 33 39 2e 34 33 32 5a 22 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 73 65 6e 74 72 79 2e 6a 61 76 61 73 63 72 69 70 74 2e 72 65 61 63 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 39 32 2e 30 22 7d 2c 22 74 72 61 63 65 22 3a 7b 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 3a 22 70 72 6f 64 22 2c 22 72 65 6c 65 61 73 65 22 3a 22 76 33 2e 31 2e 35 22 2c 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 22 62 64 61 32 32 65 33 34 39 63 61 63 34 66 63 32 39 63 34 35 61 66 31 61 34 31 39 39 64 66 34 61 22 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 63 Data Ascii: {"event_id":"3439f7615153469ca86a1c115eaef1fd","sent_at":"2024-11-12T04:19:39.432Z","sdk":{"name":"sentry.javascript.react","version":"7.92.0"},"trace":{"environment":"prod","release":"v3.1.5","public_key":"bda22e349cac4fc29c45af1a4199df4a","trace_id":"ac
2024-11-12 04:19:40 UTC	16384	OUT	Data Raw: 46 64 6c 25 32 46 55 58 73 65 5a 36 4f 6a 38 57 54 38 63 57 78 48 71 25 32 46 62 58 56 6f 59 57 31 68 5a 43 35 68 5a 47 6b 75 62 58 56 78 63 6d 6c 41 63 32 6c 74 5a 57 52 68 63 6d 4a 35 4c 6d 4e 76 62 51 26 64 74 3d 53 65 63 75 72 65 25 32 30 53 77 69 73 73 25 32 30 46 69 6c 65 25 32 30 54 72 61 6e 73 66 65 72 25 32 30 25 32 36 25 32 30 44 65 63 65 6e 74 72 61 6c 69 7a 65 64 25 32 30 53 74 6f 72 61 67 65 25 32 30 25 37 43 25 32 30 57 65 53 65 6e 64 69 74 26 65 6e 3d 73 63 72 6f 6c 6c 26 65 70 6e 2e 70 65 72 63 65 6e 74 5f 73 63 72 6f 6c 6c 65 64 3d 39 30 26 5f 65 74 3d 35 32 26 74 66 64 3d 31 33 30 36 39 22 2c 22 6f 70 22 3a 22 68 74 74 70 2e 63 6c 69 65 6e 74 22 2c 22 70 61 72 65 6e 74 5f 73 70 61 6e 5f 69 64 22 3a 22 39 64 38 38 36 31 65 39 34 39 33 35 Data Ascii: Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&dt=Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit&en=scroll&epn.percent_scrolled=90&_et=52&tfd=13069","op":"http.client","parent_span_id":"9d8861e94935
2024-11-12 04:19:40 UTC	16384	OUT	Data Raw: 70 61 6e 5f 69 64 22 3a 22 61 37 32 61 38 33 30 39 64 63 66 62 31 34 37 37 22 2c 22 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 31 33 38 35 31 36 36 2e 39 32 33 32 30 30 31 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 31 33 38 35 31 36 38 2e 34 31 35 35 30 30 32 2c 22 74 72 61 63 65 5f 69 64 22 3a 22 61 63 30 31 62 64 33 35 37 63 61 62 34 32 35 33 39 34 64 39 32 30 62 33 30 64 33 37 37 34 32 63 22 2c 22 6f 72 69 67 69 6e 22 3a 22 61 75 74 6f 2e 72 65 73 6f 75 72 63 65 2e 62 72 6f 77 73 65 72 2e 6d 65 74 72 69 63 73 22 7d 2c 7b 22 64 61 74 61 22 3a 7b 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 5f 74 72 61 6e 73 66 65 72 5f 73 69 7a 65 22 3a 33 32 34 39 39 34 2c 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 5f 63 6f 6e 74 65 6e 74 5f 6c 65 6e Data Ascii: pan_id":"a72a8309dcfb1477","start_timestamp":1731385166.9232001,"timestamp":1731385168.4155002,"trace_id":"ac01bd357cab425394d920b30d37742c","origin":"auto.resource.browser.metrics"},{"data":{"http.response_transfer_size":324994,"http.response_content_len
2024-11-12 04:19:40 UTC	16384	OUT	Data Raw: 63 30 31 62 64 33 35 37 63 61 62 34 32 35 33 39 34 64 39 32 30 62 33 30 64 33 37 37 34 32 63 22 2c 22 6f 72 69 67 69 6e 22 3a 22 61 75 74 6f 2e 72 65 73 6f 75 72 63 65 2e 62 72 6f 77 73 65 72 2e 6d 65 74 72 69 63 73 22 7d 2c 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5a 6f 6e 65 3a 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 22 2c 22 6f 70 22 3a 22 6d 61 72 6b 22 2c 22 70 61 72 65 6e 74 5f 73 70 61 6e 5f 69 64 22 3a 22 39 64 38 38 36 31 65 39 34 39 33 35 30 36 34 65 22 2c 22 73 70 61 6e 5f 69 64 22 3a 22 39 32 39 34 39 66 30 38 31 30 38 32 30 37 37 64 22 2c 22 73 74 61 72 74 5f 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 31 33 38 35 31 37 33 2e 37 34 34 32 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 31 33 38 35 31 37 33 2e 37 34 34 Data Ascii: c01bd357cab425394d920b30d37742c","origin":"auto.resource.browser.metrics"},{"description":"Zone:IntersectionObserver","op":"mark","parent_span_id":"9d8861e94935064e","span_id":"92949f081082077d","start_timestamp":1731385173.7442,"timestamp":1731385173.744
2024-11-12 04:19:40 UTC	9196	OUT	Data Raw: 2f 76 31 2f 61 63 63 6f 75 6e 74 2f 31 30 34 30 30 2f 73 65 73 73 69 6f 6e 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 7d 2c 22 74 79 70 65 22 3a 22 68 74 74 70 22 7d 2c 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 33 31 33 38 35 31 36 39 2e 32 36 35 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 73 65 6e 74 72 79 2e 65 76 65 6e 74 22 2c 22 65 76 65 6e 74 5f 69 64 22 3a 22 34 31 66 38 63 39 35 30 30 31 39 61 34 66 61 32 38 31 65 31 30 65 63 62 61 37 62 37 65 31 36 31 22 2c 22 6c 65 76 65 6c 22 3a 22 65 72 72 6f 72 22 2c 22 6d 65 73 73 61 67 65 22 3a 7b 22 5f 5f 73 65 6e 74 72 79 5f 78 68 72 5f 76 33 5f 5f 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 74 72 73 74 70 6c 73 65 2e 63 6f 6d 2f Data Ascii: /v1/account/10400/session","status_code":0},"type":"http"},{"timestamp":1731385169.265,"category":"sentry.event","event_id":"41f8c950019a4fa281e10ecba7b7e161","level":"error","message":{"__sentry_xhr_v3__":{"method":"POST","url":"https://api.trstplse.com/
2024-11-12 04:19:41 UTC	522	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 12 Nov 2024 04:19:41 GMT Content-Type: application/json Content-Length: 41 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-12 04:19:41 UTC	41	IN	Data Raw: 7b 22 69 64 22 3a 22 33 34 33 39 66 37 36 31 35 31 35 33 34 36 39 63 61 38 36 61 31 63 31 31 35 65 61 65 66 31 66 64 22 7d Data Ascii: {"id":"3439f7615153469ca86a1c115eaef1fd"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49874	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:41 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:41 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:19:41 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49875	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:41 UTC	1213	OUT	GET /favicon.ico HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:41 UTC	1942	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/vnd.microsoft.icon Content-Length: 9631 Connection: close Date: Mon, 11 Nov 2024 14:08:56 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "38f7bb276f622184ace609805b3d508f" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 a32f966fc5896281eb3de44fd8f57d40.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 51046 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:49605 Cloudfront-Viewer-Country: US X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: xaUKK8bUFq-rUT3w0cIk-QkC7vR2_dELkTyrlu6qacZ319-ruCXEMw==
2024-11-12 04:19:41 UTC	9631	IN	Data Raw: 00 00 01 00 01 00 00 00 00 00 01 00 20 00 89 25 00 00 16 00 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 25 43 49 44 41 54 78 da ed 5d 07 9c 93 45 fa 9e 24 8b c8 a9 a7 c2 55 3d f1 f4 bc 3b 3c d4 03 76 93 2c bd 89 a7 27 76 11 94 b2 9b 64 97 a5 48 47 9a 28 1c d8 8e 43 6c 14 11 ce 46 51 aa 9e a0 54 01 91 de 95 8e 28 bd 8b f4 ba c0 fc e7 99 0d fe 61 37 bb 9b ec 26 93 2f c9 f3 fe 7e cf 8f 65 37 5f be ef 7b 67 e6 99 77 66 de 22 44 94 a4 54 b5 86 c2 9e 92 21 ec 4e af 70 24 37 11 c2 e5 bd 46 fd 7c bb dd e5 ad a3 90 ae f0 a2 c2 28 85 b9 76 b7 77 bd fa 77 bf c2 71 85 73 0a 92 20 2c 88 73 fe 3e ba df df 67 e7 fa fb 30 fa 72 9a ee db 4e 6f 39 e1 ce b8 c6 91 d2 58 Data Ascii: %PNGIHDR\rforNTw%CIDATx]E$U=;<v,'vdHG(ClFQT(a7&/~e7_{gwf"DT!Np$7F\|(vwwqs ,s>g0rNo9X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49876	13.225.78.63	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:41 UTC	1213	OUT	GET /logo192.png HTTP/1.1 Host: secure_sharing0documentpreview.wesendit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.2000241421.1731385166; _tpapp=J9oNiNRJudyr4wwT2L9AmrLoZu3BLC2zcIlrOARgxbci0Z778XngvsKuNTZFRXu6dyfdkAuXF4RGkBHBkXNNMtb8VdQU4pCt; _ga=GA1.1.752911800.1731385168; _ga_EHZSQKTF1P=GS1.1.1731385168.1.0.1731385168.60.0.477598349; session-AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO=%7B%22gleapId%22%3A%22b9e83e06-31ad-4cc5-801d-23f8fdf9d430%22%2C%22gleapHash%22%3A%2277bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15%22%2C%22value%22%3A0%2C%22lang%22%3A%22en%22%7D; _hjSessionUser_3708882=eyJpZCI6IjcyZWU4NTkzLWMyNzUtNWEzMC1hZTM1LTJmN2ZjOTI3ODNiYyIsImNyZWF0ZWQiOjE3MzEzODUxNzUxMDUsImV4aXN0aW5nIjpmYWxzZX0=; _hjSession_3708882=eyJpZCI6ImRkNTRlOGZhLWU2OTUtNDhlMS05MDU2LTVkZWM4OTNiYmY5MyIsImMiOjE3MzEzODUxNzUxMDgsInMiOjAsInIiOjAsInNiIjowLCJzciI6MCwic2UiOjAsImZzIjoxLCJzcCI6MH0=; _fbp=fb.1.1731385175194.7870433017178493
2024-11-12 04:19:41 UTC	1916	IN	HTTP/1.1 200 OK Server: CloudFront Content-Type: image/png Content-Length: 5347 Connection: close Date: Tue, 12 Nov 2024 04:19:42 GMT Last-Modified: Tue, 15 Oct 2024 09:39:30 GMT Etag: "33dbdd0177549353eeeb785d02c294af" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Via: 1.1 e5b747ffd1713cb17ddd7d55234a3300.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 X-Xss-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: base-uri 'self'; connect-src 'self' https: wss:; default-src 'none'; img-src 'self' https://.gleap.io https: data: blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://.gleap.io https://player.vimeo.com https://td.doubleclick.net https://.sandbox.dat https://.datatrans.com https://.paypal.com https://.cloudflare.com https://.payrexx.com https://hooks.stripe.com https://verify.walletconnect.com; frame-ancestors 'self'; manifest-src 'self'; object-src 'none'; script-src 'self' https://.gleap.io https://.googletagmanager.com https://.google-analytics.com https://.trstplse.com https://.googleapis.com https://.doubleclick.net https://.datatrans.com https://.paypal.com https://.gstatic.com https://.crowdswap.org https://.cloudflare.com https://.payrexx.com https://.hotjar.com https://*.facebook.net 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=172800; includeSubDomains; preload Cache-Control: public, max-age=172800 Vary: Origin Branding: secure_sharing0documentpreview Cloudfront-Viewer-Address: 173.254.250.68:60273 Cloudfront-Viewer-Country: US X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: PxA3xWXhLwpYf6J8txxMxmobIgQfsaDMZfKxCwm1YqdRklFiCmCziQ==
2024-11-12 04:19:41 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49878	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:42 UTC	847	OUT	POST /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:42 UTC	38	OUT	Data Raw: 7b 22 74 69 6d 65 22 3a 31 33 2c 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6f 70 65 6e 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":13,"events":[],"opened":false}
2024-11-12 04:19:42 UTC	261	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 14 etag: W/"e-Fkkr+aQ8UxpFbTe0AOB6CrmW5fg" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:42 GMT connection: close
2024-11-12 04:19:42 UTC	14	IN	Data Raw: 7b 22 61 22 3a 5b 5d 2c 22 75 22 3a 30 7d Data Ascii: {"a":[],"u":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49879	34.120.195.249	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:43 UTC	496	OUT	GET /api/4505306090373120/envelope/?sentry_key=bda22e349cac4fc29c45af1a4199df4a&sentry_version=7&sentry_client=sentry.javascript.react%2F7.92.0 HTTP/1.1 Host: o4503915977375744.ingest.sentry.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:43 UTC	518	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 12 Nov 2024 04:19:43 GMT Content-Length: 0 vary: origin, access-control-request-method, access-control-request-headers access-control-allow-origin: * access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after cross-origin-resource-policy: cross-origin allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49880	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:45 UTC	349	OUT	GET /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:45 UTC	299	IN	HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 content-length: 152 vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:45 GMT connection: close
2024-11-12 04:19:45 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 65 73 73 69 6f 6e 73 2f 70 69 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /sessions/ping</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49881	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:51 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:51 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:19:51 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49882	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:52 UTC	847	OUT	POST /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:52 UTC	38	OUT	Data Raw: 7b 22 74 69 6d 65 22 3a 32 33 2c 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6f 70 65 6e 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":23,"events":[],"opened":false}
2024-11-12 04:19:52 UTC	261	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 14 etag: W/"e-Fkkr+aQ8UxpFbTe0AOB6CrmW5fg" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:52 GMT connection: close
2024-11-12 04:19:52 UTC	14	IN	Data Raw: 7b 22 61 22 3a 5b 5d 2c 22 75 22 3a 30 7d Data Ascii: {"a":[],"u":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49883	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:19:53 UTC	349	OUT	GET /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:19:53 UTC	299	IN	HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 content-length: 152 vary: Accept-Encoding date: Tue, 12 Nov 2024 04:19:53 GMT connection: close
2024-11-12 04:19:53 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 65 73 73 69 6f 6e 73 2f 70 69 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /sessions/ping</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49884	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:01 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:01 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:20:01 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49886	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:01 UTC	1648	OUT	GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false [TRUNCATED] Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:01 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 12 Nov 2024 04:20:01 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49885	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:01 UTC	1758	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_un [TRUNCATED] Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:01 UTC	1000	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7436242817116126859", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7436242817116126859"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-11-12 04:20:01 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2024-11-12 04:20:01 UTC	1753	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-11-12 04:20:01 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-11-12 04:20:01 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49887	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:02 UTC	847	OUT	POST /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:02 UTC	38	OUT	Data Raw: 7b 22 74 69 6d 65 22 3a 33 33 2c 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6f 70 65 6e 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":33,"events":[],"opened":false}
2024-11-12 04:20:03 UTC	261	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 14 etag: W/"e-Fkkr+aQ8UxpFbTe0AOB6CrmW5fg" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:20:03 GMT connection: close
2024-11-12 04:20:03 UTC	14	IN	Data Raw: 7b 22 61 22 3a 5b 5d 2c 22 75 22 3a 30 7d Data Ascii: {"a":[],"u":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49888	157.240.253.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:02 UTC	1385	OUT	GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false [TRUNCATED] Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:02 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 12 Nov 2024 04:20:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49889	157.240.253.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:02 UTC	1422	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385200093&cd[buttonFeatures]=%7B%22classList%22%3A%22Typography_base-text-bold-mobile__p-4yF%20Typography_tablet_base-text-bold-desktop__jChgV%20Button_button__E2EFk%20Button_primary__lKTj6%20Button_small__I6X0A%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Accept%5CnProcessing%22%2C%22numChildButtons%22%3A3%2C%22tag%22%3A%22button%22%2C%22type%22%3A%22button%22%2C%22name%22%3A%22%22%2C%22value%22%3A%22%22%7D&cd[buttonText]=Accept%0AProcessing&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_un [TRUNCATED] Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:03 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7436242819771882354", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7436242819771882354"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-11-12 04:20:03 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2024-11-12 04:20:03 UTC	1706	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49890	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:04 UTC	349	OUT	GET /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:04 UTC	299	IN	HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 content-length: 152 vary: Accept-Encoding date: Tue, 12 Nov 2024 04:20:04 GMT connection: close
2024-11-12 04:20:04 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 65 73 73 69 6f 6e 73 2f 70 69 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /sessions/ping</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49891	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:11 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:11 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:20:11 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49892	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:12 UTC	847	OUT	POST /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Gleap-Id: b9e83e06-31ad-4cc5-801d-23f8fdf9d430 Gleap-Hash: 77bbe4e7147cda1eabf4a98524542595b1905a1afbca9d779d247ecfc658df15 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Api-Token: AEIFIrbaR7QC9Q6OFmAQtHhsNcWLjEBO sec-ch-ua-platform: "Windows" Accept: / Origin: https://secure_sharing0documentpreview.wesendit.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:12 UTC	38	OUT	Data Raw: 7b 22 74 69 6d 65 22 3a 34 33 2c 22 65 76 65 6e 74 73 22 3a 5b 5d 2c 22 6f 70 65 6e 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"time":43,"events":[],"opened":false}
2024-11-12 04:20:12 UTC	261	IN	HTTP/1.1 200 OK x-powered-by: Express access-control-allow-origin: * content-type: application/json; charset=utf-8 content-length: 14 etag: W/"e-Fkkr+aQ8UxpFbTe0AOB6CrmW5fg" vary: Accept-Encoding date: Tue, 12 Nov 2024 04:20:12 GMT connection: close
2024-11-12 04:20:12 UTC	14	IN	Data Raw: 7b 22 61 22 3a 5b 5d 2c 22 75 22 3a 30 7d Data Ascii: {"a":[],"u":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49893	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:14 UTC	349	OUT	GET /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:14 UTC	299	IN	HTTP/1.1 404 Not Found x-powered-by: Express access-control-allow-origin: * content-security-policy: default-src 'none' x-content-type-options: nosniff content-type: text/html; charset=utf-8 content-length: 152 vary: Accept-Encoding date: Tue, 12 Nov 2024 04:20:14 GMT connection: close
2024-11-12 04:20:14 UTC	152	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 73 65 73 73 69 6f 6e 73 2f 70 69 6e 67 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /sessions/ping</pre></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:18 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:18 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:18 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 11 Nov 2024 13:19:38 GMT ETag: "0x8DD02537E74B538" x-ms-request-id: a1588731-601e-000d-094b-342618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042018Z-16547b76f7fcrtpchC1DFW52e80000000f80000000002fh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:18 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-12 04:20:18 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:19 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:19 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:19 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8a8ac7e4-f01e-0020-50a8-34956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042019Z-15869dbbcc6hgzkhhC1DFWgtqs00000006g000000000f2dy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:19 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:19 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:19 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:19 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 59c13bef-301e-0052-73a0-3465d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042019Z-15869dbbcc6j87jfhC1DFWr0yc000000079000000000nvnm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:19 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:19 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:19 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:19 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 053649b2-001e-00ad-26a0-34554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042019Z-17df447cdb5t94hvhC1DFWw9780000000bzg000000005hwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:19 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:19 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 9f0f5f99-201e-0096-25f1-2cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042019Z-16547b76f7f9rdn9hC1DFWfk7s0000000f0000000000qx7z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:19 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:19 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: a31f2de1-f01e-0096-7209-2d10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042019Z-16547b76f7f7jnp2hC1DFWfc300000000f2g00000000n4pb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:19 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:20 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1a2e7d6b-a01e-000d-7bfc-2cd1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042020Z-16547b76f7fknvdnhC1DFWxnys0000000f3g00000000g2r6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:20 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4486a485-001e-0034-28a3-34dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042020Z-17df447cdb528ltlhC1DFWnt1c0000000b6g00000000gnxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:20 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6d3b9569-701e-0001-03a2-34b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042020Z-17df447cdb56mx55hC1DFWvbt400000008d0000000004qyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:20 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:20 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 23cb21e1-e01e-0052-4e08-2cd9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042020Z-16547b76f7fx6rhxhC1DFW76kg0000000ezg00000000qvud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:20 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:20 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:20 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: a2886317-b01e-00ab-6c01-2ddafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042020Z-16547b76f7fxsvjdhC1DFWprrs0000000f4g000000000zvx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:20 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49907	67.207.79.245	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	596	OUT	OPTIONS /sessions/ping HTTP/1.1 Host: api.gleap.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: api-token,content-type,gleap-hash,gleap-id Origin: https://secure_sharing0documentpreview.wesendit.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:21 UTC	312	IN	HTTP/1.1 204 No Content x-powered-by: Express access-control-allow-origin: * access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE vary: Access-Control-Request-Headers access-control-allow-headers: api-token,content-type,gleap-hash,gleap-id date: Tue, 12 Nov 2024 04:20:21 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: a35c6270-a01e-000d-47a1-34d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042021Z-17df447cdb5l865xhC1DFW9n7g000000089000000000fmxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 2e9646c6-a01e-0098-2aa5-348556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042021Z-17df447cdb5g2j9ghC1DFWuyag00000005h000000000ppqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:21 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042021Z-16547b76f7f7rtshhC1DFWrtqn0000000f7g000000003b8b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-12 04:20:21 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:21 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 09da145b-201e-0033-5108-32b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042021Z-16547b76f7fkj7j4hC1DFW0a9g0000000f0000000000q1hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:21 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:21 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-12 04:20:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:21 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7c20effc-801e-0015-04a3-34f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241112T042021Z-17df447cdb5km9skhC1DFWy2rc0000000bz0000000005drs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-12 04:20:21 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49915	104.26.13.7	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:22 UTC	728	OUT	GET / HTTP/1.1 Host: messenger.gleap.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:22 UTC	1046	IN	HTTP/1.1 200 OK Date: Tue, 12 Nov 2024 04:20:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8GmY9%2FIB%2BcVjKle0DfzRmil14cCKIoBOdeuX3jLU8qbubYCxwgMmNKh0x%2B0wpnPJ4GjQW7k61U8FTXY6B1u4WIdVx84MBzJabcoIGJHKNcR%2FaKWjpMiANYCBJ3523JdgKRngQnU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server-Timing: cfCacheStatus;desc="DYNAMIC" Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8e13baa6ad676b46-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1196&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1306&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=2a9e9cbb6ca5f1d9&ts=226&x=0"
2024-11-12 04:20:22 UTC	323	IN	Data Raw: 35 31 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 76 69 65 77 70 6f 72 74 2d 66 69 74 3d 63 6f 76 65 72 2c 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d Data Ascii: 515<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="viewport-fit=cover,width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no"/><meta name="them
2024-11-12 04:20:22 UTC	985	IN	Data Raw: 31 39 32 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 2f 3e 3c 74 69 74 6c 65 3e 47 6c 65 61 70 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 73 72 63 3d 22 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 61 69 6e 2e 34 39 33 33 37 66 38 32 2e 6a 73 22 20 74 79 70 65 3d 22 64 30 64 66 38 31 31 38 38 32 32 30 34 61 64 61 31 34 65 34 62 36 37 64 2d 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 37 38 30 63 63 66 35 36 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f Data Ascii: 192.png"/><link rel="manifest" href="/manifest.json"/><title>Gleap Frame</title><script defer="defer" src="/static/js/main.49337f82.js" type="d0df811882204ada14e4b67d-text/javascript"></script><link href="/static/css/main.780ccf56.css" rel="stylesheet"></
2024-11-12 04:20:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49913	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:22 UTC	1440	OUT	GET /tr/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:22 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3403, tp=-1, tpl=-1, uplat=3, ullat=3 Alt-Svc: h3=":443"; ma=86400 Date: Tue, 12 Nov 2024 04:20:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49914	157.240.252.35	443	4960	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-12 04:20:22 UTC	1550	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=427391422902188&ev=SubscribedButtonClick&dl=https%3A%2F%2Fsecure_sharing0documentpreview.wesendit.com%2Fdl%2FUXseZ6Oj8WT8cWxHq%2FbXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ&rl=&if=false&ts=1731385220902&cd[buttonFeatures]=%7B%22classList%22%3A%22bb-feedback-button-classic%20%22%2C%22destination%22%3A%22%22%2C%22id%22%3A%22%22%2C%22imageUrl%22%3A%22%22%2C%22innerText%22%3A%22Feedback%22%2C%22numChildButtons%22%3A0%2C%22tag%22%3A%22div%22%2C%22type%22%3Anull%7D&cd[buttonText]=Feedback&cd[formFeatures]=%5B%5D&cd[pageFeatures]=%7B%22title%22%3A%22Secure%20Swiss%20File%20Transfer%20%26%20Decentralized%20Storage%20%7C%20WeSendit%22%7D&sw=1280&sh=1024&v=2.9.176&r=stable&a=tmSimo-GTM-WebTemplate&ec=2&o=4126&fbp=fb.1.1731385175194.7870433017178493&ler=empty&cdl=API_unavailable&it=1731385168471&coo=false&es=automatic&tm=3&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://secure_sharing0documentpreview.wesendit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-12 04:20:22 UTC	1000	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7436242907055684304", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7436242907055684304"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-11-12 04:20:22 UTC	1834	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 77 61 73 6d 2d 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 67 6f Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com .facebook.com .fbcdn.net;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'wasm-unsafe-eval' https://*.go
2024-11-12 04:20:22 UTC	1753	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-11-12 04:20:22 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-11-12 04:20:22 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Target ID:	0
Start time:	23:19:16
Start date:	11/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	23:19:18
Start date:	11/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2224,i,15245652055953037118,15303302441320958094,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	23:19:21
Start date:	11/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Windows Analysis Report
https://secure_sharing0documentpreview.wesendit.com/dl/UXseZ6Oj8WT8cWxHq/bXVoYW1hZC5hZGkubXVxcmlAc2ltZWRhcmJ5LmNvbQ